# changelog

author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-23
changelog:
  - Modify the test suite to better handle disabled SSL/TLS versions and FIPS mode
  - Use OpenSSL's DRBG and disable os.getrandom() function in FIPS mode
  Resolves: rhbz#1754028, rhbz#1754027, rhbz#1754026, rhbz#1774471


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-24
changelog:
  - Build Python with -fno-semantic-interposition for better performance
  - https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup
  - Also fix test_gdb failures with Link Time Optimizations
  Resolves: rhbz#1724996


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-26
changelog:
  - Skip test_startup_imports from test_site if we have a .pth file in sys.path
  Resolves: rhbz#1814392


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-27
changelog:
  - Add a sentinel value on the Hmac_members table of the fips compliant hmac module
  Resolves: rhbz#1800512


author: Victor Stinner <vstinner@python.org> - 3.6.8-30
changelog:
  - Remove downstream 00178-dont-duplicate-flags-in-sysconfig.patch which
    introduced a bug on distutils.sysconfig.get_config_var('LIBPL')
    (rhbz#1851090).


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-31
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481
  - Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
  Resolves: rhbz#1854926


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-32
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in http.client
  Resolves: rhbz#1883257


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-33
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868003


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-34
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1890237


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-39
changelog:
  - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
  Resolves: rhbz#1995234


author: Victor Stinner <vstinner@redhat.com> - 3.6.8-39
changelog:
  - Fix reentrant call to threading.enumerate() (rhbz#1959459)
  - Don't exit Python with abort() when a thread exit and there is no available
    file descriptor to load dynamically the libgcc_s.so.1 library (rhbz#1972293)


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-43
changelog:
  - Change shouldRollover() methods of logging.handlers to only rollover regular files
  Resolves: rhbz#2009200


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-44
changelog:
  - Use the monotonic clock for theading.Condition
  - Use the monotonic clock for the global interpreter lock
  Resolves: rhbz#2003758


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-46
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2047376, rhbz#2060435


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-46
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2047376


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 4.19.6-3
changelog:
  - Python 2 binary packages renamed to python2-sip and python2-sip-devel
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-1
changelog:
  - Buildrequire audit-libs-devel to actually enable the feature (#1607612)
  - Update to rpm 4.14.2 final (http://rpm.org/wiki/Releases/4.14.2)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-7
changelog:
  - Move python-macro-helper to main package where the macros are (#1651926)
  - Document --noverify in the man page (#1646458)
  - Handle unsupported digests the same as disabled ones (#1652529)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-16
changelog:
  - Sort list of hard linked files in find-debuginfo.sh (#1421272)
  - Correct rpm -ql exit value when optional -p is omitted (#1680610)
  - Show list of files only once when use rpm -ql and multiple rpm files (#1689898)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-23
changelog:
  - Use --dpbath only with full path (#1696408)
  - Fix memory leaks (#1714657)
  - Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
  - Fix bash warning from solution for #1689810


author: Florian Festi <ffesti@redhat.com> - 4.14.2-31
changelog:
  - Parallelize /usr/lib/rpm/brp-strip-static-archive (#1691824)
  - Parallelize /usr/lib/rpm/check-buildroot (#1704354)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-5
changelog:
  - Don't error out when replacing an invalid signature (#1874062)
  - Raise an expection when erasing a package fails in Python (#1872623)
  - Fix builds on NFS filesystems (#1840728)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12
changelog:
  - Bump up the limit of signature header to 64MB (#1918777)
  - Add fapolicyd plugin (#1923167)
  - Unblock signals in forked scriptlets (#1913765)
  - Fix ambiguous diagnostics output on file triggers (#1883338)
  - Ensure ELF files get stripped when debuginfo is disabled (#1634084)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13
changelog:
  - Fix minor issues found by COVSCAN in fapolicyd plugin
  - Actually honor libarchive bcond at configure time (#1902887)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15
changelog:
  - Add out-of-bounds checks to hdrblobInit() (#1929445)
  - Fixes CVE-2021-20266
  - Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16
changelog:
  - Add support for read-only sqlite rpmdb (#1938928)
  - Drop compat .decode() method from returned Py3 strings (#1840142)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-20
changelog:
  - Add --path query option (#1940895)
  - Macroize find-debuginfo script location (#2019540)
  - Validate and require subkey binding sigs on PGP pubkeys (#1958480)
  - Fixes CVE-2021-3521


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-22
changelog:
  - Fix spurious %transfiletriggerpostun execution (#2023693)
  - Skip recorded symlinks in --setperms (#1900662)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.5.0-4
changelog:
  - Python 2 binary package renamed to python2-sanlock
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Matej Habrnal <mhabrnal@redhat.com> 0.21-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: Julius Milan <jmilan@redhat.com> 0.24-1
changelog:
  - New upstream version
    - Allow to report unpackaged problems
    - apidoc: generate html docs using doxygen
    - Fix parsing of subset of arm kernel oopses


author: Martin Kutlak <mkutlak@redhat.com> 0.25-1
changelog:
  - New upstream version
   - Normalization: actualize list of functions
   - Fix some compilation warnings
   - Allow to build python3 for rhel8
   - Makefile: add make release-* subcommands
   - Elfutils: Add missing stubs from earlier commit


author: Matej Habrnal <mhabrnal@redhat.com> 0.26-1
changelog:
  - spec: fix Allow python2 to be optional at build time
  - Allow python2 to be optional at build time
  - normalization: actualize list of functions
  - Append Python interpreter as related package
  - makefile: create .tar.xz with make release


author: Vit Mojzis <vmojzis@redhat.com> - 4.2.1-3
changelog:
  - Use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection


author: Vit Mojzis <vmojzis@redhat.com> - 4.3.0-1
changelog:
  - SETools 4.3.0 release (#1820079)
  - Revised sediff method for TE rules. This drastically reduced memory and run time.
  - Added infiniband context support to seinfo, sediff, and apol.
  - Added apol configuration for location of Qt assistant.
  - Fixed sediff issue where properties header would display when not requested.
  - Fixed sediff issue with type_transition file name comparison.
  - Fixed permission map socket sendto information flow direction.
  - Added methods to TypeAttribute class to make it a complete Python collection.
  - Genfscon now will look up classes rather than using fixed values which
    were dropped from libsepol.
  - setools requires -console, -console-analyses and -gui packages (#1820078)


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018.2-7
changelog:
  - Selectively build python2 or python3 based on current version.
  - Don't use pathfix.py as it fails prep on RHEL when building on systems
    do not have python installled.


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-13
changelog:
  - Fix two previous patches and add missing patch lines to %prep
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-14
changelog:
  - Fix unbound-1.7.3-amplifying-an-incoming-query.patch patch
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-15
changelog:
  - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key
  - Resolves: rhbz#1714175
  - Use system-wide crypto policy setting (PROFILE=SYSTEM) instead of custom setting
  - Resolves: rhbz#1842837
  - Enable additional logging in unbound
  - Resolves: rhbz#1850460
  - security hardening from x41 report
  - Resolves: rhbz#1859933
  - symbolic link traversal when writing PID file
  - Resolves: rhbz#1899058


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-16
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1922448


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-17
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1830625


author: Richard Lescak <rlescak@gmail.com> - 1.7.3-18
changelog:
  - Change file mode before owner when configuring remote control unix socket to avoid AVC denials
  - Resolves: rhbz#2038251


author: Petr Menšík <pemensik@redhat.com> - 1.16.0-1
changelog:
  - Upgrade to 9.16.0 (#2027735)
  - Update to recent version with compatibility with RHEL8 (#2027735)
  - Ensure also source level compatibility with previous version


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-11
changelog:
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839177 (CVE-2020-12662), rhbz#1840262 (CVE-2020-12663)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-12
changelog:
  - Remove KSK-2010 from configuration files
  - Resolves: rhbz#1665502
  - Replace legacy directory /var/run/ with /run
  - Resolves: rhbz#1766463
  - Resolves: rhbz#1805978
  - Fix memory leak when DNS over TLS forwarding is configured
  - Resolves: rhbz#1819870


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.9-16
changelog:
  - Python 2 binary package renamed to python2-volume_key
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jiri Kucera <jkucera@redhat.com>
changelog:
  - fixed License
  - Requires: /usr/bin/gpg2 in libs subpackage
  - Added support for opening all types of LUKS devices
    Resolves: #1626974


author: Tomas Orsava <torsava@redhat.com> - 3.8.0-2
changelog:
  - Converting to RHEL8
  - Changes from Fedora
    - Removed gpgverifycation as the tool used in Fedora is not present in RHEL8
    - Added versioned pathfix.py and 2to3 scripts into bindir
    - Depend on python3-rpm-generators always, because they run on Python 3.6
  - Added python38-rpm-macros subpackage
    - Fixed py3_install_wheel macro because python38-pip does not have
      the --strip-prefix patch


author: Tomas Orsava <torsava@redhat.com> - 3.8.0-3
changelog:
  - Build Python with -fno-semantic-interposition for better performance
    https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup


author: Tomas Orsava <torsava@redhat.com> - 3.8.0-6
changelog:
  - Implement alternatives for /usr/bin/python, python3 and related executables
  - Resolves: rhbz#1807041


author: Lumír Balhar <lbalhar@redhat.com> - 3.8.6-2
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868006


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.8-3
changelog:
  - Security fix for CVE-2021-29921: Leading zeros in IPv4 addresses are no longer tolerated
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.13-1
changelog:
  - Rebase to 3.8.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.0-8
changelog:
  - Skip test_startup_imports from test_site if we have a .pth file in sys.path
  Resolves: rhbz#1815643


author: Tomas Orsava <torsava@redhat.com> - 3.8.3-1
changelog:
  - Rebased to 3.8.3 final
  - Backported changes from Fedora
    - Recommend python3-tkinter when tk is installed
    - Add bcond for no_semantic_interposition (enabled by default)
    - Update the ensurepip module to work with setuptools >= 45
  Resolves: rhbz#1847416


author: Petr Viktorin <pviktori@redhat.com> - 1.2.1-6
changelog:
  - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout
  - Enable parallel tests in Python 3 %check
  - Use macros for Python interpreter in tests


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1674101)
  - Drop Python 2 packages (not supported by SciPy >= 1.3)
  - Backported upstream patch for cKDTree (fixes FTBFS)


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.1-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.6-1
changelog:
  - Update to 3.9.6
  - Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.13-1
changelog:
  - Update to 3.9.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0~rc2-2
changelog:
  - Use upstream architecture names on Fedora 34+
  - https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names


author: Nikola Forró <nforro@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - Increase test timeout, 300 seconds is not always enough
    for test_logpdf_overflow on s390x
    resolves: #1894887


author: Tomas Orsava <torsava@redhat.com> - 1.5.4-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983 rhbz#1877430


author: Vladis Dronov <vdronov@redhat.com> - 1.0.9-1
changelog:
  - Rebuild for qatzip v1.0.9 (bz 2048039)
  - Update to require qatlib-devel >= 22.07.0 due to soversion bump


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-54.el8
changelog:
  - kvm-s390x-tcg-avoid-overflows-in-time2tod-tod2time.patch [bz#1653569]
  - kvm-s390x-kvm-pass-values-instead-of-pointers-to-kvm_s39.patch [bz#1653569]
  - kvm-s390x-tod-factor-out-TOD-into-separate-device.patch [bz#1653569]
  - kvm-s390x-tcg-drop-tod_basetime.patch [bz#1653569]
  - kvm-s390x-tcg-properly-implement-the-TOD.patch [bz#1653569]
  - kvm-s390x-tcg-SET-CLOCK-COMPARATOR-can-clear-CKC-interru.patch [bz#1653569]
  - kvm-s390x-tcg-implement-SET-CLOCK.patch [bz#1653569]
  - kvm-s390x-tcg-rearm-the-CKC-timer-during-migration.patch [bz#1653569]
  - kvm-s390x-tcg-fix-locking-problem-with-tcg_s390_tod_upda.patch [bz#1653569]
  - kvm-hw-s390x-Include-the-tod-qemu-also-for-builds-with-d.patch [bz#1653569]
  - kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1653569]
  - kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1653569]
  - kvm-migration-discard-non-migratable-RAMBlocks.patch [bz#1539285]
  - kvm-vfio-pci-do-not-set-the-PCIDevice-has_rom-attribute.patch [bz#1539285]
  - kvm-memory-exec-Expose-all-memory-block-related-flags.patch [bz#1539285]
  - kvm-memory-exec-switch-file-ram-allocation-functions-to-.patch [bz#1539285]
  - kvm-configure-add-libpmem-support.patch [bz#1539285]
  - kvm-hostmem-file-add-the-pmem-option.patch [bz#1539285]
  - kvm-mem-nvdimm-ensure-write-persistence-to-PMEM-in-label.patch [bz#1539285]
  - kvm-migration-ram-Add-check-and-info-message-to-nvdimm-p.patch [bz#1539285]
  - kvm-migration-ram-ensure-write-persistence-on-loading-al.patch [bz#1539285]
  - Resolves: bz#1539285
    ([Intel 8.0 Bug] [KVM][Crystal Ridge] Lack of data persistence guarantee of QEMU writes to host PMEM)
  - Resolves: bz#1653569
    (Stress guest and stop it, then do live migration, guest hit call trace on destination end)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-55.el8
changelog:
  - kvm-block-Don-t-inactivate-children-before-parents.patch [bz#1659395]
  - kvm-iotests-Test-migration-with-blockdev.patch [bz#1659395]
  - Resolves: bz#1659395
    (src qemu core dump when do migration ( block device node-name changed after change cdrom) - Slow Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-56.el8
changelog:
  - kvm-Run-iotests-as-part-of-the-build-process.patch [bz#1661026]
  - kvm-Introduce-the-qemu-kvm-tests-rpm.patch [bz#1601107]
  - Resolves: bz#1601107
    (qemu-kvm packaging: make running qemu-iotests more robust)
  - Resolves: bz#1661026
    (Run iotests as part of build process)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-58.el8
changelog:
  - kvm-block-Update-flags-in-bdrv_set_read_only.patch [bz#1644996]
  - kvm-block-Add-auto-read-only-option.patch [bz#1644996]
  - kvm-rbd-Close-image-in-qemu_rbd_open-error-path.patch [bz#1644996]
  - kvm-block-Require-auto-read-only-for-existing-fallbacks.patch [bz#1644996]
  - kvm-nbd-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-file-posix-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-curl-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-gluster-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-iscsi-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-block-Make-auto-read-only-on-default-for-drive.patch [bz#1644996]
  - kvm-qemu-iotests-Test-auto-read-only-with-drive-and-bloc.patch [bz#1644996]
  - kvm-block-Fix-update-of-BDRV_O_AUTO_RDONLY-in-update_fla.patch [bz#1644996]
  - kvm-qemu-img-Add-C-option-for-convert-with-copy-offloadi.patch [bz#1623082]
  - kvm-iotests-Add-test-for-qemu-img-convert-C-compatibilit.patch [bz#1623082]
  - Resolves: bz#1623082
    ([rhel.8.0]Target files for 'qemu-img convert' do not support thin_provisoning with iscsi/nfs backend)
  - Resolves: bz#1644996
    (block-commit can't be used with -blockdev)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-59.el8
changelog:
  - kvm-hw-scsi-cleanups-before-VPD-BL-emulation.patch [bz#1639957]
  - kvm-hw-scsi-centralize-SG_IO-calls-into-single-function.patch [bz#1639957]
  - kvm-hw-scsi-add-VPD-Block-Limits-emulation.patch [bz#1639957]
  - kvm-scsi-disk-Block-Device-Characteristics-emulation-fix.patch [bz#1639957]
  - kvm-scsi-generic-keep-VPD-page-list-sorted.patch [bz#1639957]
  - kvm-scsi-generic-avoid-out-of-bounds-access-to-VPD-page-.patch [bz#1639957]
  - kvm-scsi-generic-avoid-invalid-access-to-struct-when-emu.patch [bz#1639957]
  - kvm-scsi-generic-do-not-do-VPD-emulation-for-sense-other.patch [bz#1639957]
  - Resolves: bz#1639957
    ([RHEL.8] scsi host device passthrough limits IO writes - slow train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-60.el8
changelog:
  - kvm-ne2000-fix-possible-out-of-bound-access-in-ne2000_re.patch [bz#1636784]
  - kvm-rtl8139-fix-possible-out-of-bound-access.patch [bz#1636784]
  - kvm-pcnet-fix-possible-buffer-overflow.patch [bz#1636784]
  - kvm-net-ignore-packet-size-greater-than-INT_MAX.patch [bz#1636784]
  - kvm-net-drop-too-large-packet-early.patch [bz#1636784]
  - kvm-net-hub-suppress-warnings-of-no-host-network-for-qte.patch [bz#1636784]
  - kvm-virtio-net-test-accept-variable-length-argument-in-p.patch [bz#1636784]
  - kvm-virtio-net-test-remove-unused-macro.patch [bz#1636784]
  - kvm-virtio-net-test-add-large-tx-buffer-test.patch [bz#1636784]
  - kvm-s390x-Return-specification-exception-for-unimplement.patch [bz#1668261]
  - kvm-cpus-ignore-ESRCH-in-qemu_cpu_kick_thread.patch [bz#1665844]
  - Resolves: bz#1636784
    (CVE-2018-17963 qemu-kvm: Qemu: net: ignore packets with large size [rhel-8])
  - Resolves: bz#1665844
    (Guest quit with error when hotunplug cpu)
  - Resolves: bz#1668261
    ([RHEL8] Backport diag308 stable exception fix (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-61.el8
changelog:
  - kvm-qemu-ga-make-get-fsinfo-work-over-pci-bridges.patch [bz#1666952]
  - kvm-qga-fix-driver-leak-in-guest-get-fsinfo.patch [bz#1666952]
  - Resolves: bz#1666952
    (qemu-guest-agent does not parse PCI bridge links in "build_guest_fsinfo_for_real_device" (q35))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-62.el8
changelog:
  - kvm-slirp-check-data-length-while-emulating-ident-functi.patch [bz#1669069]
  - Resolves: bz#1669069
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-63.el8
changelog:
  - kvm-scsi-generic-avoid-possible-out-of-bounds-access-to-.patch [bz#1668162]
  - Resolves: bz#1668162
    (CVE-2019-6501 qemu-kvm: QEMU: scsi-generic: possible OOB access while handling inquiry request [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-63.el8_0.1
changelog:
  - kvm-device_tree-Fix-integer-overflowing-in-load_device_t.patch [bz#1693116]
  - Resolves: bz#1693116
    (CVE-2018-20815 qemu-kvm: QEMU: device_tree: heap buffer overflow while loading device tree blob [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-63.el8.0.0.2
changelog:
  - kvm-target-i386-define-md-clear-bit-rhev.patch [bz#1704545]
  - Resolves: bz#1704545
    (CVE-2018-12126 virt:rhel/qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-8.0.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-64.el8.0.0.2
changelog:
  - Bump release version to fix the versioning problem (zstream release lower than ystream).
  - Resolves: bz#1704545
    (CVE-2018-12126 virt:rhel/qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-8.0.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-65.el8_0_0.3
changelog:
  - kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1732324]
  - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1732324]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1732324]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1732324]
  - kvm-virtio-scsi-Move-BlockBackend-back-to-the-main-AioCo.patch [bz#1718992]
  - kvm-scsi-disk-Acquire-the-AioContext-in-scsi_-_realize.patch [bz#1718992]
  - kvm-virtio-scsi-Forbid-devices-with-different-iothreads-.patch [bz#1718992]
  - Resolves: bz#1718992
    (qemu-kvm core dumped after hotplug the deleted disk with iothread parameter [rhel-8.0.0.z])
  - Resolves: bz#1732324
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu()  [rhel-8.0.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-65.el8_0_0.4
changelog:
  - kvm-Introduce-new-no_guest_reset-parameter-for-usb-host-.patch [bz#1719228]
  - kvm-usb-call-reset-handler-before-updating-state.patch [bz#1719228]
  - kvm-usb-host-skip-reset-for-untouched-devices.patch [bz#1719228]
  - kvm-usb-host-avoid-libusb_set_configuration-calls.patch [bz#1719228]
  - kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734750]
  - Resolves: bz#1719228
    (Detached device when trying to upgrade USB device firmware when in doing USB Passthrough via QEMU [rhel-8.0.0.z])
  - Resolves: bz#1734750
    (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-8.0.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-65.el8_0_0.5
changelog:
  - kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1718235]
  - kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1718235]
  - kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1718235]
  - kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1718235]
  - kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1718235]
  - kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1718235]
  - kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1718235]
  - kvm-i386-Make-arch_capabilities-migratable.patch [bz#1718235]
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1718235]
  - Resolves: bz#1718235
    ([Intel 8.1 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM - qemu-kvm [rhel-8.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-78.el8
changelog:
  - kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1721983]
  - kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1721983]
  - Resolves: bz#1721983
    (qemu-kvm can't be build with new gluster version (6.0.6))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-80.el8
changelog:
  - kvm-qxl-check-release-info-object.patch [bz#1712705]
  - kvm-iotests-Make-182-do-without-device_add.patch [bz#1707598]
  - Resolves: bz#1707598
    (qemu-iotest 182 fails without device hotplugging support)
  - Resolves: bz#1712705
    (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-81.el8
changelog:
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1714792]
  - kvm-virtio-gpu-pass-down-VirtIOGPU-pointer-to-a-bunch-of.patch [bz#1531543]
  - kvm-virtio-gpu-add-iommu-support.patch [bz#1531543]
  - kvm-virtio-gpu-fix-unmap-in-error-path.patch [bz#1531543]
  - Resolves: bz#1531543
    ([RFE] add iommu support to virtio-gpu)
  - Resolves: bz#1714792
    ([Intel 8.1 FEAT] MDS_NO exposure to guest)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-82.el8
changelog:
  - kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1629906]
  - kvm-i386-Update-stepping-of-Cascadelake-Server.patch [bz#1629906]
  - kvm-target-i386-Disable-MPX-support-on-named-CPU-models.patch [bz#1629906]
  - kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-named-CPU-NEW.patch [bz#1629906]
  - kvm-i386-Disable-OSPKE-on-CPU-model-definitions-NEW.patch [bz#1629906]
  - kvm-block-ssh-Convert-from-DPRINTF-macro-to-trace-events.patch [bz#1513367]
  - kvm-block-ssh-Do-not-report-read-write-flush-errors-to-t.patch [bz#1513367]
  - kvm-qemu-iotests-Fix-paths-for-NFS.patch [bz#1513367]
  - kvm-qemu-iotests-Filter-NFS-paths.patch [bz#1513367]
  - kvm-iotests-Filter-SSH-paths.patch [bz#1513367]
  - kvm-block-ssh-Implement-.bdrv_refresh_filename.patch [bz#1513367]
  - kvm-iotests-Use-Python-byte-strings-where-appropriate.patch [bz#1513367]
  - kvm-iotests-Unify-log-outputs-between-Python-2-and-3.patch [bz#1513367]
  - kvm-ssh-switch-from-libssh2-to-libssh.patch [bz#1513367]
  - kvm-redhat-switch-from-libssh2-to-libssh.patch [bz#1513367]
  - kvm-block-gluster-limit-the-transfer-size-to-512-MiB.patch [bz#1728657]
  - kvm-s390-cpumodel-fix-description-for-the-new-vector-fac.patch [bz#1729975]
  - kvm-s390x-cpumodel-remove-esort-from-the-default-model.patch [bz#1729975]
  - kvm-s390x-cpumodel-also-change-name-of-vxbeh.patch [bz#1729975]
  - kvm-s390x-cpumodel-change-internal-name-of-vxpdeh-to-mat.patch [bz#1729975]
  - kvm-target-i386-sev-Do-not-unpin-ram-device-memory-regio.patch [bz#1728958]
  - kvm-i386-Save-EFER-for-32-bit-targets.patch [bz#1689269]
  - kvm-target-i386-rename-HF_SVMI_MASK-to-HF_GUEST_MASK.patch [bz#1689269]
  - kvm-target-i386-kvm-add-VMX-migration-blocker.patch [bz#1689269]
  - kvm-target-i386-kvm-just-return-after-migrate_add_blocke.patch [bz#1689269]
  - kvm-target-i386-kvm-Delete-VMX-migration-blocker-on-vCPU.patch [bz#1689269]
  - kvm-Introduce-kvm_arch_destroy_vcpu.patch [bz#1689269]
  - kvm-target-i386-kvm-Use-symbolic-constant-for-DB-BP-exce.patch [bz#1689269]
  - kvm-target-i386-kvm-Re-inject-DB-to-guest-with-updated-D.patch [bz#1689269]
  - kvm-target-i386-kvm-Block-migration-for-vCPUs-exposed-wi.patch [bz#1689269]
  - kvm-target-i386-kvm-do-not-initialize-padding-fields.patch [bz#1689269]
  - kvm-linux-headers-synchronize-generic-and-x86-KVM-header.patch [bz#1689269]
  - kvm-vmstate-Add-support-for-kernel-integer-types.patch [bz#1689269]
  - kvm-target-i386-kvm-Add-support-for-save-and-restore-nes.patch [bz#1689269]
  - kvm-target-i386-kvm-Add-support-for-KVM_CAP_EXCEPTION_PA.patch [bz#1689269]
  - kvm-target-i386-kvm-Add-nested-migration-blocker-only-wh.patch [bz#1689269]
  - kvm-target-i386-kvm-Demand-nested-migration-kernel-capab.patch [bz#1689269]
  - kvm-target-i386-skip-KVM_GET-SET_NESTED_STATE-if-VMX-dis.patch [bz#1689269]
  - kvm-i386-kvm-Do-not-sync-nested-state-during-runtime.patch [bz#1689269]
  - Resolves: bz#1513367
    (qemu with libssh)
  - Resolves: bz#1629906
    ([Intel 8.1 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
  - Resolves: bz#1689269
    (Nested KVM: support for migration of nested hypervisors - Slow Train)
  - Resolves: bz#1728657
    ('qemu-io write' to a raw image over libgfapi fails)
  - Resolves: bz#1728958
    (Hot unplug vfio-pci NIC devices from sev guest will cause qemu-kvm: sev_ram_block_removed: failed to unregister region)
  - Resolves: bz#1729975
    (RHEL 8.1 Pre-Beta - Fix for hardware CPU Model)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-83.el8
changelog:
  - kvm-hw-block-pflash_cfi01-Add-missing-DeviceReset-handle.patch [bz#1707192]
  - kvm-block-file-posix-Unaligned-O_DIRECT-block-status.patch [bz#1678979]
  - kvm-iotests-Test-unaligned-raw-images-with-O_DIRECT.patch [bz#1678979]
  - kvm-nbd-client-Lower-min_block-for-block-status-unaligne.patch [bz#1678979]
  - kvm-nbd-client-Reject-inaccessible-tail-of-inconsistent-.patch [bz#1678979]
  - kvm-nbd-client-Support-qemu-img-convert-from-unaligned-s.patch [bz#1678979]
  - kvm-block-Add-bdrv_get_request_alignment.patch [bz#1678979]
  - kvm-nbd-server-Advertise-actual-minimum-block-size.patch [bz#1678979]
  - kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1727642]
  - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1727642]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1727642]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1727642]
  - kvm-tap-set-vhostfd-passed-from-qemu-cli-to-non-blocking.patch [bz#1732642]
  - kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734751]
  - Resolves: bz#1678979
    (qemu-img convert abort when converting image with unaligned size (qemu-img: block/io.c:2134: bdrv_co_block_status: Assertion `*pnum && (((*pnum) % (align)) == 0) && align > offset - aligned_offset\' failed))
  - Resolves: bz#1707192
    (implement missing reset handler for cfi.pflash01 - slow train)
  - Resolves: bz#1727642
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu())
  - Resolves: bz#1732642
    (enable the virtio-net frontend to work with the vhost-net backend in SEV guests)
  - Resolves: bz#1734751
    (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-8.1.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-84.el8
changelog:
  - kvm-vnc-detect-and-optimize-pageflips.patch [bz#1727033]
  - kvm-block-backend-Make-blk_inc-dec_in_flight-public.patch [bz#1716349]
  - kvm-virtio-blk-Increase-in_flight-for-request-restart-BH.patch [bz#1716349]
  - kvm-block-Fix-AioContext-switch-for-drained-node.patch [bz#1716349]
  - kvm-test-bdrv-drain-AioContext-switch-in-drained-section.patch [bz#1716349]
  - kvm-block-Use-normal-drain-for-bdrv_set_aio_context.patch [bz#1716349]
  - kvm-block-Fix-AioContext-switch-for-bs-drv-NULL.patch [bz#1716347]
  - kvm-iothread-fix-crash-with-invalid-properties.patch [bz#1687541]
  - kvm-iothread-replace-init_done_cond-with-a-semaphore.patch [bz#1687541]
  - kvm-RHEL-disable-hostmem-memfd.patch [bz#1740797]
  - Resolves: bz#1687541
    (qemu aborted when start guest with a big iothreads)
  - Resolves: bz#1716347
    (Qemu Core dump when quit vm that's in status "paused(io-error)" with data plane enabled)
  - Resolves: bz#1716349
    (qemu with iothreads enabled crashes on resume after enospc pause for disk extension)
  - Resolves: bz#1727033
    (vnc server should detect page-flips and avoid sending fullscreen updates then.)
  - Resolves: bz#1740797
    (Disable memfd in QEMU)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-85.el8
changelog:
  - kvm-console-Avoid-segfault-in-screendump.patch [bz#1684383]
  - kvm-usb-hub-clear-suspend-on-detach.patch [bz#1619661]
  - kvm-qemu-img-fix-regression-copying-secrets-during-conve.patch [bz#1727821]
  - Resolves: bz#1619661
    (the attach hub on one hub still exits in device manager after unhotplug)
  - Resolves: bz#1684383
    (qemu crashed when take screenshot for 2nd head of virtio video device if the display not opened by virt-viewer)
  - Resolves: bz#1727821
    (Failed to convert a source image to the qcow2 image encrypted by luks)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-86.el8
changelog:
  - kvm-Do-not-run-iotests-on-brew-build.patch [bz#1742819]
  - kvm-target-ppc-spapr-Add-workaround-option-to-SPAPR_CAP_.patch [bz#1744415]
  - kvm-target-ppc-spapr-Add-SPAPR_CAP_CCF_ASSIST.patch [bz#1744415]
  - kvm-i386-x86_cpu_list_feature_names-function.patch [bz#1747185]
  - kvm-i386-unavailable-features-QOM-property.patch [bz#1747185]
  - kvm-file-posix-Handle-undetectable-alignment.patch [bz#1738839]
  - kvm-iotests-Tweak-221-sizing-for-different-hole-granular.patch [bz#1738839]
  - kvm-iotests-Filter-175-s-allocation-information.patch [bz#1738839]
  - kvm-block-posix-Always-allocate-the-first-block.patch [bz#1738839]
  - kvm-iotests-Test-allocate_first_block-with-O_DIRECT.patch [bz#1738839]
  - Resolves: bz#1738839
    (I/O error when virtio-blk disk is backed by a raw image on 4k disk)
  - Resolves: bz#1742819
    (Remove iotests from qemu-kvm builds [RHEL 8.1.0])
  - Resolves: bz#1744415
    (Backport support for count cache flush Spectre v2 mitigation [slow train])
  - Resolves: bz#1747185
    ("filtered-features" QOM property is not available)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-88.el8
changelog:
  - Revert fix for bz#1749724 - this got delayed to 8.2
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-88.el8_1_0.1
changelog:
  - kvm-s390-PCI-fix-IOMMU-region-init.patch [bz#1764829]
  - Resolves: bz#1764829
    (RHEL8.1 Snapshot3 - Passthrough PCI card goes into error state if used in domain (kvm) [rhel-8.1.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-88.el8_1_0.2
changelog:
  - kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771970]
  - kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771970]
  - Resolves: bz#1771970
    (CVE-2019-11135 virt:rhel/qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-8.1.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-88.el8_1_0.3
changelog:
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791565]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791565]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791565]
  - kvm-iscsi-Avoid-potential-for-get_status-overflow.patch [bz#1794500]
  - kvm-iscsi-Cap-block-count-from-GET-LBA-STATUS-CVE-2020-1.patch [bz#1794500]
  - Resolves: bz#1791565
    (CVE-2020-7039 virt:rhel/qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-8.1.0.z])
  - Resolves: bz#1794500
    (CVE-2020-1711 qemu-kvm: QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server [rhel-8.1.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-90.el8
changelog:
  - kvm-i386-Don-t-print-warning-if-phys-bits-was-set-automa.patch [bz#1719127]
  - kvm-Disable-CONFIG_I2C-and-CONFIG_IOH3420.patch [bz#1693140]
  - kvm-usb-drop-unnecessary-usb_device_post_load-checks.patch [bz#1757482]
  - kvm-pc-bios-s390-ccw-define-loadparm-length.patch [bz#1664376]
  - kvm-pc-bios-s390-ccw-net-Use-diag308-to-reset-machine-be.patch [bz#1664376]
  - kvm-s390-bios-decouple-cio-setup-from-virtio.patch [bz#1664376]
  - kvm-s390-bios-decouple-common-boot-logic-from-virtio.patch [bz#1664376]
  - kvm-s390-bios-Clean-up-cio.h.patch [bz#1664376]
  - kvm-s390-bios-Decouple-channel-i-o-logic-from-virtio.patch [bz#1664376]
  - kvm-s390-bios-Map-low-core-memory.patch [bz#1664376]
  - kvm-s390-bios-ptr2u32-and-u32toptr.patch [bz#1664376]
  - kvm-s390-bios-Support-for-running-format-0-1-channel-pro.patch [bz#1664376]
  - kvm-s390-bios-cio-error-handling.patch [bz#1664376]
  - kvm-s390-bios-Extend-find_dev-for-non-virtio-devices.patch [bz#1664376]
  - kvm-s390-bios-Factor-finding-boot-device-out-of-virtio-c.patch [bz#1664376]
  - kvm-s390-bios-Refactor-virtio-to-run-channel-programs-vi.patch [bz#1664376]
  - kvm-s390-bios-Use-control-unit-type-to-determine-boot-me.patch [bz#1664376]
  - kvm-s390-bios-Add-channel-command-codes-structs-needed-f.patch [bz#1664376]
  - kvm-s390-bios-Support-booting-from-real-dasd-device.patch [bz#1664376]
  - kvm-s390-bios-Use-control-unit-type-to-find-bootable-dev.patch [bz#1664376]
  - kvm-s390x-vfio-ap-Implement-hot-plug-unplug-of-vfio-ap-d.patch [bz#1660906]
  - Resolves: bz#1660906
    ([IBM 8.2 FEAT] KVM s390x: Crypto Passthrough Hotplug - qemu part)
  - Resolves: bz#1664376
    ([IBM 8.2 FEAT] CCW IPL Support (kvm) - qemu part)
  - Resolves: bz#1693140
    (aarch64: qemu: remove smbus_eeprom and i2c from config)
  - Resolves: bz#1719127
    ([Intel 8.2 Bug] warning shown when boot VM with “–cpu host” or “–cpu other mode” on ICX platform (physical))
  - Resolves: bz#1757482
    (Fail to migrate a rhel6.10-mt7.6 guest with dimm device)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-91.el8
changelog:
  - kvm-qapi-fill-in-CpuInfoFast.arch-in-query-cpus-fast.patch [bz#1730969]
  - kvm-curl-Keep-pointer-to-the-CURLState-in-CURLSocket.patch [bz#1744602]
  - kvm-curl-Keep-socket-until-the-end-of-curl_sock_cb.patch [bz#1744602]
  - kvm-curl-Check-completion-in-curl_multi_do.patch [bz#1744602]
  - kvm-curl-Pass-CURLSocket-to-curl_multi_do.patch [bz#1744602]
  - kvm-curl-Report-only-ready-sockets.patch [bz#1744602]
  - kvm-curl-Handle-success-in-multi_check_completion.patch [bz#1744602]
  - kvm-curl-Check-curl_multi_add_handle-s-return-code.patch [bz#1744602]
  - Resolves: bz#1730969
    ([ppc] qmp: The 'arch' value returned by the command 'query-cpus-fast' does not match)
  - Resolves: bz#1744602
    (qemu-img gets stuck when stream-converting from http)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-92.el8
changelog:
  - kvm-x86-cpu-use-FeatureWordArray-to-define-filtered_feat.patch [bz#1689270]
  - kvm-i386-Add-x-force-features-option-for-testing.patch [bz#1689270]
  - kvm-target-i386-define-a-new-MSR-based-feature-word-FEAT.patch [bz#1689270]
  - kvm-i386-display-known-CPUID-features-linewrapped-in-alp.patch [bz#1689270]
  - kvm-target-i386-kvm-kvm_get_supported_msrs-cleanup.patch [bz#1689270]
  - kvm-target-i386-handle-filtered_features-in-a-new-functi.patch [bz#1689270]
  - kvm-target-i386-introduce-generic-feature-dependency-mec.patch [bz#1689270]
  - kvm-target-i386-expand-feature-words-to-64-bits.patch [bz#1689270]
  - kvm-target-i386-add-VMX-definitions.patch [bz#1689270]
  - kvm-vmxcap-correct-the-name-of-the-variables.patch [bz#1689270]
  - kvm-target-i386-add-VMX-features.patch [bz#1689270]
  - kvm-target-i386-work-around-KVM_GET_MSRS-bug-for-seconda.patch [bz#1689270]
  - kvm-target-i386-adjust-for-missing-VMX-features.patch [bz#1689270]
  - kvm-target-i386-add-VMX-features-to-named-CPU-models.patch [bz#1689270]
  - kvm-target-i386-add-VMX-features-to-named-CPU-models-RHE.patch [bz#1689270]
  - kvm-vhost-fix-vhost_log-size-overflow-during-migration.patch [bz#1776808]
  - Resolves: bz#1689270
    (Nested KVM: limit VMX features according to CPU models - Slow Train)
  - Resolves: bz#1776808
    (qemu-kvm crashes when Windows VM is migrated with multiqueue)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-93.el8
changelog:
  - kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771971]
  - kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771971]
  - Resolves: bz#1771971
    (CVE-2019-11135 virt:rhel/qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-94.el8
changelog:
  - kvm-util-mmap-alloc-Add-a-is_pmem-parameter-to-qemu_ram_.patch [bz#1539282]
  - kvm-mmap-alloc-unfold-qemu_ram_mmap.patch [bz#1539282]
  - kvm-mmap-alloc-fix-hugetlbfs-misaligned-length-in-ppc64.patch [bz#1539282]
  - kvm-util-mmap-alloc-support-MAP_SYNC-in-qemu_ram_mmap.patch [bz#1539282]
  - kvm-x86-cpu-Enable-MOVDIRI-cpu-feature.patch [bz#1634827]
  - kvm-x86-cpu-Enable-MOVDIR64B-cpu-feature.patch [bz#1634827]
  - kvm-add-call-to-qemu_add_opts-for-overcommit-option.patch [bz#1634827]
  - kvm-support-overcommit-cpu-pm-on-off.patch [bz#1634827]
  - kvm-i386-cpu-make-cpu-host-support-monitor-mwait.patch []
  - kvm-x86-cpu-Add-support-for-UMONITOR-UMWAIT-TPAUSE.patch [bz#1634827]
  - kvm-target-i386-Add-support-for-save-load-IA32_UMWAIT_CO.patch [bz#1634827]
  - Resolves: bz#1539282
    ([Intel 8.2 Feature][Crystal Ridge] Support MAP_SYNC  - qemu-kvm)
  - Resolves: bz#1634827
    ([Intel 8.2 Feat] KVM Enable SnowRidge Accelerator Interface Architecture (AIA) - qemu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-95.el8
changelog:
  - kvm-virtio-gpu-block-both-2d-and-3d-rendering.patch [bz#1674324]
  - kvm-x86-Intel-AVX512_BF16-feature-enabling.patch [bz#1642541]
  - Resolves: bz#1642541
    ([Intel 8.2 Feature] qemu-kvm Enable BFloat16 data type support)
  - Resolves: bz#1674324
    (With <graphics type='spice'><gl enable='on'/>, qemu either refuses to start completely or spice-server crashes afterwards)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-96.el8
changelog:
  - kvm-i386-Remove-cpu64-rhel6-CPU-model.patch [bz#1741346]
  - Resolves: bz#1741346
    (Remove the "cpu64-rhel6" CPU from qemu-kvm)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-97.el8
changelog:
  - kvm-exec-Fix-MAP_RAM-for-cached-access.patch [bz#1769613]
  - kvm-virtio-Return-true-from-virtio_queue_empty-if-broken.patch [bz#1769613]
  - kvm-usbredir-Prevent-recursion-in-usbredir_write.patch [bz#1752320]
  - kvm-xhci-recheck-slot-status.patch [bz#1752320]
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791566]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791566]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791566]
  - Resolves: bz#1752320
    (vm gets stuck when migrate vm back and forth with remote-viewer trying to connect)
  - Resolves: bz#1769613
    ([SEV] kexec mays hang at "[sda] Synchronizing SCSI cache " before switching to new kernel)
  - Resolves: bz#1791566
    (CVE-2020-7039 virt:rhel/qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-98.el8
changelog:
  - kvm-iscsi-Avoid-potential-for-get_status-overflow.patch [bz#1794501]
  - kvm-iscsi-Cap-block-count-from-GET-LBA-STATUS-CVE-2020-1.patch [bz#1794501]
  - kvm-clean-up-callback-when-del-virtqueue.patch [bz#1708480]
  - kvm-virtio-add-ability-to-delete-vq-through-a-pointer.patch [bz#1708480]
  - kvm-virtio-reset-region-cache-when-on-queue-deletion.patch [bz#1708480]
  - kvm-virtio-net-delete-also-control-queue-when-TX-RX-dele.patch [bz#1708480]
  - Resolves: bz#1708480
    ([Q35] No "DEVICE_DELETED" event in qmp after unplug virtio-net-pci device)
  - Resolves: bz#1794501
    (CVE-2020-1711 qemu-kvm: QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server [rhel-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-99.el8
changelog:
  - kvm-slirp-disable-tcp_emu.patch [bz#1791677]
  - kvm-target-i386-kvm-initialize-feature-MSRs-very-early.patch [bz#1790308]
  - Resolves: bz#1790308
    (qemu-kvm core dump when do L1 guest live migration with L2 guest running)
  - Resolves: bz#1791677
    (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-99.el8.1
changelog:
  - kvm-util-add-slirp_fmt-helpers.patch [bz#1834477]
  - kvm-dhcpv6-use-slirp_fmt.patch [bz#1834477]
  - kvm-misc-use-slirp_fmt0.patch [bz#1834477]
  - kvm-tftp-use-slirp_fmt0.patch [bz#1834477]
  - kvm-tcp_ctl-use-slirp_fmt.patch [bz#1834477]
  - kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1834477]
  - Resolves: bz#1834477
    (CVE-2020-8608 virt:rhel/qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-8.2.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-99.el8_2.2
changelog:
  - kvm-vnc-add-magic-cookie-to-VncState.patch [bz#1816763]
  - kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1816763]
  - Resolves: bz#1816763
    (CVE-2019-20382 virt:rhel/qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-99.el8_2.3
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1838092 bz#1867075 bz#1870421]
  - Resolves: bz#1838092
    (CVE-2020-10756 virt:8.2/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])
  - Resolves: bz#1867075
    (CVE-2020-10756 virt:8.3/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])
  - Resolves: bz#1870421
    (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-8.2.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-99.el8_2.4
changelog:
  - kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869708]
  - Resolves: bz#1869708
    (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-8.2.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-30.el8
changelog:
  - kvm-i386-Mask-SVM-features-if-nested-SVM-is-disabled.patch [bz#1835390]
  - kvm-s390x-sigp-Fix-sense-running-reporting.patch [bz#1854092]
  - kvm-s390x-tcg-clear-local-interrupts-on-reset-normal.patch [bz#1854092]
  - kvm-virtio-net-fix-removal-of-failover-device.patch []
  - Resolves: bz#1835390
    (qemu promote host does not support 'EDX.npt' and 'EDX.nrip-save' when test with Q35 machine type on EPYC host)
  - Resolves: bz#1854092
    (kvm-unit-tests: tcg smp FAIL)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-31.el8
changelog:
  - kvm-qcow2-Fix-alloc_cluster_abort-for-pre-existing-clust.patch [bz#1807057]
  - kvm-iotests-026-Test-EIO-on-preallocated-zero-cluster.patch [bz#1807057]
  - kvm-iotests-026-Test-EIO-on-allocation-in-a-data-file.patch [bz#1807057]
  - kvm-iotests-026-Move-v3-exclusive-test-to-new-file.patch [bz#1807057]
  - Resolves: bz#1807057
    (qcow2_alloc_cluster_abort() frees preallocated zero clusters)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-32.el8
changelog:
  - kvm-i386-Add-2nd-Generation-AMD-EPYC-processors.patch [bz#1780385]
  - kvm-target-i386-sev-provide-proper-error-reporting-for-q.patch [bz#1689341]
  - kvm-target-i386-sev-fail-query-sev-capabilities-if-QEMU-.patch [bz#1689341]
  - kvm-s390x-protvirt-allow-to-IPL-secure-guests-with-no-re.patch [bz#1863034]
  - Resolves: bz#1689341
    (QEMU should report an error and return failure if AMD SEV is not enabled in the kernel)
  - Resolves: bz#1780385
    ([RFE] AMD EPYC-Rome support for KVM / QEMU guest)
  - Resolves: bz#1863034
    (RHEL8.3 Beta - Secure Execution: Unable to start Qemu with "-no-reboot" option (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-33.el8
changelog:
  - kvm-Require-libfdt-1.6.0.patch [bz#1867847]
  - Resolves: bz#1867847
    ([ppc] virt module 7629: /usr/libexec/qemu-kvm: undefined symbol: fdt_check_full, version LIBFDT_1.2)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-34.el8
changelog:
  - kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869710]
  - Resolves: bz#1869710
    (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-8.3.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-34.el8_3.1
changelog:
  - kvm-seccomp-fix-killing-of-whole-process-instead-of-thre.patch [bz#1890885]
  - Resolves: bz#1890885
    (qemu use SCMP_ACT_TRAP even SCMP_ACT_KILL_PROCESS is available [rhel-8.3.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-34.el8_3.2
changelog:
  - kvm-qga-fix-assert-regression-on-guest-shutdown.patch [bz#1900578]
  - Resolves: bz#1900578
    (qemu-ga aborts after guest-shutdown command [rhel-8.3.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-34.el8_3.3
changelog:
  - kvm-qapi-enable-use-of-g_autoptr-with-QAPI-types.patch [bz#1913818]
  - kvm-error-Fix-examples-in-error.h-s-big-comment.patch [bz#1913818]
  - kvm-error-Improve-error.h-s-big-comment.patch [bz#1913818]
  - kvm-error-Document-Error-API-usage-rules.patch [bz#1913818]
  - kvm-error-New-macro-ERRP_GUARD.patch [bz#1913818]
  - kvm-qga-add-command-guest-get-disks.patch [bz#1913818]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Linux.patch [bz#1913818]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Window.patch [bz#1913818]
  - kvm-qga-fix-missing-closedir-in-qmp_guest_get_disks.patch [bz#1913818]
  - kvm-qga-update-schema-for-guest-get-disks-dependents-fie.patch [bz#1913818]
  - Resolves: bz#1913818
    (Report logical_name for disks without mounted file-system [rhel-8.3.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-34.el8_3.4
changelog:
  - kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1919109]
  - kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1919109]
  - kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1919109]
  - Resolves: bz#1919109
    (CVE-2020-35517 virt:rhel/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest [rhel-8.3.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-34.el8_3.5
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1939493]
  - Resolves: bz#1939493
    (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-8.3.0.z] [rhel-8.3.0.z])


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 4.2.0-23.el8
changelog:
  - Resolves: bz#1810193
    (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)
    Another syncronization


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 4.2.0-25
changelog:
  - Resolves: bz#1810193
    (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)
    Another sync


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-28.el8
changelog:
  - kvm-redhat-Install-the-s390-netboot.img-that-we-ve-built.patch [bz#1828317]
  - kvm-linux-headers-update-kvm.h.patch [bz#1828317]
  - kvm-s390x-Don-t-do-a-normal-reset-on-the-initial-cpu.patch [bz#1828317]
  - kvm-s390x-Move-reset-normal-to-shared-reset-handler.patch [bz#1828317]
  - kvm-s390x-Move-initial-reset.patch [bz#1828317]
  - kvm-s390x-Move-clear-reset.patch [bz#1828317]
  - kvm-s390x-Beautify-diag308-handling.patch [bz#1828317]
  - kvm-s390x-kvm-Make-kvm_sclp_service_call-void.patch [bz#1828317]
  - kvm-s390x-Fix-cpu-normal-reset-ri-clearing.patch [bz#1828317]
  - kvm-tests-boot-sector-Fix-the-bad-s390x-assembler-code.patch [bz#1828317]
  - kvm-pc-bios-s390x-Fix-reset-psw-mask.patch [bz#1828317]
  - kvm-s390x-Properly-fetch-and-test-the-short-psw-on-diag3.patch [bz#1828317]
  - kvm-s390x-Rename-and-use-constants-for-short-PSW-address.patch [bz#1828317]
  - kvm-s390x-Add-missing-vcpu-reset-functions.patch [bz#1828317]
  - kvm-s390-sclp-improve-special-wait-psw-logic.patch [bz#1828317]
  - kvm-pc-bios-s390x-Save-iplb-location-in-lowcore.patch [bz#1828317]
  - kvm-s390-ipl-sync-back-loadparm.patch [bz#1828317]
  - kvm-s390-ipl-fix-off-by-one-in-update_machine_ipl_proper.patch [bz#1828317]
  - kvm-s390x-ipl-Consolidate-iplb-validity-check-into-one-f.patch [bz#1828317]
  - kvm-vhost-correctly-turn-on-VIRTIO_F_IOMMU_PLATFORM.patch [bz#1828317]
  - kvm-s390x-Move-diagnose-308-subcodes-and-rcs-into-ipl.h.patch [bz#1828317]
  - kvm-s390x-protvirt-Support-unpack-facility.patch [bz#1828317]
  - kvm-s390x-protvirt-Add-migration-blocker.patch [bz#1828317]
  - kvm-s390x-protvirt-Inhibit-balloon-when-switching-to-pro.patch [bz#1828317]
  - kvm-s390x-protvirt-KVM-intercept-changes.patch [bz#1828317]
  - kvm-s390x-Add-SIDA-memory-ops.patch [bz#1828317]
  - kvm-s390x-protvirt-Move-STSI-data-over-SIDAD.patch [bz#1828317]
  - kvm-s390x-protvirt-SCLP-interpretation.patch [bz#1828317]
  - kvm-s390x-protvirt-Set-guest-IPL-PSW.patch [bz#1828317]
  - kvm-s390x-protvirt-Move-diag-308-data-over-SIDA.patch [bz#1828317]
  - kvm-s390x-protvirt-Disable-address-checks-for-PV-guest-I.patch [bz#1828317]
  - kvm-s390x-protvirt-Move-IO-control-structures-over-SIDA.patch [bz#1828317]
  - kvm-s390x-protvirt-Handle-SIGP-store-status-correctly.patch [bz#1828317]
  - kvm-s390x-Add-unpack-facility-feature-to-GA1.patch [bz#1828317]
  - kvm-s390x-protvirt-Fix-stray-error_report_err-in-s390_ma.patch [bz#1828317]
  - kvm-s390x-pv-Retry-ioctls-on-EINTR.patch [bz#1828317]
  - kvm-s390x-s390-virtio-ccw-Fix-build-on-systems-without-K.patch [bz#1828317]
  - kvm-s390x-pv-Fix-KVM_PV_PREP_RESET-command-wrapper-name.patch [bz#1828317]
  - kvm-spapr-Pass-the-maximum-number-of-vCPUs-to-the-KVM-in.patch [bz#1756946]
  - kvm-introduce-kvm_kernel_irqchip_-functions.patch [bz#1756946]
  - kvm-target-s390x-kvm-Enable-adapter-interruption-suppres.patch [bz#1756946]
  - kvm-vfio-nvlink-Remove-exec-permission-to-avoid-SELinux-.patch [bz#1823275]
  - Resolves: bz#1756946
    ([zKVM] Re-enable KVM_CAP_S390_AIS for new machine types)
  - Resolves: bz#1823275
    (RHEL8.1 - GPU Numa nodes not visible in guest post the pass-through.)
  - Resolves: bz#1828317
    ([IBM 8.3 FEAT] s390x: Base KVM setup for secure guests - qemu part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-29.el8
changelog:
  - kvm-vfio-ccw-Fix-error-message.patch [bz#1660916]
  - kvm-vfio-ccw-allow-non-prefetch-ORBs.patch [bz#1660916]
  - kvm-linux-headers-support-vfio-ccw-features.patch [bz#1660916]
  - kvm-vfio-ccw-Refactor-cleanup-of-regions.patch [bz#1660916]
  - kvm-vfio-ccw-Add-support-for-the-schib-region.patch [bz#1660916]
  - kvm-vfio-ccw-Refactor-ccw-irq-handler.patch [bz#1660916]
  - kvm-s390x-css-Refactor-the-css_queue_crw-routine.patch [bz#1660916]
  - kvm-vfio-ccw-Add-support-for-the-CRW-region-and-IRQ.patch [bz#1660916]
  - kvm-config-enable-VFIO_CCW.patch [bz#1660916]
  - kvm-virtio-blk-Refactor-the-code-that-processes-queued-r.patch []
  - kvm-virtio-blk-On-restart-process-queued-requests-in-the.patch []
  - kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1838070]
  - Resolves: bz#1660916
    ([IBM 8.3 FEAT] KVM s390x: DASD passthrough support - qemu part)
  - Resolves: bz#1838070
    (CVE-2020-1983 virt:rhel/qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-39.el8
changelog:
  - kvm-ppc-spapr-Add-hotremovable-flag-on-DIMM-LMBs-on-drme.patch [bz#1901837]
  - kvm-ppc-spapr-re-assert-IRQs-during-event-scan-if-there-.patch [bz#1901837]
  - kvm-slirp-check-pkt_len-before-reading-protocol-header.patch [bz#1902237]
  - kvm-s390x-s390-virtio-ccw-Reset-PCI-devices-during-subsy.patch [bz#1905386]
  - kvm-qapi-enable-use-of-g_autoptr-with-QAPI-types.patch [bz#1859494]
  - kvm-error-Fix-examples-in-error.h-s-big-comment.patch [bz#1859494]
  - kvm-error-Improve-error.h-s-big-comment.patch [bz#1859494]
  - kvm-error-Document-Error-API-usage-rules.patch [bz#1859494]
  - kvm-error-New-macro-ERRP_GUARD.patch [bz#1859494]
  - kvm-qga-add-command-guest-get-disks.patch [bz#1859494]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Linux.patch [bz#1859494]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Window.patch [bz#1859494]
  - kvm-qga-fix-missing-closedir-in-qmp_guest_get_disks.patch [bz#1859494]
  - kvm-qga-update-schema-for-guest-get-disks-dependents-fie.patch [bz#1859494]
  - Resolves: bz#1859494
    (Report logical_name for disks without mounted file-system)
  - Resolves: bz#1901837
    (Failed to hotunplug pc-dimm device)
  - Resolves: bz#1902237
    (CVE-2020-29129 CVE-2020-29130 virt:rhel/qemu-kvm: QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets [rhel-8])
  - Resolves: bz#1905386
    (RHEL8.3 - s390x/s390-virtio-ccw: Reset PCI devices during subsystem reset (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-40.el8
changelog:
  - kvm-redhat-link-etc-qemu-ga-fsfreeze-hook-to-etc-qemu-kv.patch [bz#1910267]
  - kvm-qga-rename-Error-parameter-to-more-common-errp.patch [bz#1910326]
  - kvm-util-Introduce-qemu_get_host_name.patch [bz#1910326]
  - kvm-qga-Use-qemu_get_host_name-instead-of-g_get_host_nam.patch [bz#1910326]
  - kvm-redhat-add-un-pre-install-systemd-hooks-for-qemu-ga.patch [bz#1910220]
  - Resolves: bz#1910267
    (There is no soft link '/etc/qemu-kvm/fsfreeze-hook')
  - Resolves: bz#1910326
    (Incorrect hostname returned by  qga command 'guest-get-host-name')
  - Resolves: bz#1910220
    (qemu-ga service still active and can work after qemu-guest-agent been removed)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-41.el8
changelog:
  - kvm-udev-kvm-check-remove-the-exceeded-subscription-limi.patch [bz#1909244]
  - kvm-hw-arm-smmu-common-Factorize-some-code-in-smmu_ptw_6.patch [bz#1843852]
  - kvm-hw-arm-smmu-common-Add-IOTLB-helpers.patch [bz#1843852]
  - kvm-hw-arm-smmu-Introduce-smmu_get_iotlb_key.patch [bz#1843852]
  - kvm-hw-arm-smmu-Introduce-SMMUTLBEntry-for-PTW-and-IOTLB.patch [bz#1843852]
  - kvm-hw-arm-smmu-common-Manage-IOTLB-block-entries.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Introduce-smmuv3_s1_range_inval-helper.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Get-prepared-for-range-invalidation.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Fix-potential-integer-overflow-CID-143.patch [bz#1843852]
  - kvm-memory-Rename-memory_region_notify_one-to-memory_reg.patch [bz#1843852]
  - kvm-memory-Add-IOMMUTLBEvent.patch [bz#1843852]
  - kvm-memory-Add-IOMMU_NOTIFIER_DEVIOTLB_UNMAP-IOMMUTLBNot.patch [bz#1843852]
  - kvm-intel_iommu-Skip-page-walking-on-device-iotlb-invali.patch [bz#1843852]
  - kvm-memory-Skip-bad-range-assertion-if-notifier-is-DEVIO.patch [bz#1843852]
  - kvm-memory-clamp-cached-translation-in-case-it-points-to.patch [bz#1904393]
  - kvm-hw-ehci-check-return-value-of-usb_packet_map.patch [bz#1898628]
  - kvm-hw-net-e1000e-advance-desc_offset-in-case-of-null-de.patch [bz#1903070]
  - Resolves: bz#1909244
    (Remove KVM guest count and limit info message)
  - Resolves: bz#1843852
    (qemu core dumped: qemu-kvm: /builddir/build/BUILD/qemu-4.2.0/memory.c:1928: memory_region_notify_one: Assertion `entry->iova >= notifier->start && entry_end <= notifier->end' failed.)
  - Resolves: bz#1904393
    (CVE-2020-27821 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c [rhel-8])
  - Resolves: bz#1898628
    (CVE-2020-25723 virt:rhel/qemu-kvm: QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c [rhel-8])
  - Resolves: bz#1903070
    (CVE-2020-25707 CVE-2020-28916 virt:rhel/qemu-kvm: various flaws [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-42.el8
changelog:
  - kvm-linux-headers-add-vfio-DMA-available-capability.patch [bz#1905391]
  - kvm-s390x-pci-Move-header-files-to-include-hw-s390x.patch [bz#1905391]
  - kvm-vfio-Create-shared-routine-for-scanning-info-capabil.patch [bz#1905391]
  - kvm-vfio-Find-DMA-available-capability.patch [bz#1905391]
  - kvm-s390x-pci-Add-routine-to-get-the-vfio-dma-available-.patch [bz#1905391]
  - kvm-s390x-pci-Honor-DMA-limits-set-by-vfio.patch [bz#1905391]
  - kvm-s390x-fix-build-for-without-default-devices.patch [bz#1905391]
  - Resolves: bz#1905391
    (RHEL8.4 - s390x/pci: Honor vfio DMA limiting (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-43.el8
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1918054]
  - Resolves: bz#1918054
    (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-8.4.0])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-44.el8
changelog:
  - kvm-spapr-Improve-handling-of-fdt-buffer-size.patch [bz#1901837]
  - kvm-spapr-Fold-h_cas_compose_response-into-h_client_arch.patch [bz#1901837]
  - kvm-spapr-Don-t-use-spapr_drc_needed-in-CAS-code.patch [bz#1901837]
  - kvm-spapr-Fix-handling-of-unplugged-devices-during-CAS-a.patch [bz#1901837]
  - kvm-spapr-Allow-memory-unplug-to-always-succeed.patch [bz#1901837]
  - kvm-spapr-Improve-handling-of-memory-unplug-with-old-gue.patch [bz#1901837]
  - kvm-block-Require-aligned-image-size-to-avoid-assertion-.patch [bz#1834281]
  - kvm-file-posix-Allow-byte-aligned-O_DIRECT-with-NFS.patch [bz#1834281]
  - kvm-block-iscsi-fix-heap-buffer-overflow-in-iscsi_aio_io.patch [bz#1912974]
  - Resolves: bz#1834281
    (qemu-img convert abort when converting image with unaligned size)
  - Resolves: bz#1901837
    (Failed to hotunplug pc-dimm device)
  - Resolves: bz#1912974
    (CVE-2020-11947 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-45.el8
changelog:
  - kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1919111]
  - kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1919111]
  - kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1919111]
  - Resolves: bz#1919111
    (CVE-2020-35517 virt:rhel/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest [rhel-8.4.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-46.el8
changelog:
  - kvm-redhat-makes-qemu-respect-system-s-crypto-profile.patch [bz#1902960]
  - kvm-spapr-Adjust-firmware-path-of-PCI-devices.patch [bz#1912891]
  - Resolves: bz#1902960
    (QEMU doesn't honour system crypto policies)
  - Resolves: bz#1912891
    ([ppc64le] --disk cdimage.iso,bus=usb fails to boot)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-47.el8
changelog:
  - kvm-x86-cpu-Enable-AVX512_VP2INTERSECT-cpu-feature.patch [bz#1790620]
  - kvm-target-i386-add-fast-short-REP-MOV-support.patch [bz#1790620]
  - kvm-x86-cpu-Populate-SVM-CPUID-feature-bits.patch [bz#1790620]
  - kvm-i386-Add-the-support-for-AMD-EPYC-3rd-generation-pro.patch [bz#1790620]
  - Resolves: bz#1790620
    ([RFE] AMD Milan - Add KVM/support for EPYC-Milan CPU Model - Slow Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-48.el8
changelog:
  - kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917451]
  - Resolves: bz#1917451
    (CVE-2020-29443 virt:rhel/qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-8.4.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-48.el8_4
changelog:
  - kvm-net-remove-an-assert-call-in-eth_get_gso_type.patch [bz#1939494]
  - kvm-libqos-usb-hcd-ehci-use-32-bit-write-for-config-regi.patch [bz#1944621]
  - kvm-libqos-pci-pc-use-32-bit-write-for-EJ-register.patch [bz#1944621]
  - kvm-memory-Revert-memory-accept-mismatching-sizes-in-mem.patch [bz#1944621]
  - kvm-acpi-accept-byte-and-word-access-to-core-ACPI-regist.patch [bz#1944621]
  - kvm-xhci-fix-valid.max_access_size-to-access-address-reg.patch [bz#1944621]
  - kvm-softmmu-memory-Log-invalid-memory-accesses.patch [bz#1944621]
  - kvm-hw-intc-arm_gic-Fix-interrupt-ID-in-GICD_SGIR-regist.patch [bz#1952986]
  - Resolves: bz#1939494
    (CVE-2020-27617 virt:rhel/qemu-kvm: QEMU: net: an assert failure via eth_get_gso_type [rhel-8.4.0.z])
  - Resolves: bz#1944621
    (CVE-2020-13754 virt:rhel/qemu-kvm: QEMU: msix: OOB access during mmio operations may lead to DoS [rhel-8.4.0.z])
  - Resolves: bz#1952986
    (CVE-2021-20221 virt:rhel/qemu-kvm: qemu: out-of-bound heap buffer access via an interrupt ID field [rhel-8.4.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-48.el8_4.2
changelog:
  - kvm-pc-bios-s390-ccw-fix-off-by-one-error.patch [bz#1975679]
  - kvm-pc-bios-s390-ccw-break-loop-if-a-null-block-number-i.patch [bz#1975679]
  - kvm-pc-bios-s390-ccw-don-t-try-to-read-the-next-block-if.patch [bz#1975679]
  - Resolves: bz#1975679
    (RHEL8.4 Nightly[0322] - KVM guest fails to find zipl boot menu index (qemu-kvm) [rhel-8.4.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-48.el8_4.3
changelog:
  - kvm-net-introduce-qemu_receive_packet.patch [bz#1932917]
  - kvm-e1000-switch-to-use-qemu_receive_packet-for-loopback.patch [bz#1932917]
  - kvm-dp8393x-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
  - kvm-sungem-switch-to-use-qemu_receive_packet-for-loopbac.patch [bz#1932917]
  - kvm-tx_pkt-switch-to-use-qemu_receive_packet_iov-for-loo.patch [bz#1932917]
  - kvm-rtl8139-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
  - kvm-pcnet-switch-to-use-qemu_receive_packet-for-loopback.patch [bz#1932917]
  - kvm-cadence_gem-switch-to-use-qemu_receive_packet-for-lo.patch [bz#1932917]
  - kvm-lan9118-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
  - Resolves: bz#1932917
    (CVE-2021-3416 virt:rhel/qemu-kvm: QEMU: net: infinite loop in loopback mode may lead to stack overflow [rhel-8.4.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-50.el8
changelog:
  - kvm-hw-intc-arm_gic-Fix-interrupt-ID-in-GICD_SGIR-regist.patch [bz#1925430]
  - kvm-libqos-usb-hcd-ehci-use-32-bit-write-for-config-regi.patch [bz#1842478]
  - kvm-libqos-pci-pc-use-32-bit-write-for-EJ-register.patch [bz#1842478]
  - kvm-memory-Revert-memory-accept-mismatching-sizes-in-mem.patch [bz#1842478]
  - kvm-acpi-accept-byte-and-word-access-to-core-ACPI-regist.patch [bz#1842478]
  - kvm-xhci-fix-valid.max_access_size-to-access-address-reg.patch [bz#1842478]
  - kvm-softmmu-memory-Log-invalid-memory-accesses.patch [bz#1842478]
  - Resolves: bz#1925430
    (CVE-2021-20221 virt:rhel/qemu-kvm: qemu: out-of-bound heap buffer access via an interrupt ID field [rhel-8.5.0])
  - Resolves: bz#1842478
    (CVE-2020-13754 virt:rhel/qemu-kvm: QEMU: msix: OOB access during mmio operations may lead to DoS [rhel-8.5.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-51.el8
changelog:
  - kvm-linux-headers-Add-VFIO_CCW_REQ_IRQ_INDEX.patch [bz#1940450]
  - kvm-vfio-ccw-Connect-the-device-request-notifier.patch [bz#1940450]
  - kvm-pc-bios-s390-ccw-fix-off-by-one-error.patch [bz#1942880]
  - kvm-pc-bios-s390-ccw-break-loop-if-a-null-block-number-i.patch [bz#1942880]
  - kvm-pc-bios-s390-ccw-don-t-try-to-read-the-next-block-if.patch [bz#1942880]
  - Resolves: bz#1940450
    (RHEL8.5 - Mediated Device already in use by same domain we are booting (vfio-ccw/Multipath Testing) (kvm) - qemu-kvm part (also has kernel and libvirt parts))
  - Resolves: bz#1942880
    (RHEL8.4 Nightly[0322] - KVM guest fails to find zipl boot menu index (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-52.el8
changelog:
  - kvm-file-posix-Mitigate-file-fragmentation-with-extent-s.patch [bz#1877163]
  - kvm-block-file-posix-Fix-problem-with-fallocate-PUNCH_HO.patch [bz#1944861]
  - kvm-spapr-Remove-stale-comment-about-power-saving-LPCR-b.patch [bz#1969768]
  - kvm-spapr-Set-LPCR-to-current-AIL-mode-when-starting-a-n.patch [bz#1969768]
  - Resolves: bz#1877163
    ([FJ 8.3 Bug] The progress bar of the "virt-clone --nonsparse" command shows the progress rate exceeding 100%.)
  - Resolves: bz#1944861
    (Qemu-img convert fails when source image is on gpfs)
  - Resolves: bz#1969768
    ([ppc64le] Hotplug vcpu device hit call trace:[qemu output] KVM: unknown exit, hardware reason 7fff9ce87ed8)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-53.el8
changelog:
  - kvm-virtiofsd-Whitelist-fchmod.patch [bz#1967914]
  - kvm-spapr-Fix-EEH-capability-issue-on-KVM-guest-for-PCI-.patch [bz#1957866]
  - kvm-Compress-lines-for-immediate-return.patch [bz#1970912]
  - kvm-file-posix-Handle-EINVAL-fallocate-return-value.patch [bz#1970912]
  - Resolves: bz#1967914
    ([virtio-fs] virtiofsd quit when coping file to a folder in virtio-fs mounted volume(windows guest))
  - Resolves: bz#1957866
    (RHEL8.4 - EEH capability disabled on KVM guest and recovery of PCI passthru device fails(CX5 / mlx5_core) (qemu-kvm))
  - Resolves: bz#1970912
    (Deployment fails with "Invalid or missing agent token received")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-54.el8
changelog:
  - kvm-redhat-Fix-unversioned-Obsoletes-warning.patch [bz#1967329]
  - Resolves: bz#1967329
    (Make qemu-kvm use versioned obsoletes for qemu-kvm-ma and qemu-kvm-rhev)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-55.el8
changelog:
  - kvm-net-introduce-qemu_receive_packet.patch [bz#1932917]
  - kvm-e1000-switch-to-use-qemu_receive_packet-for-loopback.patch [bz#1932917]
  - kvm-dp8393x-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
  - kvm-sungem-switch-to-use-qemu_receive_packet-for-loopbac.patch [bz#1932917]
  - kvm-tx_pkt-switch-to-use-qemu_receive_packet_iov-for-loo.patch [bz#1932917]
  - kvm-rtl8139-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
  - kvm-pcnet-switch-to-use-qemu_receive_packet-for-loopback.patch [bz#1932917]
  - kvm-cadence_gem-switch-to-use-qemu_receive_packet-for-lo.patch [bz#1932917]
  - kvm-lan9118-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
  - Resolves: bz#1932917
    (CVE-2021-3416 virt:rhel/qemu-kvm: QEMU: net: infinite loop in loopback mode may lead to stack overflow)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.2.0-56
changelog:
  - kvm-glib-compat-add-g_unix_get_passwd_entry_qemu.patch [bz#1967716]
  - kvm-qga-add-ssh-add-remove-authorized-keys.patch [bz#1967716]
  - kvm-qga-add-reset-argument-to-ssh-add-authorized-keys.patch [bz#1967716]
  - kvm-qga-add-ssh-get-authorized-keys.patch [bz#1967716]
  - kvm-Add-mtod_check.patch [bz#1970819 bz#1970835 bz#1970843 bz#1970853]
  - kvm-bootp-limit-vendor-specific-area-to-input-packet-mem.patch [bz#1970819 bz#1970835 bz#1970843 bz#1970853]
  - kvm-bootp-check-bootp_input-buffer-size.patch [bz#1970819]
  - kvm-upd6-check-udp6_input-buffer-size.patch [bz#1970835]
  - kvm-tftp-check-tftp_input-buffer-size.patch [bz#1970843]
  - kvm-tftp-introduce-a-header-structure.patch [bz#1970819 bz#1970835 bz#1970843 bz#1970853]
  - kvm-udp-check-upd_input-buffer-size.patch [bz#1970853]
  - kvm-Fix-DHCP-broken-in-libslirp-v4.6.0.patch [bz#1970819 bz#1970835 bz#1970843 bz#1970853]
  - kvm-net-check-if-the-file-descriptor-is-valid-before-usi.patch [bz#1982134]
  - kvm-net-detect-errors-from-probing-vnet-hdr-flag-for-TAP.patch [bz#1982134]
  - Resolves: bz#1967716
    (RFE: rebuild guest agent to include public ssh injection api support)
  - Resolves: bz#1970819
    (CVE-2021-3592 virt:rhel/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) [rhel-8])
  - Resolves: bz#1970835
    (CVE-2021-3593 virt:rhel/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) [rhel-8])
  - Resolves: bz#1970843
    (CVE-2021-3595 virt:rhel/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) [rhel-8])
  - Resolves: bz#1970853
    (CVE-2021-3594 virt:rhel/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) [rhel-8])
  - Resolves: bz#1982134
    (QEMU core dump while booting guest with a non-exist fd on tap)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.2.0-57
changelog:
  - kvm-aio-wait-delegate-polling-of-main-AioContext-if-BQL-.patch [bz#1969848]
  - kvm-async-use-explicit-memory-barriers.patch [bz#1969848]
  - Resolves: bz#1969848
    (qemu-img convert hangs on aarch64)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-58.el8
changelog:
  - kvm-virtiofsd-Disable-remote-posix-locks-by-default.patch [bz#1967496]
  - kvm-virtiofsd-Fix-the-help-message-of-posix-lock.patch [bz#1967496]
  - Resolves: bz#1967496
    ([virtio-fs] nfs/xfstest generic/089 generic/478 generic/632 failed)


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-59
changelog:
  - kvm-scsi-make-io_timeout-configurable.patch [bz#1994041]
  - Resolves: bz#1994041
    (qemu-kvm scsi: change default passthrough timeout to non-infinite)


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-59.el8_5
changelog:
  - kvm-hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-allowed-in-MODE.patch [bz#2025605]
  - kvm-e1000-fix-tx-re-entrancy-problem.patch [bz#2025011]
  - Resolves: bz#2025605
    (CVE-2021-3930 virt:rhel/qemu-kvm: QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c [rhel-8.5.0.z])
  - Resolves: bz#2025011
    (CVE-2021-20257 virt:rhel/qemu-kvm: QEMU: net: e1000: infinite loop while processing transmit descriptors [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-59.el8_5.2
changelog:
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2048627]
  - Resolves: bz#2048627
    (CVE-2022-0358 virt:rhel/qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-60.el8_5.2
changelog:
  - kvm-target-i386-Declare-constants-for-XSAVE-offsets.patch [bz#2065239]
  - kvm-target-i386-Consolidate-the-X86XSaveArea-offset-chec.patch [bz#2065239]
  - kvm-target-i386-Clarify-the-padding-requirements-of-X86X.patch [bz#2065239]
  - kvm-target-i386-Pass-buffer-and-length-to-XSAVE-helper.patch [bz#2065239]
  - kvm-target-i386-Make-x86_ext_save_areas-visible-outside-.patch [bz#2065239]
  - kvm-target-i386-Observe-XSAVE-state-area-offsets.patch [bz#2065239]
  - kvm-target-i386-Populate-x86_ext_save_areas-offsets-usin.patch [bz#2065239]
  - Resolves: bz#2065239
    (KVM Fedora 35 guest x86 programs randomly crash in signal handler [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-2
changelog:
  - kvm-redhat-Add-rhel8.6.0-machine-type-for-s390x.patch [bz#2005325]
  - kvm-redhat-Define-pseries-rhel8.6.0-machine-type.patch [bz#2031041]
  - Resolves: bz#2005325
    (Fix CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#2031041
    (Add rhel-8.6.0 machine types for RHEL 8.6 [ppc64le])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-4
changelog:
  - kvm-hw-arm-virt-Register-iommu-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Register-its-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Rename-default_bus_bypass_iommu.patch [bz#2031039]
  - kvm-hw-arm-virt-Add-8.6-machine-type.patch [bz#2031039]
  - kvm-hw-arm-virt-Check-no_tcg_its-and-minor-style-changes.patch [bz#2031039]
  - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2029582]
  - Resolves: bz#2031039
    (Add rhel-8.6.0 machine types for RHEL 8.6 [aarch64])
  - Resolves: bz#2029582
    ([8.6] machine types: 6.2: Fix prefer_sockets)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-5
changelog:
  - kvm-acpi-validate-hotplug-selector-on-access.patch [bz#2036580]
  - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#2031035]
  - Resolves: bz#2036580
    (CVE-2021-4158 virt:rhel/qemu-kvm: QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c [rhel-8])
  - Resolves: bz#2031035
    (Add rhel-8.6.0 machine types for RHEL 8.6 [x86])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-6
changelog:
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046198]
  - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2033279]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2021778 bz#2036178]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2021778 bz#2036178]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2037135]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2037135]
  - Resolves: bz#2046198
    (CVE-2022-0358 virt:av/qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-8.6])
  - Resolves: bz#2033279
    ([wrb][qemu-kvm 6.2] The hot-unplugged device can not be hot-plugged back)
  - Resolves: bz#2021778
    (Qemu core dump when do full backup during system reset)
  - Resolves: bz#2036178
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2037135
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-7
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#1518984]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#1518984]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#1518984]
  - kvm-Enable-SGX-RH-Only.patch [bz#1518984]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#1518984]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041480]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041480]
  - Resolves: bz#1518984
    ([Intel 8.6 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041480
    ([incremental_backup] Inconsistent block status reply in qemu-nbd)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-8
changelog:
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2035185]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2035185]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2035185]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2035185]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2035185]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2035185]
  - Resolves: bz#2035185
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-9
changelog:
  - kvm-Revert-redhat-Add-hw_compat_4_2_extra-and-apply-to-u.patch [bz#2061856]
  - kvm-Revert-redhat-Enable-FDC-device-for-upstream-machine.patch [bz#2061856]
  - kvm-Revert-redhat-Expose-upstream-machines-pc-4.2-and-pc.patch [bz#2061856]
  - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2027208]
  - kvm-pci-expose-TYPE_XIO3130_DOWNSTREAM-name.patch [bz#2054597]
  - kvm-acpi-pcihp-pcie-set-power-on-cap-on-parent-slot.patch [bz#2054597]
  - Resolves: bz#2061856
    (Revert IBM-specific Ubuntu-compatibility machine type for 8.6-AV GA)
  - Resolves: bz#2027208
    ([virtual network][vDPA] qemu crash after hot unplug vdpa device)
  - Resolves: bz#2054597
    (Do operation to disk will hang in the guest of target host after hotplugging and migrating)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-10
changelog:
  - kvm-vmxcap-Add-5-level-EPT-bit.patch [bz#2056986]
  - kvm-i386-Add-Icelake-Server-v6-CPU-model-with-5-level-EP.patch [bz#2056986]
  - kvm-acpi-fix-QEMU-crash-when-started-with-SLIC-table.patch [bz#2059311]
  - kvm-tests-acpi-whitelist-expected-blobs-before-changing-.patch [bz#2059311]
  - kvm-tests-acpi-add-SLIC-table-test.patch [bz#2059311]
  - kvm-tests-acpi-SLIC-update-expected-blobs.patch [bz#2059311]
  - kvm-tests-acpi-manually-pad-OEM_ID-OEM_TABLE_ID-for-test.patch [bz#2059311]
  - kvm-tests-acpi-whitelist-nvdimm-s-SSDT-and-FACP.slic-exp.patch [bz#2059311]
  - kvm-acpi-fix-OEM-ID-OEM-Table-ID-padding.patch [bz#2059311]
  - kvm-tests-acpi-update-expected-blobs.patch [bz#2059311]
  - kvm-tests-acpi-test-short-OEM_ID-OEM_TABLE_ID-values-in-.patch [bz#2059311]
  - kvm-rhel-workaround-for-lack-of-binary-patches-in-SRPM.patch [bz#2059311]
  - Resolves: bz#2056986
    (Win11 (q35+edk2) guest broke after install wsl2 through 'wsl --install -d Ubuntu-20.04')
  - Resolves: bz#2059311
    (Guest can not start with SLIC acpi table)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11
changelog:
  - kvm-target-i386-properly-reset-TSC-on-reset.patch [bz#1975840]
  - Resolves: bz#1975840
    (Windows guest hangs after updating and restarting from the guest OS)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11.el8_6.1
changelog:
  - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2071103]
  - kvm-hw-intc-arm_gicv3-Check-for-MEMTX_OK-instead-of-MEMT.patch [bz#2075686]
  - kvm-softmmu-physmem-Simplify-flatview_write-and-address_.patch [bz#2075686]
  - kvm-softmmu-physmem-Introduce-MemTxAttrs-memory-field-an.patch [bz#2075686]
  - kvm-display-qxl-render-fix-race-condition-in-qxl_cursor-.patch [bz#2075683]
  - kvm-virtio-net-fix-map-leaking-on-error-during-receive.patch [bz#2075637]
  - kvm-vhost-vsock-detach-the-virqueue-element-in-case-of-e.patch [bz#2075639]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#2072242]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#2072242]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#2072242]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#2072242]
  - Resolves: bz#2071103
    (RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 [rhel-8.6.0.z])
  - Resolves: bz#2075686
    (CVE-2021-3750 virt:rhel/qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free [rhel-8] [rhel-8.6.0.z])
  - Resolves: bz#2075683
    (CVE-2021-4207 virt:rhel/qemu-kvm: QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow [rhel-8] [rhel-8.6.0.z])
  - Resolves: bz#2075637
    (CVE-2022-26353 virt:rhel/qemu-kvm: QEMU: virtio-net: map leaking on error during receive [rhel-8] [rhel-8.6.0.z])
  - Resolves: bz#2075639
    (CVE-2022-26354 virt:rhel/qemu-kvm: QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak [rhel-8] [rhel-8.6.0.z])
  - Resolves: bz#2072242
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs) [rhel-8.6.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11.el8_6.2
changelog:
  - kvm-Revert-redhat-Add-some-devices-for-exporting-upstrea.patch [bz#2077928]
  - kvm-ui-cursor-fix-integer-overflow-in-cursor_alloc-CVE-2.patch [bz#2082622]
  - Resolves: bz#2077928
    (Remove upstream-only devices from the qemu-kvm binary [rhel-8.6.0.z])
  - Resolves: bz#2082622
    (CVE-2021-4206 virt:rhel/qemu-kvm: QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow [rhel-8.6.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-11.el8_6.3
changelog:
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2095794]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2095794]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2095794]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2095794]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2095794]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2095794]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2095794]
  - Resolves: bz#2095794
    (PXE boot crash qemu when using multiqueue vDPA [rhel-8.6.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11.el8_6.4
changelog:
  - kvm-migration-Never-call-twice-qemu_target_page_size.patch [bz#2117252]
  - kvm-multifd-Rename-used-field-to-num.patch [bz#2117252]
  - kvm-multifd-Add-missing-documention.patch [bz#2117252]
  - kvm-multifd-The-variable-is-only-used-inside-the-loop.patch [bz#2117252]
  - kvm-multifd-remove-used-parameter-from-send_prepare-meth.patch [bz#2117252]
  - kvm-multifd-remove-used-parameter-from-send_recv_pages-m.patch [bz#2117252]
  - kvm-multifd-Fill-offset-and-block-for-reception.patch [bz#2117252]
  - kvm-multifd-Make-zstd-compression-method-not-use-iovs.patch [bz#2117252]
  - kvm-multifd-Make-zlib-compression-method-not-use-iovs.patch [bz#2117252]
  - kvm-migration-All-this-fields-are-unsigned.patch [bz#2117252]
  - kvm-multifd-Move-iov-from-pages-to-params.patch [bz#2117252]
  - kvm-multifd-Make-zlib-use-iov-s.patch [bz#2117252]
  - kvm-multifd-Make-zstd-use-iov-s.patch [bz#2117252]
  - kvm-multifd-Remove-send_write-method.patch [bz#2117252]
  - kvm-multifd-Use-a-single-writev-on-the-send-side.patch [bz#2117252]
  - kvm-multifd-Use-normal-pages-array-on-the-send-side.patch [bz#2117252]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#2117252]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#2117252]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#2117252]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#2117252]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#2117252]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#2117252]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#2117252]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#2117252]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#2117252]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#2117252]
  - kvm-migration-Introduce-ram_transferred_add.patch [bz#2117252]
  - kvm-migration-Tally-pre-copy-downtime-and-post-copy-byte.patch [bz#2117252]
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2117252]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2117252]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2117252]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2117252]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2117252]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2117252]
  - Resolves: bz#2117252
    (Pull  MSG_ZEROCOPY on QEMU Live Migration Patches into RHEL 8 [rhel-8.6.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11.el8_6.5
changelog:
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2109570]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2109570]
  - Resolves: bz#2109570
    (Stalled IO Operations in VM [rhel-8.6.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11.el8_6.6
changelog:
  - kvm-scsi-generic-Fix-emulated-block-limits-VPD-page.patch [bz#2121783]
  - Resolves: bz#2121783
    (Wrong max_sectors_kb and Maximum transfer length on the pass-through device [rhel-8.7] [rhel-8.6.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-12
changelog:
  - kvm-display-qxl-render-fix-race-condition-in-qxl_cursor-.patch [bz#2040738]
  - kvm-vhost-vsock-detach-the-virqueue-element-in-case-of-e.patch [bz#2063262]
  - Resolves: bz#2040738
    (CVE-2021-4207 virt:rhel/qemu-kvm: QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow [rhel-8])
  - Resolves: bz#2063262
    (CVE-2022-26354 virt:rhel/qemu-kvm: QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-13
changelog:
  - kvm-s390x-ipl-support-extended-kernel-command-line-size.patch [bz#2043830]
  - kvm-virtio-net-fix-map-leaking-on-error-during-receive.patch [bz#2063206]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#1519071]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#1519071]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#1519071]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#1519071]
  - Resolves: bz#2043830
    ([IBM 8.7 FEAT] KVM: Allow long kernel command lines for QEMU)
  - Resolves: bz#2063206
    (CVE-2022-26353 virt:rhel/qemu-kvm: QEMU: virtio-net: map leaking on error during receive [rhel-8])
  - Resolves: bz#1519071
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-14
changelog:
  - kvm-Revert-redhat-Add-some-devices-for-exporting-upstrea.patch [bz#2065043]
  - kvm-target-i386-properly-reset-TSC-on-reset.patch [bz#2070417]
  - kvm-ui-cursor-fix-integer-overflow-in-cursor_alloc-CVE-2.patch [bz#2040734]
  - Resolves: bz#2065043
    (Remove upstream-only devices from the qemu-kvm binary)
  - Resolves: bz#2070417
    (Windows guest hangs after updating and restarting from the guest OS [rhel-8.7.0])
  - Resolves: bz#2040734
    (CVE-2021-4206 virt:rhel/qemu-kvm: QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow [rhel-8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-15
changelog:
  - kvm-virtio-gpu-do-not-byteswap-padding.patch [bz#1916415]
  - kvm-linux-headers-update-to-5.16-rc1.patch [bz#1916415]
  - kvm-linux-headers-Update-headers-to-v5.17-rc1.patch [bz#1916415]
  - kvm-linux-headers-include-missing-changes-from-5.17.patch [bz#1916415]
  - kvm-x86-Fix-the-64-byte-boundary-enumeration-for-extende.patch [bz#1916415]
  - kvm-x86-Add-AMX-XTILECFG-and-XTILEDATA-components.patch [bz#1916415]
  - kvm-x86-Grant-AMX-permission-for-guest.patch [bz#1916415]
  - kvm-x86-Add-XFD-faulting-bit-for-state-components.patch [bz#1916415]
  - kvm-x86-Add-AMX-CPUIDs-enumeration.patch [bz#1916415]
  - kvm-x86-add-support-for-KVM_CAP_XSAVE2-and-AMX-state-mig.patch [bz#1916415]
  - kvm-x86-Support-XFD-and-AMX-xsave-data-migration.patch [bz#1916415]
  - kvm-target-i386-kvm-do-not-access-uninitialized-variable.patch [bz#1916415]
  - kvm-KVM-x86-workaround-invalid-CPUID-0xD-9-info-on-some-.patch [bz#1916415]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2069946]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2069946]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2069946]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2069946]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2069946]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2069946]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2069946]
  - kvm-ide-Increment-BB-in-flight-counter-for-TRIM-BH.patch [bz#2029980]
  - kvm-block-Make-bdrv_refresh_limits-non-recursive.patch [bz#2072932]
  - kvm-iotests-Allow-using-QMP-with-the-QSD.patch [bz#2072932]
  - kvm-iotests-graph-changes-while-io-New-test.patch [bz#2072932]
  - Resolves: bz#1916415
    ([Intel 8.7 FEAT] qemu-kvm Sapphire Rapids (SPR) AMX Instructions)
  - Resolves: bz#2069946
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2029980
    (Failed assertion in IDE emulation with Ceph backend)
  - Resolves: bz#2072932
    (Qemu coredump when refreshing block limits on an actively used iothread block device [rhel.8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-16
changelog:
  - kvm-virtiofsd-Fix-breakage-due-to-fuse_init_in-size-chan.patch [bz#2097209]
  - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951521]
  - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951521]
  - Resolves: bz#2097209
    ([virtiofs] mount virtiofs failed: SELinux: (dev virtiofs, type virtiofs) getxattr errno 111)
  - Resolves: bz#1951521
    (CVE-2021-3507 virt:rhel/qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-8])


author: Camilla Conte <cconte@redhat.com> - 6.2.0-17
changelog:
  - kvm-migration-Never-call-twice-qemu_target_page_size.patch [bz#2072049]
  - kvm-multifd-Rename-used-field-to-num.patch [bz#2072049]
  - kvm-multifd-Add-missing-documentation.patch [bz#2072049]
  - kvm-multifd-The-variable-is-only-used-inside-the-loop.patch [bz#2072049]
  - kvm-multifd-remove-used-parameter-from-send_prepare-meth.patch [bz#2072049]
  - kvm-multifd-remove-used-parameter-from-send_recv_pages-m.patch [bz#2072049]
  - kvm-multifd-Fill-offset-and-block-for-reception.patch [bz#2072049]
  - kvm-multifd-Make-zstd-compression-method-not-use-iovs.patch [bz#2072049]
  - kvm-multifd-Make-zlib-compression-method-not-use-iovs.patch [bz#2072049]
  - kvm-migration-All-this-fields-are-unsigned.patch [bz#2072049]
  - kvm-multifd-Move-iov-from-pages-to-params.patch [bz#2072049]
  - kvm-multifd-Make-zlib-use-iov-s.patch [bz#2072049]
  - kvm-multifd-Make-zstd-use-iov-s.patch [bz#2072049]
  - kvm-multifd-Remove-send_write-method.patch [bz#2072049]
  - kvm-multifd-Use-a-single-writev-on-the-send-side.patch [bz#2072049]
  - kvm-multifd-Use-normal-pages-array-on-the-send-side.patch [bz#2072049]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#2072049]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#2072049]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#2072049]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#2072049]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#2072049]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#2072049]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#2072049]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#2072049]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#2072049]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#2072049]
  - kvm-migration-Add-migration_incoming_transport_cleanup.patch [bz#2097652]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2097652]
  - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098076]
  - Resolves: bz#2072049
    (Pull  MSG_ZEROCOPY on QEMU Live Migration Patches into RHEL 8)
  - Resolves: bz#2097652
    (The migration port is not released if use it again for recovering postcopy migration)
  - Resolves: bz#2098076
    (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions)


author: Camilla Conte <cconte@redhat.com> - 6.2.0-18
changelog:
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2105410]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2105410]
  - Resolves: bz#2105410
    (Stalled IO Operations in VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-19
changelog:
  - kvm-migration-Introduce-ram_transferred_add.patch [bz#2110203]
  - kvm-migration-Tally-pre-copy-downtime-and-post-copy-byte.patch [bz#2110203]
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2110203]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2110203]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2110203]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2110203]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2110203]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2110203]
  - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112296]
  - Resolves: bz#2110203
    (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
  - Resolves: bz#2112296
    (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-20
changelog:
  - kvm-scsi-generic-Fix-emulated-block-limits-VPD-page.patch [bz#2120279]
  - Resolves: bz#2120279
    (Wrong max_sectors_kb and Maximum transfer length on the pass-through device [rhel-8.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-20.el8.1
changelog:
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2116743]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2116743]
  - Resolves: bz#2116743
    ([RHEL8.7] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-20.el8_7.2
changelog:
  - kvm-virtiofsd-use-g_date_time_get_microsecond-to-get-sub.patch [bz#2132391]
  - Resolves: bz#2132391
    ([virtiofs] virtiofsd debug log's timestamp is NULL [rhel-8.7.0.z])


author: Zdenek Dohnal <zdohnal@redhat.com> - 7.1.1-5
changelog:
  - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [fedora-all]


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-5
changelog:
  - QOpenGLShaderProgram: glProgramBinary() resulting in LINK_STATUS=FALSE not handled properly (QTBUG-66420)


author: Jan Grulich <jgrulich@redhat.com> - 5.11-1-7
changelog:
  - Move libQt5EglFSDeviceIntegration lib out of the -devel subpkg
    Resolves: bz#1692970

  - Fix QImage allocaion failure
    Resolve: bz#1667860

  - Fix double free in QXmlStreamReader
    Resolve: bz#1667858

  - Fix segmentation fault on malformed BMP file
    Resolve: bz#1667859


author: Jan Grulich <jgrulich@redhat.com> - 5.12.5-5
changelog:
  - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814739
    Resolves: bz#1814683

  - Fix: XML entity expansion vulnerability
    Resolves: bz#1822193


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: Remi Collet <remi@remirepo.net> - 4.0.5-1
changelog:
  - Redis 4.0.5 - Released Thu Dec 1 16:03:32 CET 2017
  - Upgrade urgency CRITICAL: Redis 4.0.4 fix for PSYNC2 was broken,
    causing the slave to crash when receiving an RDB file from the
    master that contained a duplicated Lua script.


author: Remi Collet <rcollet@redhat.com> - 4.0.10-2
changelog:
  - drop build dependency on pandoc
  - drop dependency on jemalloc #1591762
  - fix License (BSD and MIT)
  - add bundled libraries licences
  - cleanup conditions from spec file


author: Remi Collet <rcollet@redhat.com> - 5.0.3-2
changelog:
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.3-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.33-1
changelog:
  - fix rhnsd triggered upgrade of rhnsd on systemd systems
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "1260527 RHEL7 rhnsd reload doesn't work"


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-5
changelog:
  + rhythmbox-3.4.2-5
  - Remove LIRC plugin
  - Fix 2 build warnings
  - Remove BRs for removed visualiser plugin


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-7
changelog:
  + rhythmbox-3.4.2-7
  - Fix warnings in art search when playing a radio
  - Fix initial import never finishing
  - Fix multimedia keys integration in GNOME


author: Colin Walters <walters@verbum.org> - 2018.6-4
changelog:
  - Backport patch for https://bugzilla.redhat.com/show_bug.cgi?id=1607223
    from https://github.com/projectatomic/rpm-ostree/pull/1469
  - Also https://github.com/projectatomic/rpm-ostree/pull/1461


author: Jonathan Lebon <jonathan@jlebon.com> - 2020.4-1
changelog:
  - New upstream version
    https://github.com/coreos/rpm-ostree/releases/tag/v2020.4
    Resolves: #1861786


author: Colin Walters <walters@verbum.org> - 2020.7-4
changelog:
  - Backport https://github.com/coreos/rpm-ostree/pull/2386/commits/aa8e49aaeddfc5d38651fa08f46e059655818fd1
    Resolves: #1944760


author: Luca BRUNO <lucab@lucabruno.net> - 2021.5-1
changelog:
  - New upstream version
    https://github.com/coreos/rpm-ostree/releases/tag/v2021.5
    Resolves: rhbz#1959874


author: Luca BRUNO <lucab@redhat.com> - 2021.5-2
changelog:
  - Backport _dbpath fixes, see
    https://github.com/coreos/rpm-ostree/issues/2904
    Resolves: rhbz#1973579


author: Colin Walters <walters@verbum.org> - 2022.2.8.gd50a74bd-2
changelog:
  - Update to latest rhel8 branch
    https://github.com/coreos/rpm-ostree/pull/3749
    https://github.com/coreos/rpm-ostree/pull/3751
    Resolves: rhbz#2095528


author: Colin Walters <walters@verbum.org> - 2022.10.86.gd8f0c67a-3
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/d8f0c67a0eba32281c9f2782a286e06486a4b909
    Resolves: rhbz#2105414


author: Colin Walters <walters@verbum.org> - 2022.10.90.g4abaf4b4-4
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/4abaf4b4
    Resolves: rhbz#2118774


author: Liming Sun <lsun@mellanox.com> - 2.0.1-1
changelog:
  - Rename bfrshim to rshim
  - Remove rshim.spec since it's auto-generated from rshim.spec.in
  - Fix warnings reported by coverity
  - Add rhel/rshim.spec.in for fedora
  - Move rshim to sbin and move man page to man8


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.4-4
changelog:
  - Expose gating.yaml file in order to enable manual CI gating for rshim
    in RHEL-8.4, by bumping release and doing a Brew build.
  - Partially resolves: rhbz#1912248


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5.
  - Modify rshim.spec accordingly.
  - Resolves: rhbz#1950425


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-2
changelog:
  - Add sysconfig/rshim file and update rshim.service to source it.
  - jbastian made the first cut of this patch, which needed to be
    modified due to the update to 2.0.5. And I chose to go with
    %autosetup to handle Patch0, instead of sticking with %setup.
  - Resolves: rhbz#1946349


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-10
changelog:
  RHEL 8.1.0 ERRATUM
  - added option for imfile endmsg.regex
    resolves: rhbz#1627941
  - added patch enhancing imfile rotation detection
    resolves: rhbz#1674471
  - added patch fixing msgOffset datatype preventing crash on
    message with too long other fields
    resolves: rhbz#1677037
  - added patch introducing "preservecase" option for imudp/imtcp
    resolves: rhbz#1614181


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-11
changelog:
  RHEL 8.1.0 ERRATUM
  - fixed memory leak in imjournal by proper cursor releasing
    resolves: rhbz#1716867


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-12
changelog:
  RHEL 8.1.0 ERRATUM
  - edited imjournal memleak patch to not cause double-free crash
    resolves: rhbz#1729995
  - added patch calling journald API only when there are no
    preceeding errors
    resolves: rhbz#1722165
  - added patch fixing imrelp module when invoked with old syntax
    resolves: rhbz#1724218


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-13
changelog:
  RHEL 8.1.0 ERRATUM
  - added patch enabling stricter TLS certs checking conforming to 
    common criteria requirements
    resolves: rhbz#1733244


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-1
changelog:
  RHEL 8.2.0 ERRATUM
  - rebased to 8.1911.0 upstream version, removed, previously
    upstreamed patches
    resolves: rhbz#1740683
    resolves: rhbz#1659383
    resolves: rhbz#1746876
    resolves: rhbz#1676559
    resolves: rhbz#1692072
    resolves: rhbz#1692073
    resolves: rhbz#1692074
    resolves: rhbz#1699242
    resolves: rhbz#1738213
    resolves: rhbz#1744691
    resolves: rhbz#1755218
    resolves: rhbz#1768321
    resolves: rhbz#1768324
  - added patch fixing imfile stefiles naming
    resolves: rhbz#1763757


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-3
changelog:
  RHEL 8.2.0 ERRATUM
  - added patch reverting rejecting expired certs by default
    resolves: rhbz#1782353
  - added patch silencing false errors on config.enabled statement
    resolves: rhbz#1659383


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-5
changelog:
  RHEL 8.3.0 ERRATUM
  - added qpid-proton as another source and enabled omamqp1 module
    in a separate sub-package with it statically linked
    resolves: rhbz#1713427
  - extended config.enabled patch to cover rest of the cases 
    resolves: rhbz#1659383
  - added patch making json serialization thread-safe
    resolves: rhbz#1789675
  - added another patch for imfile state-files id
    resolves: rhbz#1793569
  - fixed typo in commend-out part of default rsyslog.conf


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-6
changelog:
  RHEL 8.3.0 ERRATUM
  - added patch preventing imfile crash when selinux blocks symlink
    access
    resolves: rhbz#1843994
  - fixed config-enabled patch
    resolves: rhbz#1659383


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-13
changelog:
  RHEL 8.1.0 ERRATUM
  - added patch enabling stricter TLS certs checking conforming to
    common criteria requirements
    resolves: rhbz#1733244


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-5
changelog:
  RHEL 8.3.0 ERRATUM
  - added qpid-proton as another source and enabled omamqp1 module
    in a separate sub-package with it statically linked
    resolves: rhbz#1713427
  - extended config.enabled patch to cover rest of the cases
    resolves: rhbz#1659383
  - added patch making json serialization thread-safe
    resolves: rhbz#1789675
  - added another patch for imfile state-files id
    resolves: rhbz#1793569
  - fixed typo in commend-out part of default rsyslog.conf


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-2
changelog:
  RHEL 8.5.0 ERRATUM
  - rebase to 8.2102.0
    resolves: rhbz#1932795
  - Enable openssl
    resolves: rhbz#1891458
  - EKU check for client cert on server side
    resolves: rhbz#1783348
  - Use GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1880434
  - Use librelp with openssl enabled
    resolves: rhbz#1795607
  - Close dir when fsync=on
    resolves: rhbz#1960536


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-3
changelog:
  - Priority field must have valid length
    resolves: rhbz#1866877
  - Allocate more memory on too large groups
    resolves: rhbz#1944718


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-5
changelog:
  - Do not exit when user/group can not be found
    resolves: rhbz#1984489
  - Remove abortOnIDResolution fail


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#1909639
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2052403


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-10
changelog:
  - openssl: Correct gnutlsPriorityString (custom ciphers) behaviour
  - Fix error handling in gtlsRecordRecv that can cause 100 percent CPU usage
    resolves: rhbz#2046158
  - Address CVE-2022-24903, Heap-based overflow in TCP syslog server
    resolves: rhbz#2081401


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-5
changelog:
  - rebuild for rebased dependencies
  - dependency cleanup and sorted sub-packages in spec
    resolves: rhbz#1613880


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-1
changelog:
  - rebase to 8.37.0
    resolves: rhbz#1613880
    resolves: rhbz#1564054
    resolves: rhbz#1598218
    - dropped invalid statefile patch - upstreamed
    - dropped imjournal duplicates patch - upstreamed
    resolves: rhbz#1544394
  - renumbered default tag patch and fitted onto rebased version


author: John Kacur <jkacur@redhat.com> - 1.9-1
changelog:
  - Update to upstream rt-tests-1.9
  - Add BuildRequires for gcc
  - use set_build_flags
  - use macros _bindir, _mandir and _prefix where possible
  - remove unnecessary clean section, simply build and install sections
  Resolves: rhbz#1894615


author: John Kacur <jkacur@redhat.com> - 1.9-2
changelog:
  - Don't compress manpages by default in the makefile
  - Add a menu to determine_maximum_mpps.sh
  - Add determine_maximum_mmps.8 manpage
  - Remove get_cpuinfo_mhz.sh and old Makefile in queuelat dir
  Resolves: rhbz#1906104


author: John Kacur <jkacur@redhat.com> - 1.10-2
changelog:
  - print the version number in oslat everytime.
  - use cpuset size as upper bound in loop in oslat
  - allocate memory for cpu_set in oslat
  Resolves: rhbz#1926578


author: John Kacur <jkacur@redhat.com> - 2.1-4
changelog:
  - Fix potential double mount of cgroups for deadline_test
  - Fix potential double mount of cgroups for cyclicdeadline
  Resolves: rhbz#2024957


author: Leah Leshchinsky <lleshchi@redhat.com> - 2.3-1
changelog:
  - Update to latest upstream 2.3
  - Correct the comment of numa_initialize()
  - oslat.8: Remove the argument of --bias
  Resolves: rhbz#2012292


author: John Kacur <jkacur@redhat.com> - 2.3-2
changelog:
  - Fix parsing of affinity
  - Ignore the runtime cpumask if a new cpumask is requested
  Resolves: rhbz#2050242


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-106
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-132
changelog:
  - Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)
    * Skip unstable tests on s390x.
    * Skip JIT tests in RHEL 8.
    Resolves: rhbz#1817135


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-133
changelog:
  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jarek Prokop <jprokop@redhat.com> - 3.0.1-138
changelog:
  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-139
changelog:
  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010949


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-97
changelog:
  - Fix TLS 1.3 issues.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3.patch
    * ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with-TLS-1.3.patch
    Related: rhbz#1616213


author: Jun Aruga <jaruga@redhat.com> - 2.5.1-99
changelog:
  - Fix generated rdoc template issues.
    * ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch
    Resolves: rhbz#1612026


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-99
changelog:
  - Additional OpenSSL 1.1.1 fixes.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch
    * ruby-2.6.0-config-support-include-directive.patch
    * ruby-2.6.0-use-larger-keys-for-SSL-tests.patch
    Related: rhbz#1616213


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-100
changelog:
  - Properly harden package using -fstack-protector-strong.
    * ruby-2.6.0-configure-fstack-protector-strong.patch
    Resolves: rhbz#1624168


author: Vít Ondruch <vondruch@redhat.com> - 2.5.5-104
changelog:
  - Update to Ruby 2.5.5.
    * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
    * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
    * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
        -TLS-1.3.patch; subsumed
    Resolves: rhbz#1688758
  - Don't ship .stp files when SystemTap support is disabled.
    Related: rhbz#1657915
  - Fix CovScan issues.
    Resolves: rhbz#1628592


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-105
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1688758
  - Fix rdoc gzipped javascript pages are not the same across multilib.
    Resolves: rhbz#1719647


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1952626
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1955010


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1757844
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950308


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-108
changelog:
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810


author: Jun Aruga <jaruga@redhat.com> - 2.5.9-110
changelog:
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.
  - Fix by adding length limit option for methods that parses date strings.
    Resolves: CVE-2021-41817
  - CGI::Cookie.parse no longer decodes cookie names to prevent spoofing security
    prefixes in cookie names.
    Resolves: CVE-2021-41819


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-105
changelog:
  - Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)
    * Properly generate "ruby(rubygems)" versioned dependencies.
    * Extract composition of dependecy strings into helper.
    * Loosen RDoc dependency.
    * Upstream fix adding -C flag instead of changing directory for gem build.
    * Remove obsolete Group tag
    * Fix ".include =" support in openssl.cnf.
    * Link IRB back to StdLib.
    * Link IRB files instead of directories.
    * Exclude irb.rb from ruby-libs.
    Resolves: rhbz#1672575


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1757846
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950307
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-108
changelog:
  - Upgrade to Ruby 2.6.9.
  - Skip JIT tests in RHEL 8.
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
    Resolves: CVE-2020-36327


author: Vít Ondruch <vondruch@redhat.com> - 2.6.10-109
changelog:
  - Upgrade to Ruby 2.6.10.
    Resolves: rhbz#2088415
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1952627
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1954968
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: rhbz#1954969


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1951999
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1952000


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-137
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: rhbz#1986768
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: rhbz#1986812
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: rhbz#1986813
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-137
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: CVE-2021-32066
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327


author: Jarek Prokop <jprokop@redhat.com> - 2.7.6-138
changelog:
  - Upgrade to Ruby 2.7.6.
    Resolves: rhbz#2109424
  - Fix FTBFS due to an incompatible load directive.
    Related: rhbz#2109424
  - Fix a fiddle import test on an optimized glibc on Power 9.
    Related: rhbz#2109424
  - Fix regular Expression Denial of Service Vulnerability of Date Parsing Methods.
    Resolves: CVE-2021-41817
  - Fix cookie prefix spoofing in CGI::Cookie.parse.
    Resolves: CVE-2021-41819
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010403


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-141
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2109431
    Resolves: rhbz#2110981
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 0.5.2-1
changelog:
  - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: Jarek Prokop <jprokop@redhat.com> 0.5.3-2
changelog:
  - Update by merging Fedora rawhide branch (commit: 81e2cc9)
  - Fix Mysql2::Result test for Ruby 3.1.
  - Remove gem_make.out and mkmf.log files from the binary RPM package.
  - Fix test assertion for mariadb-connector-c.
    Related: rhbz#2063772


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: Dan Walsh <dwalsh@redhat.com> - 2:1.0.0-40.rc5.dev.gitad0f525
changelog:
  - Remove sysclt handling, not needed in RHEL8
  - Make sure package built with seccomp flags
  - Remove rectty
  - Add completions


author: Dan Walsh <dwalsh@redhat.name> - 2:1.0.0-46.dev.gitb4e2ecb
changelog:
  - Add patch https://github.com/opencontainers/runc/pull/1807 to allow
  - runc and podman to work with sd_notify


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-55.rc5.dev.git2abd837
changelog:
  - Resolves: #1665770 - rootfs: umount all procfs and sysfs with --no-pivot
  - Resolves: CVE-2019-5736


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-68.rc92
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-73.rc95
changelog:
  - fix podman run --pid=host command causes OCI permission error
  - rc95 fixes CVE-2021-30465
  - Related: #2070961


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-73.rc95
changelog:
  - fix podman run --pid=host command causes OCI permission error
  - rc95 fixes CVE-2021-30465
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.3-3
changelog:
  - fix "Error: runc: exec failed: unable to start container process:
    open /dev/pts/0: operation not permitted: OCI permission denied"
  - Resolves: #2117928


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.3-6
changelog:
  - Fix every podman run invocation generates two "Couldn't stat device
    /dev/char/10:200: No such file or directory" lines in the journal
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.3-3
changelog:
  - fix "Error: runc: exec failed: unable to start container process:
    open /dev/pts/0: operation not permitted: OCI permission denied"
  - Related: #2061390


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-23
changelog:
  - Enable setting gamma by programing palette as supported by xorg-server
    1.19.0 again (bug #891973)


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-38
changelog:
  - fix CVEs
  - Resolves: rhbz#1716209, rhbz#1716210, rhbz#1716211, rhbz#1716212,
              rhbz#1716213, rhbz#1716214, rhbz#1716215, rhbz#1716216,
  	    rhbz#1716217, rhbz#1716218, rhbz#1716219


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-15
changelog:
  - 1554032 - saned doesn't have permissions to write on usb port
  - updated README.Fedora - mention epson official drivers


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-19.1
changelog:
  - 1852468, 1852467, 1852466, 1852465 - prevent buffer overflow in esci2_img
  - 1852668, 1852667, 1852666, 1852665 - disable autodiscovery for epsonds backend


author: <kwenning@redhat.com> - 1.3.1-9
changelog:
  - use cib-api directly as get_cib_copy gone with
    pacemaker 2.0.0
  - add sys/sysmacros.h to build with glibc-2.25
  - enlarge string buffer to satisfy newer gcc
  - no corosync 1 support with pacemaker 2.0.0
  - set default to LOG_NOTICE + overhaul levels
  - refactor proc-parsing
  - adaptions for daemon-names changed with
    pacemaker 2.0.0 rc3
  - added .do-not-sync-with-fedora
    Resolves: rhbz#1571797


author: <kwenning@redhat.com> - 1.3.1-10
changelog:
  - removed unneeded python build-dependency
  - updated legacy corosync-devel to corosynclib-devel

    Resolves: rhbz#1595856


author: Klaus Wenninger <kwenning@redhat.com> - 1.3.1-15
changelog:
  - rebuild against new versions of libqb (1.0.3-7.el8),
    corosync (2.99.3-4.el8) and pacemaker (2.0.0-9.el8)

    Related: rhbz#1615945


author: Klaus Wenninger <kwenning@redhat.com> - 1.3.1-18.1
changelog:
  - assume graceful pacemaker exit if leftovers are unmanaged
  - make handling of cib-connection loss more robust

    Resolves: rhbz#1734061


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-5
changelog:
  - rebase to upstream v1.4.0
  - finalize cmap connection if disconnected from cluster
  - make handling of cib-connection loss more robust
  - add ci test files
  - use generic term cluster-services in doc
  - stress in doc that on-disk metadata watchdog-timeout
    takes precedence
  - fail earlier on invalid servants to make gcc 9 happy

    Resolves: rhbz#1698056
    Resolves: rhbz#1682137


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-9
changelog:
  - assume graceful pacemaker exit if leftovers are unmanaged
  - query corosync liveness via votequorum-api

    Resolves: rhbz#1702727
    Resolves: rhbz#1718296


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-2
changelog:
  - silence coverity regarding inconsistent parameter passing
  - adapt fence-agents-dependency from upstream to distribution

    Resolves: rhbz#1769305


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-6
changelog:
  - match qdevice-sync_timeout against wd-timeout
  - sync startup/shutdown via pacemakerd-api

    Resolves: rhbz#1703128
    Resolves: rhbz#1743726


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-7
changelog:
  - conflict with pacemaker-libs < 2.0.4-5 instead of requiring
    a minimum pacemaker version

    Resolves: rhbz#1861713


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 1:2.0.2-9
changelog:
  - use %{?dist} instead of %{dist} (#1725774)
  - scl-utils-build own the pkgconfig directory by %scl_files (#1431962)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 1:2.0.2-10
changelog:
  - use %__python3 instead of macro %__python (#1733526)
  - corrected unescaped per-cent character in the changelog (#1734103)


author: Daniel Kopecek <dkopecek@redhat.com> - 2.5.2-14
changelog:
  Resolves: rhbz#1689897 - Missing '--extent-only' patch
  Resolves: rhbz#1630298 - Removal of component scrub or its crypto from RHEL


author: Robert Scheck <robert@fedoraproject.org> - 8.15.2-27
changelog:
  - Use SSL_CTX_use_certificate_chain_file() to handle intermediate
    certificates passed additionally in confSERVER_CERT (#1565341)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-30
changelog:
  - Dropped sysvinit support
    Resolves: rhbz#1610287
  - Dropped hesiod support
    Resolves: rhbz#1638491


author: Björn Esser <besser82@fedoraproject.org> - 3.3.15-2
changelog:
  - Fix runtime dependency: 's!lipreport!libreport!g' (#1536580)
  - Prefer %global over %define
  - Remove obsolete %defattr(-,root,root,-)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.16-1
changelog:
  - Do not show status_icon when there's no alert (#1543758)
  - Run seapplet only on SELinux enabled system (#1541631)
  - Use context in Gio.AppInfo.launch (#1542156)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.17-1
changelog:
  - Set auto_save_interval to 5 (#1548913,#1523406,#1539180)
  - seapplet: Try send and close notifications (#1541624,#1541719,#1544222,#1539367)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.18-1
changelog:
  - Move sedispatch.conf to /etc/audit/plugins.d/
  - Fix summary and "if" text for AVCs with unknown target path


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.19-2
changelog:
  - Update "missing" scripts to automake-1.15
  - Add active polling for acquiring policy file
  - Fix translation of hex values in AVCs (#1477236, #1709742)
  - require initscripts to ensure that "service" call works properly


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.21-1
changelog:
  - Use dbus.mainloop.glib.DBusGMainLoop() instead of dbus.glib
  - Fix AVC.__typeMatch to handle aliases properly
  - Handle sockets with abstract path properly (#1775135)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.22-2
changelog:
  - Log plugin exception traceback when log level is DEBUG
  - sepolicy.info() returns a generator, not a list (#1784564)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.23-1
changelog:
  - browser: Check return value of Gdk.Screen().get_default() (#1574434)
  - Improve and unify error messages (#1763982)
  - setroubleshoot.util: Catch exceptions from sepolicy import
  - Add dpkg support
  - Do not refer to hardcoded selinux-policy rpm in signature
  - Make date/time format locale specific (#1812674)
  - Improve speed of plugin evaluation (#1794807)
  - Do not try to report a bug on None package
  - sealert: Drop unused import slib.dbus.service
  - Drop updater.py - it's not used and doesn't work
  - root user doesn't need to use SetroubleshootPrivileged API
  - Use pydbus, a modern Python dbus API, for SetroubleshootPrivileged
  - Report bug on a package which owns the related SELinux domain (#1811644)
    https://pagure.io/setroubleshoot/issue/18
  - Add Local SELinux policy package version to analyses reports
  - setroubleshoot.utils.get_rpm_nvr_by_scontext add option to use DBUS method
  - Export setroubleshoot.utils.get_rpm_nvr_by_scontext via DBUS
  - setroubleshoot.util: get_rpm_nvr_by_type() and get_rpm_nvr_by_scontext()


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-1
changelog:
  - Add 'fur' into shipped locales
  - Update translations (#1820570)
  - Log full reports with correct syslog identifier
  - Cancel pending alarm during AVC analyses


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-1
changelog:
  - Revert "Replace pydbus with dasbus"
  - Fix typos in --help, man pages and developer's guide (#2028226)
  - Do not use Python slip package
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Fix plugin exception reporting
  - export alert dbus signal
  - Make sure local_policy_package is not None
  - sealert: add "Last Seen" column to alert list


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-4
changelog:
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB (#2064727)
  - doc: Document performance related changes


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-4.git0144aa8
changelog:
  - Resolves: #1597629 - handle dependency issue for skopeo-containers
  - rename skopeo-containers to containers-common as in Fedora


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-7.git0144aa8
changelog:
  - build with %gobuild
  - use scl-ized go-toolset as dep
  - disable i686 builds temporarily because of go-toolset issues


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.32-4.git1715c90
changelog:
  - Fixes @openshift/machine-config-operator#669
  - install /etc/containers/oci/hooks.d and /etc/containers/certs.d


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-2
changelog:
  - comment out mountopt option in order to fix gating tests
    see bug 1769769
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-4
changelog:
  - fix symlinks in /usr/share/rhel/secrets and make
    subscription-manager soft dependency to make them work
  - Related: RHELPLAN-25139


author: Eduardo Santiago <santiago@redhat.com> - 1:0.1.41-3
changelog:
  - patch broken gating tests: improper 'jq' usage, and use 'registry:2.6'
    (instead of :2) to work around broken image pushed by docker


author: Jindrich Novy <jnovy@redhat.com> - 1:0.2.0-1
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v0.2.0
  - initial rhel8-8.2.1 build
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1:0.2.0-4
changelog:
  - re-include ppc64 arch, golang doesn't seem broken there any more
  - synchronize man pages and config files with upstream
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1:0.2.0-5
changelog:
  - follow Dan's suggestion to deliver seccomp.json and storage.conf
    from Fedora and not directly from upstream yet
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.0-2
changelog:
  - fix "CVE-2020-14040 skopeo: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]"
  - Resolves: #1854719


author: Eduardo Santiago <santiago@redhat.com> - 1:1.1.0-3
changelog:
  - fix broken gating tests: docker unexpectedly removed htpasswd from
    their 'registry:2' image, so we now use htpasswd from httpd-tools on host.


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.0-4
changelog:
  - change default logging mechanism to use for container engine events
    in containers.conf to be events_logger = "file" - it should fix
    RHEL gating tests for podman nonroot (thanks to Dan Walsh)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-1
changelog:
  - update vendored component versions
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.0-8
changelog:
  - revert back to version aimed at 8.3.1 - skopeo-1.2.0
  - also downgrade versions of vendored libraries
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-5
changelog:
  - use infra_image = registry.redhat.io/ubi8/pause in contiainers.conf
    (unlike previous one ubi8/pause doesn't require authentication)
  - Related: #1934947


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-6
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e7880c4)
  - Related: #1938234


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-7
changelog:
  - update documentation and configs according to the current
    versions of vendored projects
  - Related: #1938234


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.3-1
changelog:
  - assure runc is set as default runtime in RHEL8
  - update shortnames from upstream
  - sync vendored component versions with upstream
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-9
changelog:
  - revert back to state of 3.0-8.4.0
  - sync shortnames with pyxis
  - improve shortnames
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-6
changelog:
  - fix rhel-shortnames.conf generation (avoid duplicates and records
    with invalid URL)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/a05ddb8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/6c0e35a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/b4210c0)
  - Resolves: #1914884


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-10
changelog:
  - update shortnames from Pyxis
  - sync with the vendored versions in 3.0-8.5.0
  - bump release to assure upgrade path from 3.0-8.4.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - update shortnames from Pyxis
  - Related: #2009153


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/7300333)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-13
changelog:
  - put back ubi8/buildah and ubi8/skopeo as it was released in 8.4
    (only ubi8/podman was not)
  - Related: #1972700


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.3
    (https://github.com/containers/skopeo/commit/038f70e)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-3
changelog:
  - add direct runc dependency to avoid situation when runc is listed
    as default runtime but only crun is present in RHEL8
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-1
changelog:
  - update vendored components
  - ship /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release only on non-RHEL and
    CentOS distros
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/ea32394)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/130f32f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/01e51ce)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/fc81803)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/116e75f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/9c9a9f3)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/540efb3)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/4336972)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/4414e52)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-4
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/f952195)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-5
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/c20c32d)
  - Related: #2061390


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-1
changelog:
  - New upstream release
  - Update links to the upstream project page and releases
  - Use extended SSSD API to signal that an entry should not be cached anymore
  - Add support for timeout-based NSS queries with libsss_nss_idmap


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-3
changelog:
  - Do not build on i686 in Fedora 28 or later as 389-ds-base is not available there anymore
  - Resolves rhbz#1556448
  - Remove outdated ExclusiveArch for RHEL6


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-5
changelog:
  - Link with libnsl explicitly in Fedora 28 or later
  - Require libnsl2-devel for build
  - Resolves rhbz#1573636


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - Upstream release 0.56.5
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
changelog:
  - CVE 2021-3480:  idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
  - Resolves: rhbz#1944713


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-3
changelog:
  - Resolves: rhbz#1958909 - fix regression for scoped searches in compat tree
  - Resolves: rhbz#1978189 - better handle error response from libsss_nss_idmap


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Resolves: rhbz#2121324
    Release adds following fixes:
    - Fix ID views integration
    - Fix base scope lookups
    - Bump NIS max dgram size to 8KB by default instead of 1KB
    - Allow to rebuild the compat tree


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Resolves: rhbz#1984010
    Fix ID views integration
  - Fix base scope lookups
  - Resolves: rhbz#1784172
    Bump NIS max dgram size to 8KB by default instead of 1KB
  - Resolves: rhbz#2070575
    Allow to rebuild the compat tree


author: Jindrich Novy <jnovy@redhat.com> - 0.4.0-1
changelog:
  - update to v.0.4.0
  - sync with fedora spec
  - drop applied CVE-2019-14378 patch
  - Resolves: #1766774


author: Jindrich Novy <jnovy@redhat.com> - 0.4.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/archive/v0.4.3.tar.gz
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1.0.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/archive/v1.0.1.tar.gz
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1.0.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/archive/v1.0.1.tar.gz
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.1
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.2
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.3
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.4
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061390


author: Paul Wouters <pwouters@redhat.com> - 1.7.3.2-1
changelog:
  - Resolves rhbz#1404290 socat build failure on rawhide
  - Resolves rhbz#1416597 socat-1.7.3.2 is available
  - Resolves rhbz#1417483 Failed DNS resolution causes SIGSEGV and endless loop
  - Removed obsoleted patch


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.2.0-2
changelog:
  - Increased the level of messages that go to syslog, thus softhsm
    will no longer write on syslog when it cannot open the shared DB (#1425135)
  - Allow users in the 'ods' group to store their keys in /var/lib/softhsm/tokens/
    while at the same time disallow deleting other users' keys (using the
    sticky bit). Prevent users in the 'ods' group from writing in /var/lib/softhsm.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.3.0-3
changelog:
  - Remove softhsm2-pk11install. Software modules are to be registered with
    p11-kit as in https://fedoraproject.org/wiki/PackagingDrafts/Pkcs11Support (#1541095).


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-1
changelog:
  - Fixes: rhbz#1818877 - rebase to softhsm 2.6.0+
  - Fixes: rhbz#1701233 - support setting supported signature methods on the token


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-3
changelog:
  - Fixes: rhbz#1834909 - softhsm use-after-free on process exit
  - Synchronize the final fix with Fedora


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-1
changelog:
  - Update to 1.9.2 (#961876).
  - Modernize spec file.
  - Makefile.am handles mmx and sse flags well, so no need patch 01 and sed anymore.
  - Patch 02 disabled, I hope we already have asm fixed on X86_64.


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-2
changelog:
  - Add license tag.
  - Add back sed on -O3 .
  - Not modify soundtouch_config.h because looks correct, just have one line !.


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-1
changelog:
  - New version
  - Fixes CVE-2017-15705, CVE-2018-11780 and CVE-2018-11781
  - Resolves: rhbz#1629523
  - Resolves: rhbz#1629535
  - Resolves: rhbz#1629538


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-2
changelog:
  - Support systemd, not SysV init, drop initscripts requirement
  - Resolves: rhbz#1610288
  - Fix issues found by Coverity Scan
  - Resolves: rhbz#1602695


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
changelog:
  - Fixed CVE-2018-11805
  - Resolves: rhbz#1787514
  - Fixed CVE-2020-1930
  - Resolves: rhbz#1820649
  - Fixed CVE-2020-1931
  - Resolves: rhbz#1820650


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Victor Toso <victortoso@redhat.com> - 0.38-2
changelog:
  - Brings some post releases fixes and disables celt051 that is
    deprecated in spice-protocol 0.14.2
  - Possibly related to rhbz#1688737 rhbz#1746239
    Related: rhbz#1817471
  - Fix mouse pointer on relative mouse mode
    Resolves: rhbz#1674311
  - Handle detailed errors from guest agent
    Related:  rhbz#1520393


author: Uri Lublin <uril@redhat.com> - 0.38-4
changelog:
  - Fix some static analyzer issues
    Resolves: rhbz#1839104
  - Fix spice-usbredir-redirect-on-connect
    Resolves: rhbz#1874740


author: Julien Ropé <jrope@redhat.com> - 0.20.0-3
changelog:
  - Fix mouse problems in multi-monitor environments under Wayland
    Resolves: rhbz#1790904 rhbz#1824610


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-6
changelog:
  - Resolves: #1679526 - Missing detailed configuration file
  - Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs
    changed to symlinks
  - Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling
    squid


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8
changelog:
  - Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
    in HttpHeader::getAuth


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-9
changelog:
  - Resolves: #1738583 - CVE-2019-12525 squid:4/squid: parsing of header
    Proxy-Authentication leads to memory corruption
  - Resolves: #1828369 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828370 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-1
changelog:
  - new version 4.11
  - libsystemd integration
  - Resolves: #1829467 - squid:4 rebase
  - Resolves: #1828378 - CVE-2019-12521 squid:4/squid: off-by-one error in
    addStackElement allows for a heap buffer overflow and a crash
  - Resolves: #1828377 - CVE-2019-12520 squid:4/squid: improper input validation
    in request allows for proxy manipulation
  - Resolves: #1828375 - CVE-2019-12524 squid:4/squid: improper access restriction
    in url_regex may lead to security bypass
  - Resolves: #1820664 - CVE-2019-18860 squid: mishandles HTML in the host
    parameter to cachemgr.cgi which could result in squid behaving in unsecure way
  - Resolves: #1802514 - CVE-2020-8449 squid:4/squid: Improper input validation
    issues in HTTP Request processing
  - Resolves: #1802513 - CVE-2020-8450 squid:4/squid: Buffer overflow in a Squid
    acting as reverse-proxy
  - Resolves: #1802512 - CVE-2019-12528 squid:4/squid: Information Disclosure
    issue in FTP Gateway
  - Resolves: #1771288 - CVE-2019-18678 squid:4/squid: HTTP Request Splitting
    issue in HTTP message processing
  - Resolves: #1771283 - CVE-2019-18679 squid:4/squid: Information Disclosure
    issue in HTTP Digest Authentication
  - Resolves: #1771280 - CVE-2019-18677 squid:4/squid: Cross-Site Request Forgery
    issue in HTTP Request processing
  - Resolves: #1771275 - CVE-2019-12523 squid:4/squid: Improper input validation
    in URI processor
  - Resolves: #1771272 - CVE-2019-18676 squid:4/squid: Buffer overflow in URI
    processor
  - Resolves: #1771264 - CVE-2019-12526 squid:4/squid: Heap overflow issue in URN
    processing
  - Resolves: #1738581 - CVE-2019-12529 squid: OOB read in Proxy-Authorization
    header causes DoS


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-2
changelog:
  - Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and
    poisoning attack against the HTTP cache
  - Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-3
changelog:
  - Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result
    in cache poisoning
  - Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result
    in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-4.2
changelog:
  - Resolves: #1944260 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-2
changelog:
  - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
    and as a result is not able to download zip file.CODE 404 TO CLIENT)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3
changelog:
  - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
    protocol data may lead to information disclosure


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3.2
changelog:
  - Resolves: #2130258 - CVE-2022-41318 squid:4/squid: buffer-over-read in SSPI and SMB
    authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.23-5
changelog:
  - Resolves: #1585617 - Build against libdb only instead of libdb4
  - disabled strict checking for now (squid can not be built with GCC8)


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-1
changelog:
  - Resolves: #1656871 - squid rebase to 4.4
  - Resolves: #1645148 - CVE-2018-19131 squid: Cross-Site Scripting when
    generating HTTPS response messages about TLS errors
  - Resolves: #1645156 - CVE-2018-19132 squid: Memory leak in SNMP query
    rejection code


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-5
changelog:
  - Resolves: #1744672 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
    in HttpHeader::getAuth


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8.1
changelog:
  - Resolves: #1828368 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow
  - Resolves: #1828367 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1829402 - CVE-2019-12525 squid:4/squid: parsing of header
    Proxy-Authentication leads to memory corruption


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8.2
changelog:
  - Resolves: #1872345 - CVE-2020-15811 squid:4/squid: HTTP Request Splitting
    could result in cache poisoning
  - Resolves: #1872330 - CVE-2020-15810 squid:4/squid: HTTP Request Smuggling
    could result in cache poisoning


author: Stephen Gallagher <sgallagh@redhat.com> - 2.3.3-5
changelog:
  - Autodetect the minimum key strength from the system security level.
  - Autodetect the hash algorithm to use from the system security level.
  - Disallow setting a key strength below the system minimum.
  - Resolves: rhbz#1653323


author: Stephen Gallagher <sgallagh@redhat.com> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - Switch to meson build system
  - Add support for non-DNS subjectAlternativeName values (issue #4)


author: Clark Williams <williams@redhat.com> - 1.2-1
changelog:
  - utils.c: added info() functions
  - detect and correctly parse old-style /proc/sched_debug
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning
  - ensure we only count task lines in old-format sched_debug info
  - Add comments, clean up trailing whitespace
  - src/utils: Fix runtime parameters check
  - stalld: Do not take actions if log_only is set
  - remove warning from parse_old_task_format


author: Clark Williams <williams@redhat.com> - 1.3-1
changelog:
  - Readme: Add information about repositories
  - Add version management and version option
  - create doc and scripts directory and add info on releases


author: Clark Williams <williams@redhat.com> - 1.4-1
changelog:
  - stalld: Set rt_runtime to -1 before trying the SCHED_DEADLINE
  - Fix incorrect recursion of specfile version field


author: Clark Williams <williams@redhat.com> - 1.7-1
changelog:
  - rework detect_task_format and buffer_size logic
  - make CFLAGS for local compile match rpmbuild CFLAGS


author: Clark Williams <williams@redhat.com> - 1.8-1
changelog:
  - Fix Readiness Protocol Mismatch with systemd
  - test01:  update to use buildin atomic operations
  - test01: add throttling check


author: Clark Williams <williams@redhat.com> - 1.9-1
changelog:
  - Set starvation threshold default to 30 seconds
  - rework read buffer allocation to properly find page size
  - Add the -g/--granularity option
  - Change the default granularity to five seconds
  - Implement idle detection
  - Implement the single-threaded mode
  - Add HRTICK_DL support


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task() (1934582)
  - stalld.service: Run stalld as sched_fifo via systemd
  - stalld: Add error handling in get_cpu_idle_time() (1966259)
  - packaging: clean up Makefiles and rpm specfile (1972806)
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096 (1934581)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one (1920041)
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic (1977663)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983100)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types
    Resolves: rhbz#1990057, rhbz#1996799, rhbz#1996825


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068549


author: Clark Williams <williams@redhat.com> - 1.1-1
changelog:
  - Fix an option in README.md; consistency in user facing docs.
  - Makefile: add 'static' target to link stalld statically
  - gitignore: ignore object files and the stalld executable
  - use FIFO for boosting (v3)
  - stalld.c: fix sched_debug parsing and modify waiting task parsing
  - redhat:  update release for features and bugfix
  - stalld: Do not die if sched_debug returns an invalid value
  - src/stalld: Do not die if the comm is too large
  - src/stalld: Do not die if cannot write a message to the log
  - src/stalld: Do not die if the main runs while a thread is monitoring the CPU
  - implement RT throttling management and refactor source files
  - more refactoring
  - src/stalld: Reuse already read nr_running nr_rt_running
  - src/stalld: Gracefully handle CPUs not found on sched_debug
  - src/stalld: Use dynamically allocated memory to read sched_debug
  - src/utils: Die with a divizion by zero if verbose
  - src/stalld: Add config_buffer_size variable
  - src/stalld: Increase the sched_debug read buffer if it gets too small
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-4
changelog:
  - Update to 2.0.0
  - Resolves: rhbz#1760906
  - Fix a bug where last update time for variable length metadata was not set
    properly on startup:
  - Resolves: rhbz#1720399
  - Specify path of PID file as "/run/stratisd.pid" instead of 
    "/var/run/stratisd.pid".
  - Resolves: rhbz#1754649
  - For a particular log entry, reduce log level from INFO to DEBUG and make the
    log message more detailed:
  - Resolves: rhbz#1680052


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Resolves: rhbz#1791473
  - Update Stratis RPM Spec File
  - Resolves: rhbz#1828487
  - Support per-pool encryption of the devices that form a pool's data tier
  - Resolves: rhbz#1768580
  - Improve systemd unit file description
  - Resolves: rhbz#1756525


author: Dennis Keefe <dkeefe@redhat.com> - 2.3.0-2
changelog:
  - Update to 2.3.0
  - Resolves: rhbz#1885328
  - Stratis devices inhabit an existing root directory path
  - Resolves: rhbz#1798244
  - Add Clevis Support
  - Resolves: rhbz#1868100
  - Improve stratisd log levels
  - Resolves: rhbz#1757976


author: Bryan Gurney <bgurney@redhat.com> - 2.4.0-3
changelog:
  - Update to 2.4.0
  - Resolves: rhbz#1931671
  - Improve stratis by adding Multi-threading
  - Resolves: rhbz#1927485
  - Dump stratis configuration on demand or in debug
  - Resolves: rhbz#1735475
  - Add noalign option to XFS creation on MDV
  - Resolves: rhbz#1908318
  - Cap thinpool metadata device size at devicemapper-set limit
  - Resolves: rhbz#1707461


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931671
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.18-4
changelog:
  - Fix supermin crash with truncated vmlinuz file (RHBZ#1477758).
  - Include all upstream patches since 5.1.18.


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Bastien Nocera <bnocera@redhat.com> - 1.1-1
changelog:
  + switcheroo-control-1.1-1
  - Update to 1.1
  - Don't throw errors when the machine doesn't have dual-GPU (#1391212)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: Michal Sekletár <msekleta@redhat.com> - 11.7.3-2
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#1624177)


author: <msekleta@redhat.com> - 11.7.3-6
changelog:
  - Don't trigger autofs mounts when running sadc (#1954793)
  - sar: Add missing %gnice CPU value for tickless CPU (#1908996)


author: <msekleta@redhat.com> - 11.7.3-7
changelog:
  - Don't trigger autofs mounts when running sadc (#2000910)
  - sar: Add missing %gnice CPU value for tickless CPU (#2000916)
  - sadf: Fix seg fault on empty data files (#1910841)
  - sar: Fix typo in manual page (#1877836)


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-2
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys


author: Stan Cox <scox@redhat.com> - 4.7-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.6-2
changelog:
  - Splitted documentation to the doc subpackage
    Resolves: rhbz#1380291
  - Fixed whitespace
  - Dropped obsoleted defattr


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.8-2
changelog:
  - Reverted _module_build macro check which fixes systemtap probes on RHEL-8
    Resolves: rhbz#1579386


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Removing build-time dependency on sharutils(rhbz#1587877)
  - Changing git dependency to smaller git-core


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-6
changelog:
  - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally
  - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-2
changelog:
  - Resolves: #1860216 - tcpdump can not parse mptcp options
  - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory
  - Adding tedude test to gating


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.20.00-5
changelog:
  - Added multiple upstream patches:
      tcsh-6.20.00-004-do-not-use-old-pointer-tricks.patch
      tcsh-6.20.00-005-reset-fixes-numbering.patch
      tcsh-6.20.00-006-cleanup-in-readme-files.patch
      tcsh-6.20.00-007-look-for-tgetent-in-libtinfo.patch
      tcsh-6.20.00-008-guard-ascii-only-reversion.patch
      tcsh-6.20.00-009-fix-regexp-for-backlash-quoting-tests.patch (bug #1424082)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.20.00-2
changelog:
  - Added multiple upstream patches:
      tcsh-6.20.00-000-add-all-flags-for-gethost-build.patch
      tcsh-6.20.00-001-delay-arginp-interpreting.patch
      tcsh-6.20.00-002-type-of-read-in-prompt-confirm.patch (bug #1386129)


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-73
changelog:
  - Resolves: #1602711 - Please review important issues found by covscan
  - Resolves: #1637085 - Option -i is missing in telnet in el8 but is available in el7


author: Than Ngo <than@redhat.com> - 7:20180414-12
changelog:
  - texconfig is needed in texconfig-sys, added Requirement texlive-texconfig
  - multilib issue detected by rpmdiff
  - drop obsoleted patch for poppler-0.58
  - XML validity issue
    Related: #1602712


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-25
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066853)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066862)


author: Martin Stransky <stransky@redhat.com> - 60.7.2-3
changelog:
  - Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate
    with gmail with ssl/tls and OAuth2.


author: Jan Grulich <jgrulich@redhat.com> - 1.10.1-5
changelog:
  - Install the HOWTO file to correct location
  - Add /usr/bin/vncserver file informing users to read the HOWTO.md file
    Resolves: bz#1790443


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
    Resolves: bz#1880985
  - Backport fix to allow Tigervnc use boolean values in config files
    Resolves: bz#1883415


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-2
changelog:
  - Revert removal of vncserver
    Resolves: bz#1897504
  - Correctly start vncsession as a daemon
    Resolves: bz#1897498


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-4
changelog:
  - Added vncsession-restore script for SELinux policy migration
    Fix SELinux context for root user
    Resolves: bz#2021892


author: Jan Grulich <jgrulich@redhat.com> - 1.9.0-7
changelog:
  - Improve coverity scan fixes
    Resolves: bz#1602714

    Inform whether view-only password is used or not
    Resolves: bz#1639169

    Backport fixes from RHEL 7
    Resolves: bz#1651254


author: Jan Grulich <jgrulich@redhat.com> - 1.9.0-13
changelog:
  - Fix stack buffer overflow in CMsgReader::readSetCursor
    Resolves: bz#1819877

  - Fix heap buffer overflow in DecodeManager::decodeRect
    Resolves: bz#1819879

  - Fix heap buffer overflow in TightDecoder::FilterGradient
    Resolves: bz#1819882

  - Fix heap-based buffer overflow triggered from CopyRectDecoder
    Resolves: bz#1819886

  - Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
    Resolves: bz#1819884


author: Jan Grulich <jgrulich@redhat.com> - 1.9.0-14
changelog:
  - Bump build version
    Resolves: bz#1819877
    Resolves: bz#1819879
    Resolves: bz#1819882
    Resolves: bz#1819886
    Resolves: bz#1819884


author: Kirill Glebov <kgliebov@redhat.com> - 5-1
changelog:
  - Release v5. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Implement support for --configuration option for all programs.
    The option makes the program output its configuration in JSON and then
    exit.
  - Add BuildDependencies to allow yum-builddep.
  - Open JSON writer file with euid/egid. To allow creating protected log files
    with tlog-rec-session, open the JSON writer's file with the EUID and
    GUID the program was started with.
  - Installing Packages with the APT Addon instead of apt-get.
  - Switch to using TLOG_ERRS_RAISE macros.
  - Fix tlog-play cleanup-path segfault.
  - Modify command-line option parsing.
  - Remove "fields" field from ES query URL to fix compatibility with
    Elasticsearch 5.
  - Remove unused _source parameter from ES query URL.
  - Fix tlog-rec-session file permissions bug.
  - Use CLOCK_MONOTONIC for rate-limiting writing.
  - Filter out some more input control sequences.


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Add integration tests for end-to-end test coverage.
  - Fix compiler type comparison error with json-c json_object_array_length
    return value.
  - Fix a distribution issue causing incorrect M4_CONF_PATH expansion.
  - Log more detailed error when systemd journal is not present.


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Allow tlog-play redirection of stdout
  - Add -i/--interactive option to tlog-rec-session. Allows login
    programs to call tlog-rec-session more transparently.
  - Make in_txt/out_txt fields optional. This handles missing fields
    when reading from Elasticsearch or other backends.


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording transfer exit
    condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Fire SIGCHLD after utempter_add_record since it probably eats it.
  - Correct suse rpmbuild
  - Update debbuild for travis CI


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 1-1
changelog:
  - Release v1. Not ready for production. Following features are included.
  - Recording of user input, program output and window size changes.
  - Support for writing into syslog and files.
  - Tlog-rec configuration through system-wide configuration file
    /etc/tlog/tlog-rec.conf, environment variables and command line.
  - Very basic playback directly from ElasticSearch.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2-1
changelog:
  - Release v2. Not ready for production. Following features are added.
  - Fully-fledged command-line interface to tlog-play, along with config file
    and man pages.
  - Support for playback from file in tlog-play.
  - Make tlog-play follow mode controllable and off by default.
  - Get tlog-rec shell also from TLOG_REC_SHELL environment variable.
  - Support non-TTY stdin/stdout in tlog-rec, allowing its use with
    non-interactive SSH sessions.
  - Support building on and packaging for EPEL5.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3-1
changelog:
  - Release v3. Added features and implemented fixes follow.
  - Make each JSON message timing data start with window size.
    This makes it possible to pick up the stream from any message and also
    combine messages, with window size known and preserved at all times.
  - Add "term" field to JSON messages, specifying terminal type.
  - Add "ver" field to JSON messages, specifying message format version.
  - Set "SHELL" environment variable to actual user shell in tlog-rec.
  - Check for locale's charset and abort tlog-rec if it's anything but the only
    supported UTF-8.
  - Add -v/--version option support to tlog-rec and tlog-play.
  - Fix tlog-rec and tlog-play error output by accumulating error messages and
    outputting them only after terminal settings are restored, on exit. Output
    startup warnings before switching to raw terminal settings.
  - Output a newline after restoring terminal settings in tlog-rec and
    tlog-play, so that following output is not stuck to the end of the last line
    of the raw output.
  - Add an Elasticsearch mapping to documentation directory.
  - Disable input logging by default to avoid storing passwords. Please enable
    it explicitly in configuration, or on the command line, if necessary.
  - Close log file written by tlog-rec on executing the shell in the child to
    prevent log modification by the recorded user.
  - Support running tlog-rec SUID/SGID to prevent recorded users from killing or
    modifying it. Make tlog-rec SUID/SGID to user "tlog" in the RPM package.
  - Add session locking to tlog-rec. This prevents tlog-rec from recording if
    the audit session is already recorded by creating per-audit-session lock
    files in /var/run/tlog. This only makes sense with tlog-rec SUID/SGID.
    When certain failures occur while creating a lock file, session is assumed
    unlocked and is recorded anyway, as it is safer to record a session than
    not. Add corresponding setup to the RPM package.
  - Reproduce the recorded program (shell) exit status in tlog-rec similarly to
    how Bash reproduces the last executed command status.
  - Update and expand README.md to describe secure log message filtering with
    rsyslog, and playback directly from Elasticsearch, among other, smaller
    additions.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 4-1
changelog:
  - Release v4. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Extract user session recording functionality from tlog-rec into a new tool:
    tlog-rec-session. It should be used as the user's login shell now, and
    tlog-rec should be used as a general recording and testing tool.
  - Add (optional) support for writing to and reading from Systemd Journal - the
    "journal" reader and writer.
  - Make tlog-rec default to "file" writer, and tlog-rec-session to "journal",
    if built with Journal support, and to "syslog" otherwise.
  - Add "-o" option to tlog-rec as an alias to "--file-path".
  - Add "-i" option to tlog-play as an alias to "--file-path".
  - Assume locale charset is UTF-8, if ASCII charset is detected, since that is
    a likely indication the locale settings were lost. E.g. upon console login
    or "su -" on Fedora and RHEL.
  - Switch the "ver" JSON field type to string. Now it should be two numbers
    separated by a dot. The increase of the first number indicates
    forward-incompatible changes, the increase of the second number -
    forward-compatible. If the dot and the second number are omitted, the second
    number is considered to be zero. Bump the format version to "2".
  - Add a new JSON field: "rec", containing an opaque host-unique recording ID.
    Bump the format version to "2.1".
  - Add support for playback controls, both through the command line and via
    playback-time control keys, including: speed adjustment, pause/resume,
    fast-forward to a time, and packet-by-packet stepping through the recording.
  - Add optional rate-limiting of logged messages. Both throttling and dropping
    messages are supported.
  - Add "--lax" option to tlog-play to allow playing back recordings with
    missing messages.
  - Fix input being ignored when there is a lot of output, while recording.
  - Remove addition of tlog-rec (tlog-rec-session) to /etc/shells from RPM
    packaging to prevent users from changing their shells themselves once it has
    been assigned.
  - Add support for specifying the shell to start via the tlog-rec-session
    executable name. E.g. by making a tlog-rec-session-shell-bin-zsh ->
    tlog-rec-session symlink and executing it. That can be used to specify
    particular shells to be recorded for specific users by assigning these
    symlinks as their login shells.
  - Make error messages from all the tools a bit less noisy and more readable.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 4-1
changelog:
  - Release v4. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Extract user session recording functionality from tlog-rec into a new tool:
    tlog-rec-session. It should be used as the user's login shell now, and
    tlog-rec should be used as a general recording and testing tool.
  - Add (optional) support for writing to and reading from Systemd Journal - the
    "journal" reader and writer.
  - Make tlog-rec default to "file" writer, and tlog-rec-session to "journal",
    if built with Journal support, and to "syslog" otherwise.
  - Add "-o" option to tlog-rec as an alias to "--file-path".
  - Add "-i" option to tlog-play as an alias to "--file-path".
  - Assume locale charset is UTF-8, if ASCII charset is detected, since that is
    a likely indication the locale settings were lost. E.g. upon console login
    or "su -" on Fedora and RHEL.
  - Switch the "ver" JSON field type to string. Now it should be two numbers
    separated by a dot. The increase of the first number indicates
    forward-incompatible changes, the increase of the second number -
    forward-compatible. If the dot and the second number are omitted, the second
    number is considered to be zero. Bump the format version to "2".
  - Add a new JSON field: "rec", containing an opaque host-unique recording ID.
    Bump the format version to "2.1".
  - Add support for playback controls, both through the command line and via
    playback-time control keys, including: speed adjustment, pause/resume,
    fast-forward to a time, and packet-by-packet stepping through the recording.
  - Add optional rate-limiting of logged messages. Both throttling and dropping
    messages are supported.
  - Add "--lax" option to tlog-play to allow playing back recordings with
    missing messages.
  - Fix input being ignored when there is a lot of output, while recording.
  - Remove addition of tlog-rec (tlog-rec-session) to /etc/shells from RPM
    packaging to prevent users from changing their shells themselves once it has
    been assigned.
  - Add support for specifying the shell to start via the tlog-rec-session
    executable name. E.g. by making a tlog-rec-session-shell-zsh ->
    tlog-rec-session symlink and executing it. That can be used to specify
    particular shells to be recorded for specific users by assigning these
    symlinks as their login shells.
  - Make error messages from all the tools a bit less noisy and more readable.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-36
changelog:
  - Move SSL certificates to more convenient place, update related scripts
    and README.RedHat.SSL
    Related: #1308809


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-1
changelog:
  - Update to 0.0.99.2
  - Make 'toolbox' create or fall back to a container if possible
  Resolves: #1914687
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-2
changelog:
  - Actually apply the patch to make 'toolbox' create or fall back to a
    container if possible
  - Support logging into a registry if necessary
  - Related: #1934415


author: David Brown <david.brown@pnnl.gov> - 4.2.10-9
changelog:
  - Resolve dependencies for rawhide (#1308192)
  - Fix port and args environment variables for el5/6 (#1254301)


author: Honggang Li <honli@redhat.com> - 4.2.10-25
changelog:
  - Rebase to latest Fedora release
  - Fix file conflicts in torque-devel multilib packages
  - Resolve: bz1853167


author: Wim Taymans <wtaymans@redhat.com> - 0.3.13-12
changelog:
  - Add explicit Requires for the -libs package.
  - Do NVR bump to move twolame-devel from buildroot to CRB
  - Resolves: rhbz#1843275


author: Jiri Kucera <jkucera@redhat.com> - 2.3-2
changelog:
  - wrudf: Fix parsing Volume Descriptor Sequence
  - wrudf: Exit on allocation failure
    Related: #1882531


author: Richard Hughes <rhughes@redhat.com> - 0.99.5-1
changelog:
  - New upstream release
  - Add BatteryLevel property for devices with a finite number of power levels
  - Add support for pausing and resuming of the daemon poll
  - Do not spin in a loop when /proc/timer_stats cannot be written
  - Fix reading and writing the keyboard brightness level
  - Get a serial number for device batteries
  - Refresh devices after waking up from sleep
  - Lower initial power usage when iDevice isn't accessible


author: Richard Hughes <rhughes@redhat.com> - 0.99.6-1
changelog:
  - New upstream release
  - Detect joysticks as gaming input devices
  - Fix crash when '@' is present in the device name
  - Grab the model name from device if unavailable from battery


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  + upower-0.99.7-1
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate


author: Daniel Kopeček <dkopecek@redhat.com> - 0.7.2-1
changelog:
  - Update to 0.7.2
  - Don't use --enable-werror downstream
  - Removed patches related to compiler warnings


author: Attila Lakatos <alakatos@redhat.com> - 0.7.8-4
changelog:
  - RHEL 8.3.0 ERRATUM
  - Spec file clean up
  - Rebase to 0.7.8
  Resolves: rhbz#1738590
  - Added selinux subpackage
  Resolves: rhbz#1683567
  - Added notifier subpackage
  - Installing /etc/usbguard/rules.d/
  Resolves: rhbz#1667395
  - Fixed sigwaitinfo handling
  Resolves: rhbz#1835210


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-5
changelog:
  - RHEL 8.3.0 ERRATUM
  - Use old-fasioned forking style in unit file
  Resolves: rhbz#1846885
  - Allow usbguard to read /proc/cpuinfo
  Resolves: rhbz#1847870
  - Removed notifier's Requires for usbguard-devel
  Resolves: rhbz#1667395
  - Allow usbguard to read /dev/urandom
  Resolves: rhbz#1848618


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-6
changelog:
  - RHEL 8.3.0 ERRATUM
  - Removed execstack from .spec
  - Removed AuthorizedDefault=wired from the usbguard
  Resolves: rhbz#1852539
  - Missing error message on bad configuration
  Resolves: rhbz#1857299
  - /etc/usbguard/usbguard-daemon.conf file does not contain all default options
  Resolves: rhbz#1862907


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-1
changelog:
  - Rebase to 1.0.0
  Resolves: rhbz#1887448
  - Filtering rules by attribute
  Resolves: rhbz#1873953
  - Change device policy of multiple devices using rule instead of ID
  Resolves: rhbz#1852568


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-8
changelog:
  - change usbguard icon injection
  - fix DSP module definition in spec file
  Resolves: rhbz#2014441
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Bastien Nocera <bnocera@redhat.com> - 1.1.0-13
changelog:
  + usbmuxd-1.1.0-13
  - Fix usbmuxd not starting up a second time, and properties being lost
    with kernel >= 4.12


author: Miloslav Trmač <mitr@redhat.com> - 1.111-10
changelog:
  - Fix a FBFS with  -Werror=format-security
    Resolves #1444750
  - Fix inconsistent dates in %changelog


author: Jiri Kucera <jkucera@redhat.com> - 1.112-2
changelog:
  - Dropped need to run autotools
  - <sys/sysmacros.h> must be now included manually
    Resolves #1611752
  - Fixed bad FSF address


author: Jiri Kucera <jkucera@redhat.com> - 1.113-2
changelog:
  - Fix typo in pam-panel-icon manpage
    Do not use deprecated selinux API
    Do not use fexecve
    Resolves: #1775931


author: Matias Kreder <mkreder@gmail.com> - 1.6.2-34
changelog:
  - Removed uuid-php subpackage since php(api) is no longer provided on
  - PHP 7 and there is a replacement (pecl/uuid extension)


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-2
changelog:
  - Add valgrind-3.14.0-s390x-fix-reg-alloc-vr-vs-fpr.patch.
  - Add valgrind-3.14.0-s390x-sign-extend-lochi.patch.
  - Add valgrind-3.14.0-s390x-vec-reg-vgdb.patch.
  - Add valgrind-3.14.0-s390x-vec-float-point-code.patch
    and valgrind-3.14.0-s390x-vec-float-point-tests.patch
  - Only run full regtests on x86_64 on fedora or latest rhel.


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-4
changelog:
  - Add valgrind-3.14.0-get_otrack_shadow_offset_wrk-ppc.patch,
    valgrind-3.14.0-new-strlen-IROps.patch,
    valgrind-3.14.0-ppc-instr-new-IROps.patch,
    valgrind-3.14.0-memcheck-new-IROps.patch,
    valgrind-3.14.0-ppc-frontend-new-IROps.patch,
    valgrind-3.14.0-transform-popcount64-ctznat64.patch and
    valgrind-3.14.0-enable-ppc-Iop_Sar_Shr8.patch (#1532205)


author: Mark Wielaard <mjw@redhat.com>
changelog:
  - Add valgrind-3.14.0-wcsncmp.patch (#1655642)

  - Replace valgrind-3.14.0-s390x-vec-float-point-{code,test}.patch
    with upstream versions. (#1525405)


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-6
changelog:
  - Add valgrind-3.14.0-final_tidyup.patch
  - Add valgrind-3.14.0-ppc64-ldbrx.patch
  - Add valgrind-3.14.0-ppc64-unaligned-words.patch
  - Add valgrind-3.14.0-ppc64-lxvd2x.patch
  - Add valgrind-3.14.0-ppc64-unaligned-vecs.patch
  - Add valgrind-3.14.0-ppc64-lxvb16x.patch
  - Add valgrind-3.14.0-set_AV_CR6.patch
  - Add valgrind-3.14.0-undef_malloc_args.patch
  - Add valgrind-3.14.0-jm-vmx-constraints.patch
  - Add valgrind-3.14.0-sigkill.patch
  - Add valgrind-3.14.0-ppc64-ptrace.patch


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-5
changelog:
  - Add valgrind-3.17.0-s390-prep.patch
  - Add valgrind-3.17.0-s390-z15.patch
  - Add valgrind-3.17.0-s390-z13-vec-fix.patch


author: Mark Wielaard <mjw@redhat.com> - 3.18.1-5
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch
  - Add valgrind-3.18.1-condvar.patch
  - Add valgrind-3.18.1-demangle-namespace.patch


author: Lubos Uhliarik <luhliari@redhat.com> - 0.15.0-1
changelog:
  - updated to newer version (0.15.0)
  - Drop EPEL and older Fedora releases support
  - Drop broken manual ABI dependency to Varnish
  - Drop commented out references to past patches
  - Verbose test suite
  - Simplified configure step
  - Dependencies cleanup


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-17
changelog:
  - Remove ldconfig
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/


author: Zdenek Dohnal <zdohnal@redhat.com> - 8.0.1763-2
changelog:
  - 1576470 - Suggest correct packages to get embedded interpreters working
  - add libappstream-glib for appstream-util
  - 1576483 - Vim needs Python2 to build


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-8
changelog:
  - 1640919 - augroup fedora, test case failure: /CoreOS/vim/Regression/bz241308-use-augroup-for-rh-autocmds


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16
changelog:
  - 2004974 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.5.0]
  - 2004891 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-8.5.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16.3
changelog:
  - 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
  - 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16.4
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16.5
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c


author: Tomas Korbar <tkorbar@redhat.com> - 2:8.0.1763-16.8
changelog:
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  - Resolves: rhbz#2049403


author: Tomas Korbar <tkorbar@redhat.com> - 2:8.0.1763-16.9
changelog:
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  - Improve fix
  - Resolves: rhbz#2049403


author: Tomas Korbar <tkorbar@redhat.com> - 2:8.0.1763-16.11
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - Fix specfile problems
  - Resolves: rhbz#2048525


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16
changelog:
  - 2004975 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.6.0]
  - 2004892 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-8.6.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-17
changelog:
  - 2016201 - CVE-2021-3872 vim: heap-based buffer overflow in win_redr_status() drawscreen.c [rhel-8.6.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-18
changelog:
  - fix test suite after fix for CVE-2022-0318
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-18
changelog:
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-19.3
changelog:
  - CVE-2022-1785 vim: Out-of-bounds Write
  - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
  - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-11
changelog:
  - v2v: windows: Allow qxldod.inf as synonym for qxl.inf
    resolves: rhbz#1926102
  - v2v: Increase required free space in Windows to 100 MB
    resolves: rhbz#1949147
  - docs: Document how to remove "Out of HTTP sessions" limit
  - v2v: Disable readahead for VMware curl sources too
    resolves: rhbz#1848862
  - v2v: Allow output to block devices
    resolves: rhbz#1868690
  - docs: -o openstack: Clarify name of file containing OpenStack auth
    resolves: rhbz#1871754
  - docs: UEFI guest conversion to -o openstack is supported
    resolves: rhbz#1872100
  - v2v: Turn pnp_wait.exe warning into a debug message
    resolves: rhbz#1903960
  - v2v: windows: Fix schtasks /SD parameter
    resolves: rhbz#1895323


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-13
changelog:
  - docs: Fix version of virt-v2v which added UEFI for OpenStack
    related: rhbz#1872100
  - v2v: Increase Linux minimum root filesystem to 100 MB
    resolves: rhbz#1764569


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-17
changelog:
  - Correct regexps used to fix schtasks command
  - Fix backing file specified without backing format
    resolves: rhbz#2023279, rhbz#2025769


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-21
changelog:
  - Fix assertion failure when parsing OVA dir with trailing slash
    resolves: rhbz#2028823
  - For -o rhv-upload wait for VM creation task
    resolves: rhbz#1985827
  - If listing RPM applications fails, rebuild DB and retry (2089623)
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102720


author: Uri Lublin <uril@redhat.com> - 9.0-5
changelog:
  - More specific key accelerator description for cursor release
    Resolves: rhbz#1548371
  - Report detailed error when file transfer fails
    Resolves: rhbz#1753563
  - Update copyright year in "about ui"
    Resolves: rhbz#1848267
  - Show an error dialog upon vnc-error
    Resolves: rhbz#1448151
  - Fix warning by Coverity
    Resolves: rhbz#1876719


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 9.0-1
changelog:
  - Rebase to latest upstream
    Resolves: rhbz#1837489
  - Do not filter out DATA storage domains
    Resolves: rhbz#1835640


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-25
changelog:
  - Add config option log_die allowing to pass error messages to syslog
  - Add config option bind_retries allowing to change the max number
  - of attempts to find a listening port for the PASV/EPSV command
  - Resolves: rhbz#1318198


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-32
changelog:
  - Removed a hint about the ftp_home_dir SELinux boolean from the config file
  - Resolves: rhbz#1623424


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-33
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1947900


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.30.2-2
changelog:
  - Try to fix coverity build by disabling docs (thanks to Kamil Dudka <kdudka@redhat.com>!)
  - Related: #1883304


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.36.1-1
changelog:
  - Update to 2.36.1
    Related: #2061994
  - Resolves: #2075492
  - Resolves: #2075494
  - Resolves: #2075496


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052604
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Tomas Hozza <thozza@redhat.com> - 1.19.4-1
changelog:
  - Update to the latest upstream version
  - Fix issue with decompressing with broken web servers (#1532233)


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-7
changelog:
  - Resolves: #1642919 - CVE-2018-12086, CVE-2018-18225, CVE-2018-18226, CVE-2018-18227
  - Resolves: #1656342 - CVE-2018-19623
  - Resolves: #1657634 - CVE-2018-19625
  - Resolves: #1657211 - CVE-2018-19626
  - Resolves: #1657184 - CVE-2018-19627
  - Resolves: #1657190 - CVE-2018-19628
  - fixes CVE-2018-19622, CVE-2018-19624


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-15
changelog:
  - Resolves: #2119126 - Wireshark source rpm fails to build due to looking for incorrect libssh header files


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-1
changelog:
  - New version 2.6.2
  - Contains fixes for CVE-2018-14339, CVE-2018-14340, CVE-2018-14341, CVE-2018-14342, CVE-2018-14343, CVE-2018-14344, CVE-2018-14367, CVE-2018-14368, CVE-2018-14369, CVE-2018-14370


author: Tomas Popela <tpopela@redhat.com> - 1.6.0-5
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1949809


author: Jonas Ådahl <jadahl@redhat.com> - 1.6.0-1
changelog:
  - Rebase to 1.6.0 (#1837413)
  - Bump supported Mutter screen cast API version (#1837413)
  - Backport bugfix (#1837413)


author: Debarshi Ray <rishi@fedoraproject.org> - 1.8.0-1
changelog:
  - Rebase to 1.8.0
  - Remove unnecessary non-arch-specific explicit library Requires
  Resolves: #2062432


author: Ondrej Vasik <ovasik@redhat.com> 0.0.27-1
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-1
changelog:
  - ati 19.1.0 (#1728818)
  - Drop patch 0001-Don-t-set-up-black-scanout-buffer-if-LeaveVT-is-call.patch,
    merged upstream
  - Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &
    0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
    upstream Git master, fixing crashes with ShadowFB


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Christophe Fergeau <cfergeau@redhat.com> - 0.1.5-7
changelog:
  - Add upstream patches for Python 3 support
  - Validate RANDR output property atoms
  - Add patch fixing crash with multiple QXL devices
  - This syncs the RHEL branch with both current rawhide and RHEL 7.6


author: Adam Jackson <ajax@redhat.com> - 2.4.0-3
changelog:
  - Restore no-virt-shadowfb patch
  - Refuse to run if there's a UEFI framebuffer; use fbdev or a native driver


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-3
changelog:
  - Downgrade modesetting "glamor initialization failed" X_ERROR → X_INFO
    Resolves: #1724573
  - Xwayland / Present leak fixes for #1728684


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-5
changelog:
  - xwayland: Hold a pixmap reference in struct xwl_present_event
    Related: #1728684
  - glamor: Fix glamor_poly_fill_rect_gl xRectangle::width/height handling
    Resolves: #1740250


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-8
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872391), CVE-2020-14346 (#1872395),
    CVE-2020-14361 (#1872402), CVE-2020-14362 (#1872409)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-4
changelog:
  - CVE fix for: CVE-2021-4008 (#2030162), CVE-2021-4009 (#2030172),
    CVE-2021-4010 (#2030175), CVE-2021-4011 (#2030181)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-9
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2108156, rhbz#2108161


author: Ben Crocker <bcrocker@redhat.com> - 1.20.3-5
changelog:
  - Add Eric Anholt's patch e50c85f4ebf559 from upstream:
  - Fix segfault on probing a non-PCI platform device on a system with PCI
  - NOTE: also pertains on a system with no PCI, e.g. s390x.
    Resolves: #1652013


author: Olivier Fourdan <ofourdan@redhat.com> - 21.0.99.902-1
changelog:
  - xwayland 21.0.99.902
  - Remove xdmcp, udev, udev_kms build options
  - Stop overriding the vendor name, same as xorg-x11-server


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-2
changelog:
  - CVE fix for: CVE-2021-4008 (#2038066), CVE-2021-4009 (#2038068),
    CVE-2021-4010 (#2038071), CVE-2021-4011 (#2038073)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-6
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2110442, rhbz#2110437


author: Adam Jackson <ajax@redhat.com> - 7.7-25
changelog:
  - iceauth 1.0.8
  - xkill 1.0.5
  - xrdb 1.1.1
  - xrefresh 1.0.6
  - xset 1.2.4
  - xsetroot 1.1.2
  - HTTPS URLs


author: Adam Jackson <ajax@redhat.com> - 1.0.9-12
changelog:
  - Nerf the python-related BuildRequires. They're only needed for 'make check',
    and cmdtest is not yet a python3 package.


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-12
changelog:
  - Drop 0001-startx-Pass-nolisten-tcp-by-default.patch this is the
    server default now
  - Check for SSH_AUTH_SOCK not SSH_AGENT in xinitrc-common (rhbz#1352339)


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-13
changelog:
  - Check for all 3 of SSH_AGENT, SSH_AGENT_PID and SSH_AUTH_SOCK to fix
    a regression introduced by the previous fix (rhbz#1352339)


author: Adam Jackson <ajax@redhat.com> - 7.7-24
changelog:
  - Make -devel Require the base package, so the pc file will point to an
    xkbcomp that actually exists.


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.999-28
changelog:
  - remove dependency on ImageMagick and netpbm-progs, because they were needed for
    tests during %build phase, which were removed in commit SHA 0595c15da29


author: Tomas Popela <tpopela@redhat.com> - 2:3.28.1-3
changelog:
  - Add the Quit entry to the app menu
  - Handle Ctrl+Q shortcut for quitting the application
  - Resolves: rhbz#1638876


author: Matej Mužila <mmuzila@redhat.com> - 3:2.4-5
changelog:
  - Add "Wants" dependency on network-online.target
  - Remove "After" dependency on NetworkManager-wait-online.service


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-3
changelog:
  - Fix CVEs 2018-7725, 2018-7726, 2018-7727, 2018-6484, 2018-6869 
  - Resolves: 1555082
  - Resolves: 1545818


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-6
changelog:
  - Fix multilib regression by adding a 32bit version of the multilib patch
  - Properly bump the release number in the previous changelog message
  - Resolves: #1638337


