# changelog

author: Jindrich Novy <jnovy@redhat.com> - 2.2.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v2.2.1-rhel
    (https://github.com/containers/podman/commit/14c35f6)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2.2.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v2.2.1-rhel
    (https://github.com/containers/podman/commit/b5bc6a7)
  - Related: #1877188


author: Jindrich Novy <jnovy@redhat.com> - 2.2.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v2.2.1-rhel
    (https://github.com/containers/podman/commit/1741f15)
  - Related: #1888571


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2.2.1-7
changelog:
  - Resolves: #1925928 - Fix varlink GetVersion()
  - Upstream PR: https://github.com/containers/podman/pull/9274


author: Jan Friesse <jfriesse@redhat.com> 3.0.3-4
changelog:
  - Resolves: rhbz#1780137
  - Resolves: rhbz#1791792
  - Resolves: rhbz#1809864
  - Resolves: rhbz#1816653

  - votequorum: Ignore the icmap_get_* return value (rhbz#1780137)
  - merge upstream commit cddd62f972bca276c934e58f08da84071cec1ddb (rhbz#1780137)
  - man: move cmap_keys man page from section 8 to 7 (rhbz#1791792)
  - merge upstream commit f1d36307e524f9440733f0b01a9fc627a0e1cac7 (rhbz#1791792)
  - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780137)
  - merge upstream commit 8ce65bf951bc1e5b2d64b60ea027fbdc551d4fc8 (rhbz#1780137)
  - stats: Add stats for scheduler misses (rhbz#1791792)
  - merge upstream commit 48b6894ef41e9a06ccbb696d062d86ef60dc2c4b (rhbz#1791792)
  - stats: Use nanoseconds from epoch for schedmiss (rhbz#1791792)
  - merge upstream commit ebd05fa00826c366922e619b012a0684c6856539 (rhbz#1791792)
  - main: Add schedmiss timestamp into message (rhbz#1791792)
  - merge upstream commit 35662dd0ec53f456445c30c0ef92892f47b25aa2 (rhbz#1791792)
  - votequorum: Change check of expected_votes (rhbz#1809864)
  - merge upstream commit 0c16442f2d93f32a229b87d2672e2dc8025ec704 (rhbz#1809864)
  - quorumtool: exit on invalid expected votes (rhbz#1809864)
  - merge upstream commit 5f543465bb3506b7f4929a426f1c22a9c854cecd (rhbz#1809864)
  - votequorum: set wfa status only on startup (rhbz#1816653)
  - merge upstream commit ca320beac25f82c0c555799e647a47975a333c28 (rhbz#1816653)


author: Daiki Ueno <dueno@redhat.com> - 3.6.14-7
changelog:
  - Increase DH key bits to >= 2048 in self-tests (#1879506)
  - Implement self-tests for KDF and CMAC (#1890870)
  - Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.0-21
changelog:
  - logging: Support oVirt input + elasticsearch output.
    Resolves: rhbz#1889893
  - logging: Fixing a logic bug in elasticsearch output template.
    Resolves: rhbz#1878857
  - logging: Support property-based filters in the files and forwards outputs.
    Resolves: rhbz#1889492


author: Alejandro Sáez <asm@redhat.com> - 1.14.10-1
changelog:
  - Rebase to 1.14.10
  - Remove patch to fix missing deferreturn on linux/ppc64le rhbz#1854836
  - Resolves: rhbz#1897181
  - Resolves: rhbz#1897182
  - Resolves: rhbz#1897185


author: Patrik Novotný <panovotn@redhat.com> - 10.15-1
changelog:
  - Rebase to upstream release 10.15
    Resolves: rhbz#1898213
    Resolves: rhbz#1898341
    Resolves: rhbz#1901567


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.2.ea
changelog:
  - Add patch to allow the PKCS11 provider access to the SunJCE provider with the security manager enabled
  - Resolves: rhbz#1883849


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.3.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Moved vendor_version_string to a better place
  - Resolves: rhbz#1883849


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-1
changelog:
  - Update to jdk-11.0.9+11
  - Update release notes for 11.0.9 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-3
changelog:
  - Move all license files to NVR-specific JVM directory.
  - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
  - Resolves: rhbz#1889481


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-3
changelog:
  - Update to jdk-11.0.9.1+1
  - RPM version stays at 11.0.9.11 so as to not break upgrade path.
  - Adds a single patch for JDK-8250861.
  - Resolves: rhbz#1895274


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-34.el8_3.1
changelog:
  - kvm-seccomp-fix-killing-of-whole-process-instead-of-thre.patch [bz#1890885]
  - Resolves: bz#1890885
    (qemu use SCMP_ACT_TRAP even SCMP_ACT_KILL_PROCESS is available [rhel-8.3.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-34.el8_3.2
changelog:
  - kvm-qga-fix-assert-regression-on-guest-shutdown.patch [bz#1900578]
  - Resolves: bz#1900578
    (qemu-ga aborts after guest-shutdown command [rhel-8.3.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-34.el8_3.3
changelog:
  - kvm-qapi-enable-use-of-g_autoptr-with-QAPI-types.patch [bz#1913818]
  - kvm-error-Fix-examples-in-error.h-s-big-comment.patch [bz#1913818]
  - kvm-error-Improve-error.h-s-big-comment.patch [bz#1913818]
  - kvm-error-Document-Error-API-usage-rules.patch [bz#1913818]
  - kvm-error-New-macro-ERRP_GUARD.patch [bz#1913818]
  - kvm-qga-add-command-guest-get-disks.patch [bz#1913818]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Linux.patch [bz#1913818]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Window.patch [bz#1913818]
  - kvm-qga-fix-missing-closedir-in-qmp_guest_get_disks.patch [bz#1913818]
  - kvm-qga-update-schema-for-guest-get-disks-dependents-fie.patch [bz#1913818]
  - Resolves: bz#1913818
    (Report logical_name for disks without mounted file-system [rhel-8.3.0.z])


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.26-2
changelog:
  - network: do not crash on infiniband devices activated in initramfs
    (rvykydal)
    Resolves: rhbz#1890261


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.3.ea
changelog:
  - Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b06.
  - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  - Remove JDK-8165996/PR3506/RH1760437 & JDK-8251117/RH1860990 as now applied upstream.
  - Replace JDK-8223482/RH1860965 with RH1860986 (disable TLSv1.3 when using the NSS-FIPS provider)
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-4
changelog:
  - Add backport of JDK-8223940: "Private key not supported by chosen signature algorithm" to handle lack of provider RSAPSS support
  - Resolves: rhbz#1892216


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-1
changelog:
  - Update to aarch64-shenandoah-jdk8u275-b01 (GA)
  - Update release notes for 8u275.
  - Remove JDK-8223940/RH1892216 backport now included in upstream 8u275.
  - Remove JDK-8236512/RH1889414 backport now included in upstream 8u275.
  - Resolves: rhbz#1895060


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.21.0-1
changelog:
  - Security update to 10.21.0
  - Resolves: RHBZ#1845307
  - Fixes CVE-2020-11080, CVE-2020-8174, CVE-2020-10531
  - Bundle brotli, because --shared-brotli configure option is missing
  - Add i18n subpackage


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.23.1-1
changelog:
  - January Security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Rebase to 10.23.1
  - Resolves: RHBZ#1916461, RHBZ#1914789
  - Resolves: RHBZ#1914783, RHBZ#1916462, RHBZ#1916395, RHBZ#1916459
  - Resolves: RHBZ#1916691, RHBZ#1916689, RHBZ#1916388
  - Remove dot-prop patch, as it is fixed by npm rebase


author: Petr Menšík <pemensik@redhat.com> - 2.79-13.1
changelog:
  - Fix various issues in dnssec validation (CVE-2020-25681)
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.15.4-1
changelog:
  - Security rebase to 14.15.4
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1916463, RHBZ#1914788
  - Resolves: RHBZ#1914785, RHBZ#1916387, RHBZ#1916389, RHBZ#1916390, RHBZ#1916690


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1888571


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.1.ea
changelog:
  - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs.
  - Resolves: rhbz#1906862


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b03 (EA)
  - Update release notes for 8u282-b03.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b04 (EA)
  - Update release notes for 8u282-b04.
  - Remove upstreamed patch PR3519
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b05 (EA)
  - Update release notes for 8u282-b05 and make some minor corrections.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b06 (EA)
  - Update release notes for 8u282-b06.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b07 (EA)
  - Update release notes for 8u282-b07.
  - Fix placement issue in release notes, caught by comparing with vanilla version.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b08 (GA)
  - Update release notes for 8u282-b08.
  - This tarball is embargoed until 2021-01-19 @ 1pm PT.
  - Resolves: rhbz#1908967


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1
changelog:
  - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
  - Resolves: rhbz#1913868


author: Evgeny Kolesnikov <ekolesni@redhat.com> - 1.3.3-6
changelog:
  - Enable profile composition with a specific platform (RHBZ#1896676)
  - Enable YAML probe to work with sets of values (RHBZ#1895715)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-5 + 0.10.3-7
changelog:
  - Do not print "no slots" warning by default (#1744220)
  - Unbreak connecting using gssapi through proxy commands (#1749862)
  - Document in manual pages that CASignatureAlgorithms are handled by crypto policies (#1790604)
  - Use SHA2-based signature algorithms by default for signing certificates (#1790610)
  - Prevent simple ProxyJump loops in configuration files (#1804099)
  - Teach ssh-keyscan to use SHA2 RSA variants (#1744108)
  - Do not fail hard if getrandom() is not available and no SSH_USE_STRONG_RNG is specified (#1812120)
  - Improve wording of crypto policies references in manual pages (#1812854)
  - Do not break X11 forwarding if IPv6 is disabled (#1662189)
  - Enable SHA2-based GSSAPI key exchange algorithms by default (#1816226)
  - Mark RDomain server configuration option unsupported in RHEL (#1807686)
  - Clarify crypto policies defaults in manual pages (#1724195)
  - Mention RSA SHA2 variants in ssh-keygen manual page (#1665900)


author: Honza Horak <hhorak@redhat.com> - 9.6.19-1
changelog:
  - Rebase to 9.6.19
    Also fixes: CVE-2019-10208, CVE-2020-14350, CVE-2019-10130
    Resolves: #1741490
    Resolves: #1867111
    Resolves: #1845074


author: Patrik Novotný <panovotn@redhat.com> - 9.6.20-1
changelog:
  - Rebase to upstream release 9.6.20
    Resolves: rhbz#1901563
    Resolves: rhbz#1898218
    Resolves: rhbz#1898334


author: Akira TAGOH <tagoh@redhat.com> - 1:7.200-2.1
changelog:
  - Backport fontconfig files from Fedora
  - Sub-packaging per family names as usually do in Fdora.
    Resolves: rhbz#1777843


author: Watson Sato <wsato@redhat.com> - 0.1.50-15
changelog:
  - Add and select zIPL bootloader rules in OSPP (rhbz#1886318)
  - Add support for remediation platforms


author: Patrik Novotný <panovotn@redhat.com> - 12.5-1
changelog:
  - Rebase to upstream release 12.5
    Resolves: rhbz#1901555
    Resolves: rhbz#1898223
    Resolves: rhbz#1898329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.1.ea
changelog:
  - Update to jdk-11.0.9+8 (EA)
  - Remove JDK-8252258/RH1868406 now applied upstream.
  - Resolves: rhbz#1876665


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1.1
changelog:
  - Resolves: #1898952 - CVE 2019-20372 nginx:1.16/nginx: HTTP request smuggling
    via error pages in http/ngx_http_special_response.c


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-6
changelog:
  - Redefined linux -> __linux__ and __x86_64 -> __x86_64__ in RH1750419 patch
  - Resolves: rhbz#1784116


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-6
changelog:
  - Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
  - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
  - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
  - Resolves: rhbz#1784116


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+1
  - Update release notes to 11.0.10.0+1
  - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
  - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
  - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with RHEL version.
  - Cleanup debug package descriptions and version number placement.
  - Switch to EA mode for 11.0.10 pre-release builds.
  - Drop JDK-8222286, JDK-8236512 & JDK-8254177 as applied upstream
  - Use system harfbuzz now this is supported.
  - Use system tzdata2020b now it's available.
  - Adjust RH1842572 patch due to context change from JDK-8213400
  - Resolves: rhbz#1903908


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+8
  - Update release notes to 11.0.10.0+8.
  - Update tarball generation script to use PR3818 which handles JDK-8171279 changes
  - Drop JDK-8250861 as applied upstream.
  - Resolves: rhbz#1903908


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0
changelog:
  - Update to jdk-11.0.10.0+9
  - Update release notes to 11.0.10.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-01-19 @ 1pm PT.
  - Resolves: rhbz#1908972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1
changelog:
  - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
  - Resolves: rhbz#1894083


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.10.0.9-2
changelog:
  - Removed lib-style provides for fastdebug_suffix_unquoted
  - Fixed missing condition for fastdebug packages being counted as debug ones
  - Fix typo in variable
  - Resolves: rhbz#1908972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-2
changelog:
  - Fix debug and fastdebug descriptions to emphasise the difference is optimisation or no optimisation.
  - Resolves: rhbz#1908972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-3
changelog:
  - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs.
  - Resolves: rhbz#1915071


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.19.1-1
changelog:
  - Resolves: RHBZ#1901044, #1901045, #1901046, #1901047
  - c-ares, ajv and y18n CVEs and yarn installability issues


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.20.1-1
changelog:
  - Security rebase for January security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1916460, RHBZ#1914786
  - Resolves: RHBZ#1914784, RHBZ#1916396


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.0-4
changelog:
  - change default logging mechanism to use for container engine events
    in containers.conf to be events_logger = "file" - it should fix
    RHEL gating tests for podman nonroot (thanks to Dan Walsh)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-1
changelog:
  - update vendored component versions
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.0-8
changelog:
  - revert back to version aimed at 8.3.1 - skopeo-1.2.0
  - also downgrade versions of vendored libraries
  - Related: #1888571


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-12
changelog:
  - fips need to reject small primes even if they are approved
  - code to autodetect whether or not to use the cache needs to do so
    in a way that doesn't mess with filesystem negative file caching.
  - add kdf selftests


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-14
changelog:
  - Add support for enable/disable in policy. Now if your policy
    file has disallow=x enable=y it will act just like our other 
    libraries.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-16
changelog:
  - Fix the following CVE
  - CVE-2020-12403 chacha-poly issues
  - CVE-2020-12400 constant time ECC.
  - CVE-2020-6829  constant time ECC.


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el8
changelog:
  - ci-Make-cloud-init.service-execute-after-network-is-up.patch [bz#1803928]
  - Resolves: bz#1803928
    ([RHEL8.3] Race condition of starting cloud-init and NetworkManager)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el8
changelog:
  - ci-changing-ds-identify-patch-from-usr-lib-to-usr-libex.patch [bz#1834173]
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el8
changelog:
  - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1822343]
  - ci-Render-the-generator-from-template-instead-of-cp.patch [bz#1834173]
  - ci-Change-from-redhat-to-rhel-in-systemd-generator-tmpl.patch [bz#1834173]
  - ci-cloud-init.service.tmpl-use-rhel-instead-of-redhat-4.patch [bz#1834173]
  - Resolves: bz#1822343
    ([RHEL8.3] Do not log IMDSv2 token values into cloud-init.log)
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el8
changelog:
  - ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1822343]
  - Resolves: bz#1822343
    ([RHEL8.3] Do not log IMDSv2 token values into cloud-init.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el8
changelog:
  - Fixing cloud-init-generator permissions [bz#1834173]
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-8.el8
changelog:
  - ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839662]
  - ci-ssh-exit-with-non-zero-status-on-disabled-user-472.patch [bz#1833874]
  - Resolves: bz#1833874
    ([rhel-8.3]using root user error should cause a non-zero exit code)
  - Resolves: bz#1839662
    ([ESXi][RHEL8.3][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-9.el8
changelog:
  - ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1794664]
  - ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1794664]
  - ci-Detect-kernel-version-before-swap-file-creation-428.patch [bz#1794664]
  - Resolves: bz#1794664
    ([RHEL8] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-10.el8
changelog:
  - ci-Changing-notation-of-subp-call.patch [bz#1839662]
  - Resolves: bz#1839662
    ([ESXi][RHEL8.3][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8
changelog:
  - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1794664]
  - Resolves: bz#1794664
    ([RHEL8] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8_3.1
changelog:
  - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1879989]
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1890551]
  - ci-Add-config-modules-for-controlling-IBM-PowerVM-RMC.-.patch [bz#1894014]
  - ci-Explicit-set-IPV6_AUTOCONF-and-IPV6_FORCE_ACCEPT_RA-.patch [bz#1894015]
  - ci-net-fix-rendering-of-static6-in-network-config-77.patch [bz#1894015]
  - Resolves: bz#1879989
    ([Azure][RHEL 8] cloud-init Permission denied with the use of mount option noexec [rhel-8.3.0.z])
  - Resolves: bz#1890551
    ([rhel8][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-8.3.0.z])
  - Resolves: bz#1894014
    (Support for cloud-init config modules for PowerVM Hypervisor in Red Hat cloud-init [rhel-8.3.0.z])
  - Resolves: bz#1894015
    (Add support for ipv6_autoconf[rhel-8.3.0.z])


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.23-1
changelog:
  - Rebase to 10.3.23
  - Make conflicts between corresponding mariadb and mysql packages explicit
  - Get rid of the Conflicts macro, it was intended to mark conflicts with
    *upstream* packages
    Resolves: #1853159


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-1
changelog:
  - Rebase to 10.3.27
  - mariadb-debug_build.patch is no more needed, upstream did the changes:
    https://github.com/MariaDB/server/commit/31eaa2029f3c2a4f8e5609ce8b87682286238d9a#diff-32766783af7cac683980224d63c59929
    https://github.com/MariaDB/server/commit/23c6fb3e6231b8939331e2d9f157092f24ed8f4f#diff-78f3162f137407db5240950beb2bcd7c


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-2
changelog:
  - Disable building of the ed25519 client plugin.
    From now on it will be shipped by 'mariadb-connector-c' package


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-3
changelog:
  - Remove mariadb_rpl.h from includedir
    This file is shipped in mariadb-connector-c package
  - Require matching version of mariadb-connector-c package


author: Justin Stephenson <jstephen@redhat.com> - 4-1
changelog:
  - Release v4
  - Update parent id in metainfo file
  - Update package manifest
  - Fix rpmmacro to resolve correct path on CentOS7
  - Handle byte-array encoded journal data
  - Don't clobber cockpit bots directory
  - Move code out of deprecated React lifecycle functions


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Lars Karlitski <larskarlitski@redhat.com> - 21.1-1
changelog:
  - Support setting parameters (ref and parent) for ostree images
  - Loosen restrictions on password strength
  - Various UI refinements


author: Jacob Kozol <jkozol@redhat.com> - 22.1-1
changelog:
  - Patternfly imports are standardized to be consistent with cockpit
  - Cancel image build button bug fixed
  - Empty components state provides a help message
  - Wizard component has bug fixes and is refactored for future scalability
  - Test updates
  - ESLint upgraded to version 7 and the code style is improved
  - Translation files are updated from fedora weblate
  - Cockpit-composer's dependency on osbuild-composer  is more specific
  - Coverity scan is now supported to help improve code quality
  - Resolves: #1820539


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-18
changelog:
  - Patch for pip install <url> allow directory traversal, leading to arbitrary file write
  Resolves: rhbz#1868016


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-11
changelog:
  - initrd: disable ipv4 and ipv6 by default for vlan parent connection (rh #1903698)
  - initrd: fix parsing of ip= argument with dotted interface name (rh #1903695)
  - initrd: fix parsing with empty token (rh #1902791)


author: Jindrich Novy <jnovy@redhat.com> - 1.16.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.16
    (https://github.com/containers/buildah/commit/9e02bf9)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.16.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.16
    (https://github.com/containers/buildah/commit/56ed75b)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.16.7-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.16
    (https://github.com/containers/buildah/commit/aaed66b)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.0
  - Related: #1888571


author: Pavel Březina <pbrezina@redhat.com> - 1.2.1-1
changelog:
  - Rebase to authselect-1.2.1 (RHBZ #1810471)
  - CLI commands are now correctly translated (RHBZ #1816009)
  - Remove unsupported features from sssd profile description (RHBZ #1830251)
  - add `with-files-access-provider` to sssd profile (RHBZ #1734094)
  - switch to pam_usertype module (RHBZ #1773567)
  - fix typo in sssd profile description (RHBZ #1787638)
  - add minimal profile (RHBZ #1654018)


author: William Poteat <wpoteat@redhat.com> 1.27.17-1
changelog:
  - Use python3-requests and not python-requests. (jhnidek@redhat.com)
  - ENT-3289: automatic registration on public cloud (#2407) (jhnidek@redhat.com)
  - ENT-3191: Collect metadata of cloud providers (#2381) (jhnidek@redhat.com)
  - Detecting of cloud providers; ENT-3288 (#2367) (jhnidek@redhat.com)
  - Syntax update to translation commands (#2396) (wpoteat@redhat.com)
  - Update project to use Weblate for translations (#2389) (wpoteat@redhat.com)


author: Jindrich Novy <jnovy@redhat.com> - 25-3
changelog:
  - test: Cleanup images before pulling the ones we need - thanks to Matej Marusak
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 25-4
changelog:
  - replace docker.io with quay.io for gating tests due do
    docker.io new pull rate limit requirements
  - Related: #1888571


author: Jiri Konecny <jkonecny@redhat.com> - 1.1.1-1
changelog:
  - Use relative imports in tests (jkonecny)
  - Solve pylint errors (jkonecny)
  - Remove pot file (jkonecny)
  - Switch translations to rhel-8 Weblate branch (jkonecny)
  - Add potfile to the .gitignore (jkonecny)
  - Pause releasing when calling bumpver (jkonecny)
  - Remove Zanata from the Simpleline (jkonecny)
  - Switch po-push from Zanata to Weblate (jkonecny)
  - Download translations from Weblate (jkonecny)


author: Jeff Moyer <jmoyer@redhat.com> - 1.0.7-2.el8
changelog:
  - Fix versioning.  The installed library is 1.0.7, make the rpm match.
  - bump release number for build, which includes -fPIC fix
  - Related: rhbz#1862551


author: Paul Wouters <pwouters@redhat.com> - 3.32-1
changelog:
  - Resolves: rhbz#1820206 Rebase to libreswan 3.32
  - Resolves: rhbz#1816265 Use NSS to check whether FIPS mode is enabled
  - Resolves: rhbz#1826337 libreswan in FIPS mode rejects ECDSA keys based on faulty RSA key size check being applied


author: Paul Wouters <pwouters@redhat.com> - 3.32-3
changelog:
  - Resolves: rhbz#1842597 regression: libreswan does not send PLUTO_BYTES env variables to updown script
  - Resolves: rhbz#1847766 subsequent xfrmi interfaces configured outside of libreswan are not recognised properly
  - Resolves: rhbz#1840212 protect libreswan against unannounced nss ABI change


author: Michal Schorm <mschorm@redhat.com> - 3.0.8-2
changelog:
  - Add "zlib-devel" requirement in "-devel" subpackage. MariaDB requires
    linking with "-lz", which will fail without the zlib library
  - Resolves: #1710471


author: Michal Schorm <mschorm@redhat.com> - 3.0.10-1
changelog:
  - Rebase to 3.0.10
  - Use macro for tarball name
  - Use macro to set build flags
  - Use macros for make commands
  - Remove the scriptlets non relevant for RHEL-8
  - Add info for the testsuite execution
  - Remove glob from library version
  - Remove info about the upstream issues


author: Michal Schorm <mschorm@redhat.com> - 3.1.2-1
changelog:
  - Rebase to 3.1.2
  - Introducing ED25519 plugin
  - Plugindir issues (from 3.0.9 release) fixed by upstream
    Resolves: #1691176


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.1.9-1
changelog:
  - Rebase to 3.1.9
  - Overlinking issues fixed by upstream in 3.1.3 release
  - Add explicit confict between mariadb-connector-c-devel and mysql-devel packages


author: Jan Friesse <jfriesse@redhat.com> - 0.0.4-15
changelog:
  - Modernize spec file a bit
  - Fix spec file changelog dates
  - Add gcc build requirement

  - Related rhbz#1682115


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-32
changelog:
  - Removed a hint about the ftp_home_dir SELinux boolean from the config file
  - Resolves: rhbz#1623424


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8_3.2
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1916839]
  - Resolves: bz#1916839
    ([Azure] Update existing user password RHEL8x [rhel-8.3.0.z])


author: Michal Domonkos <mdomonko@redhat.com> - 8.10-8
changelog:
  - spectool: ignore query string in URL (RHBZ#1826299)
  - Fix TypeError in rpmdev-rmdevelrpms and rpmdev-checksig (RHBZ#1851499)


author: Jiri Kucera <jkucera@redhat.com> - 1.13.1-2
changelog:
  - Remove *.pc files due to 'nothing provides pkgconfig(gpg-error)'
    and 'nothing provides pkgconfig(libassuan)' dnf errors
    Related: #1829822


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el8
changelog:
  - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812171]
  - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812174]
  - ci-Enable-ssh_deletekeys-by-default.patch [bz#1814152]
  - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1840648]
  - Resolves: bz#1812171
    (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-8])
  - Resolves: bz#1812174
    (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-8])
  - Resolves: bz#1814152
    (CVE-2018-10896 cloud-init: default configuration disabled deletion of SSH host keys [rhel-8])
  - Resolves: bz#1840648
    ([cloud-init][RHEL-8.2.0] /etc/resolv.conf lose config after reboot (initial instance is ok))


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording transfer exit
    condition.
  - Use empty string on hostname resolution failure


author: Honggang Li <honli@redhat.com> - 4.2.10-25
changelog:
  - Rebase to latest Fedora release
  - Fix file conflicts in torque-devel multilib packages
  - Resolve: bz1853167


author: William Poteat <wpoteat@redhat.com> 0.29.0-1
changelog:
  - Update releasers for RHEL-8.3 (wpoteat@redhat.com)
  - 1775535: config option to override api version (piotr.kliczewski@gmail.com)
  - 1780467: Validate rhevm password when unicode is not allowed
    (wpoteat@redhat.com)
  - 1727203: Validate server name for ASCII only in ESX (wpoteat@redhat.com)
  - 1757985: better behavior of --config option; ENT-1713 (jhnidek@redhat.com)
  - 1751441: Add command line path parameter (piotr.kliczewski@gmail.com)
  - 1762780: fix bug, when reporter_id is empty; ENT-1706 (jhnidek@redhat.com)
  - 1759869: Version file needs updating on rpm (wpoteat@redhat.com)
  - 1776084 - Failed to run virt-who with Hyper-V (wpoteat@redhat.com)
  - Proper placeholder (wpoteat@redhat.com)
  - 1751441: remove strict need for kubeconfig (piotr.kliczewski@gmail.com)
  - Update for 8.2 (wpoteat@redhat.com)
  - 1748677: Improved timeout for esx (wpoteat@redhat.com)
  - 1727130: Correct man page for default interval (wpoteat@redhat.com)
  - 1743589: Content type header null coverage (wpoteat@redhat.com)
  - 1751624: Allow unicode username only if python-requests allows it
    (wpoteat@redhat.com)
  - 1745768: Make message unicode safe (wpoteat@redhat.com)
  - 1516209: Proper handling for empty server entry (wpoteat@redhat.com)
  - 1733286: add connection/request timeout (piotr.kliczewski@gmail.com)
  - Remove vdsm capability (wpoteat@redhat.com)
  - 1720048: Template for general configuration not properly formatted
    (wpoteat@redhat.com)
  - Add AHV v3 lenght and offset for the API calls. (amir.eibagi@nutanix.com)
  - 1530254: Update checking on environment variables (wpoteat@redhat.com)
  - 1714456: Update description of 'print_' config option (wpoteat@redhat.com)
  - 1499679: Check for duplicates in conf file; ENT-249 (jhnidek@redhat.com)
  - 1720154: Provide SYSTEM_UUID_FACT (piotr.kliczewski@gmail.com)
  - 1516120: Handling for incorrect config section headers (wpoteat@redhat.com)
  - 1722560: Make heartbeat more robust (jhnidek@redhat.com)
  - Update spec for build system (wpoteat@redhat.com)
  - 1416298: Use unique guest attribute for state tracking (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.29.1-1
changelog:
  - 1806572: virt-who using V3 APIs for communication with RHEVM which is
    deprecated (wpoteat@redhat.com)
  - Update Fedora releases (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com>
changelog:
  - Use release tagger until branched (wpoteat@redhat.com)
  - Update patch for AHV removal (khowell@redhat.com)
  - Build fix (wpoteat@redhat.com)
  - Prepare downstream release (wpoteat@redhat.com)
  - Patch to exclude AHV from RPM (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.29.2-1
changelog:
  - NTLM: Fix compatibility issue with Python3.8 (jhnidek@redhat.com)
  - 1806572: RHEVM should only use version 4 (wpoteat@redhat.com)
  - Update to tests to match changes in Subscription Manager (jhnidek@redhat.com)
  - 1461272: Filter virt-who hosts based on host_parents using wildcard
    (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.29.2-2
changelog:
  - Automatic commit of package [virt-who] minor release [0.29.1-3].
    (wpoteat@redhat.com)
  - Update for AHV patch (wpoteat@redhat.com)
  - Automatic commit of package [virt-who] minor release [0.29.1-2].
    (wpoteat@redhat.com)
  - Use release tagger until branched (wpoteat@redhat.com)
  - Update patch for AHV removal (khowell@redhat.com)
  - Build fix (wpoteat@redhat.com)
  - Prepare downstream release (wpoteat@redhat.com)
  - Patch to exclude AHV from RPM (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.29.3-1
changelog:
  - 1847792: [ESX] Virt-who is failed when run with
    "filter/exclude_host_parents=" option (wpoteat@redhat.com)
  - 1809098: Convert UUID to big-endian for certain esx hardware versions
    (wpoteat@redhat.com)
  - 1835132: support milicpus (piotr.kliczewski@gmail.com)


author: Matěj Týč <matyc@redhat.com> - 1.1.1-1
changelog:
  - Rebase to upstream 1.1.1
  - This OAA is compatible with the RHEL 8.3 Anaconda: RHBZ#1696278
  - The UX has been improved: RHBZ#1781790


author: Matěj Týč <matyc@redhat.com> - 1.1.1-2
changelog:
  - Fixed issues addressing combination of profiles and GUI-based software selections: RHBZ#1843932, RHBZ#1787156
  - Improved handling of languages, capitalization: RHBZ#1696278
  - Updated translations: RHBZ#1820557


author: Jindrich Novy <jnovy@redhat.com> - 0.15-2
changelog:
  - backport "exec: check read bytes from sync" (gscrivan@redhat.com)
    (https://github.com/containers/crun/issues/511)
  - Related: #1888571


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-32
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in http.client
  Resolves: rhbz#1883257


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-33
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868003


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-34
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1890237


author: Mark Goodwin <mgoodwin@redhat.com> - 5.1.1-2
changelog:
  - Activate pmlogger_rewrite on upgrades (BZ 1541406)
  - Fix Coverity issues in pmdastatsd and pmlogconf (BZ 1792971)
  - libpcp_web: ensure context is freed only after timer is fully closed
  - Services: pmlogger and pmie services Want pmcd on boot
  - Fix intermittent pmlogconf core dumps (BZ 1845241)
  - pcp-atop: resolve potential null task pointer dereference
  - pmproxy: improve diagnostics, particularly relating to http requests
  - pmproxy: cleanup, remove unused flags and dead code in http encoding
  - pmproxy: support the OPTIONS protocol in HTTP 1.1
  - libpcp_web: add resilience to descriptor lookup paths (BZ 1837153)


author: Mark Goodwin <mgoodwin@redhat.com> - 5.1.1-3
changelog:
  - Fix for missing runtime deps on perl Net::SNMP (BZ 1790433)
  - Resolve covscan and other issues from upstream QA (BZ 1849511)
  - Possible memory leak detected in pcp-atop (BZ 1846705)
  - Installation of pcp-pmda-samba causes SELinux issues (BZ 1790452)
  - Fix Intermittent pminfo crashes (BZ 1848995)
  - Silence openmetrics PMDA warnings, add status metrics (BZ 1846711)
  - Set PACKAGE_BUILD in VERSION.pcp so pmcd.build metric is correct


author: Nathan Scott <nathans@redhat.com> - 5.2.1-1
changelog:
  - Interactive mode in pcp-atop for time intervals (BZ 1806824)
  - Add branch-to-specific-time feature in pcp-atop (BZ 1806927)
  - Fix hostname written to archive folio by pmchart (BZ 1824403)
  - Allow pmafm to function with compressed archives (BZ 1839666)
  - Fix folio handling of archive files outside /tmp (BZ 1839698)
  - pcp-pmda-lio deals with a missing kernel module (BZ 1843792)
  - Windows authentication mode for SQL Server PMDA (BZ 1847808)
  - Fix previous sample selection within pcp-atop (BZ 1847925)
  - Make pcp-atopsar honour the -e (end time) option (BZ 1851838)
  - Fix pcp-pmda-zswap crashing with namespace error (BZ 1851887)
  - Fix pcp-atopsar handling of -H (header) option (BZ 1857121)
  - Update pcp-free(1) to show 'shared' memory usage (BZ 1878768)
  - Rebase to a more recent upstream version of PCP (BZ 1854035)


author: Nathan Scott <nathans@redhat.com> - 5.2.1-2
changelog:
  - Fix rpm spec permissions for pmie and sa directories (BZ 1882615)
  - Add versioned rpm spec dependencies for pcp-zeroconf (BZ 1882664)


author: Nathan Scott <nathans@redhat.com> - 5.2.2-1
changelog:
  - Add online help text for PCP derived metrics (BZ 1670029)
  - Add process accounting metrics and pcp-atop support (BZ 1814526)
  - Fix pmchart recorded archive folio host names (BZ 1824403)
  - Fix selinux issue with secure pmcd connections (BZ 1857396)
  - Extend pmlogger_daily script compression docs (BZ 1880392)
  - perfevent support for hv_24x7/hv_gpci dynamic events (BZ 1889613)
  - Improve pmlogger multiple remote node setups (BZ 1892326)
  - Rebase to a more recent upstream version of PCP (BZ 1854035)


author: Nathan Scott <nathans@redhat.com> - 5.2.3-1
changelog:
  - Adds a new pcp-htop(1) utility (BZ 1716242)
  - Adds per-process network metrics to pcp-atop(1) (BZ 1733901)
  - Rebase to latest upstream stable release of PCP (BZ 1854035)
  - Resolves an selinux issue in the netcheck agent (BZ 1897719)
  - Rebase to a more recent upstream version of PCP (BZ 1854035)


author: Nathan Scott <nathans@redhat.com> - 5.2.5-1
changelog:
  - Extended socket statistic metrics (BZ 1491892)
  - Add explicit umask to startup scripts (BZ 1833647)
  - Fix pmlogger scripts fore remote loggers (BZ 1919950)
  - Enhance selinux policy for netcheck metrics (BZ 1897719)
  - Resolve packaging issue related to tmpfiles (BZ 1919974)
  - Ensure online help text exists for all metrics (BZ 1670029)
  - Adds HA cluster metrics (Pacemaker, Corosync, DRBD and SBD)
  - Rebase to a more recent upstream version of PCP (BZ 1854035)


author: Andreas Gerstmayr <agerstmayr@redhat.com> - 5.2.5-2
changelog:
  - Fixed typo in specfile (pcp-testsuite requires pcp-pmda-hacluster
    and pcp-pmda-sockets instead of pcp-pmdas-hacluster etc.)


author: Mark Goodwin <mgoodwin@redhat.com> - 5.2.5-3
changelog:
  - Specify pmns_name in sockets PMDA Install and Remove scripts
  - Add selinux rules for pmcd to use netlink tcpdiag sockets (BZ 1926756)


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-25
changelog:
  - fix CVE-2021-20188
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/2c7b579)
  - Related: #1920382


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-26
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/bcbbbc4)
  - Related: #1920382


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.38rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/a5ab59e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.39rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/2b89fe7)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/ddd8a17)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/797f1ea)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/7e286bc)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/9a2fc37)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/7a71903)
  - Resolves: #1931545


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/c67172a)
  - Resolves: #1935376


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/fcca86d)
  - Resolves: #1936927


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/ad1aaba)
  - Resolves: #1921128
  - Resolves: #1936927
  - Resolves: #1938234


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-29
changelog:
  - qemu: substitute missing model name for host-passthrough (rhbz#1850680)
  - rpc: gendispatch: handle empty flags (CVE-2020-25637)
  - rpc: add support for filtering @acls by uint params (CVE-2020-25637)
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
  - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
  - qemu: Fix domfsinfo for non-PCI device information from guest agent (rhbz#1858771)
  - virDomainNetFindIdx: add support for CCW addresses (rhbz#1837495)
  - check for NULL before calling g_regex_unref (rhbz#1861176)
  - virhostcpu.c: fix 'die_id' parsing for Power hosts (rhbz#1876742)
  - qemuFirmwareFillDomain: Fill NVRAM template on migration too (rhbz#1880418)
  - node_device: refactor udevProcessCCW (rhbz#1853289, rhbz#1865932)
  - node_device: detect CSS devices (rhbz#1853289, rhbz#1865932)
  - virsh: nodedev: ability to filter CSS capabilities (rhbz#1853289, rhbz#1865932)
  - node_device: detect DASD devices (rhbz#1853289, rhbz#1865932)
  - udevProcessCSS: Check if def->driver is non-NULL (rhbz#1853289, rhbz#1865932)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-30
changelog:
  - cpu_map: Add missing x86 features in 0x7 CPUID leaf (rhbz#1861506)
  - cpu_map: Add missing x86 features in 0x80000008 CPUID leaf (rhbz#1861506)
  - cpu_map: Add missing AMD SVM features (rhbz#1861506)
  - Add testdata for AMD EPYC 7502 (rhbz#1861506)
  - cpu_map: Defined and enable EPYC-Rome model (rhbz#1861506)
  - cpu_map: Remove monitor feature from EPYC-Rome (rhbz#1861506)
  - tests: qemuxml2argv: Use existing machine type for 'numatune-distances' case (rhbz#1749518)
  - qemuxml2xmltest: Add "numatune-distance" test case (rhbz#1749518)
  - conf: Move and rename virDomainParseScaledValue() (rhbz#1749518)
  - numa_conf: Drop CPU from name of two functions (rhbz#1749518)
  - qemu_command: Rename qemuBuildNumaArgStr() (rhbz#1749518)
  - qemuBuildMachineCommandLine: Drop needless check (rhbz#1749518)
  - numa_conf: Make virDomainNumaSetNodeCpumask() return void (rhbz#1749518)
  - Allow NUMA nodes without vCPUs (rhbz#1749518)
  - conf: Parse and format HMAT (rhbz#1749518)
  - conf: Validate NUMA HMAT configuration (rhbz#1749518)
  - numa: expose HMAT APIs (rhbz#1749518)
  - qemu: Introduce QEMU_CAPS_NUMA_HMAT capability (rhbz#1749518)
  - qemu: Build HMAT command line (rhbz#1749518)
  - qemuBuildNumaCommandLine: Fix @masterInitiator check (rhbz#1749518)
  - numa_conf: Properly check for caches in virDomainNumaDefValidate() (rhbz#1749518)
  - RNG: Allow interleaving of /domain/cpu/numa/cell children (rhbz#1749518)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-31
changelog:
  - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1872610)
  - qemu: format 'ramfb' attribute for mediated devices (rhbz#1876297)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-32
changelog:
  - util: replace macvtap name reservation bitmap with a simple counter (rhbz#1874304)
  - util: assign tap device names using a monotonically increasing integer (rhbz#1874304)
  - util: virNetDevTapCreate: initialize fd to -1 (rhbz#1874304)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-33
changelog:
  - cpu_map: Fix Icelake Server model number (rhbz#1537734)
  - cputestdata: Add test data for Snowridge (rhbz#1537734)
  - cpu_map: Add support for fsrm CPU feature (rhbz#1537734)
  - cpu_map: Add support for core-capability CPU feature (rhbz#1537734)
  - cpu_map: Add support for split-lock-detect CPU feature (rhbz#1537734)
  - cpu_map: Define and enable Snowridge model (rhbz#1537734)
  - util: fix typo in VIR_MOCK_WRAP_RET_ARGS() (rhbz#1607929)
  - util/tests: enable locking on iptables/ebtables commandlines in unit tests (rhbz#1607929)
  - util/tests: enable locking on iptables/ebtables commandlines by default (rhbz#1607929)
  - tests: fix iptables test case commandline options in virfirewalltest.c (rhbz#1607929)
  - network: be more verbose about the reason for a firewall reload (rhbz#1607929)
  - util: always check for ebtables/iptables binaries, even when using firewalld (rhbz#1607929)
  - util: synchronize with firewalld before we start calling iptables directly (rhbz#1607929)
  - util: call iptables directly rather than via firewalld (rhbz#1607929)
  - util: virhostcpu: Fail when fetching CPU Stats for invalid cpu (rhbz#1915183)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-34
changelog:
  - qemu: move cgroup cpu period and quota defines to vircgroup.h (rhbz#1915733)
  - vircgroupv1: use defines for cpu period and quota limits (rhbz#1915733)
  - vircgroupv2: use defines for cpu period and quota limits (rhbz#1915733)
  - vircgroup: fix cpu quota maximum limit (rhbz#1915733)
  - util: add virNetDevGetPhysPortName (rhbz#1918708)
  - util: avoid manual VIR_FREE of a g_autofree pointer in virPCIGetName() (rhbz#1918708)
  - util: Add phys_port_name support on virPCIGetNetName (rhbz#1918708)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-35
changelog:
  - vircgroupv2: properly detect placement of running VM (rhbz#1798463)
  - virsystemd: export virSystemdHasMachined (rhbz#1798463)
  - virsystemd: introduce virSystemdGetMachineByPID (rhbz#1798463)
  - virsystemd: introduce virSystemdGetMachineUnitByPID (rhbz#1798463)
  - vircgroup: use DBus call to systemd for some APIs (rhbz#1798463)
  - vircgroupv1: refactor virCgroupV1DetectPlacement (rhbz#1798463)
  - vircgroupv2: move task into cgroup before enabling controllers (rhbz#1798463)
  - vircgroup: introduce virCgroupV1Exists and virCgroupV2Exists (rhbz#1798463)
  - vircgroup: introduce nested cgroup to properly work with systemd (rhbz#1798463)
  - tests: add cgroup nested tests (rhbz#1798463)
  - vircgroup: correctly free nested virCgroupPtr (rhbz#1798463)
  - qemu: Add virtio related options to vsock (rhbz#1931548)
  - domain_validate: use defines for cpu period and quota limits (rhbz#1798463)
  - docs: use proper cpu quota value in our documentation (rhbz#1798463)
  - vircgroup: enforce range limit for cpu.shares (rhbz#1798463)
  - cgroup: use virCgroupSetCpuShares instead of virCgroupSetupCpuShares (rhbz#1798463)
  - cpumap: Add support for ibrs CPU feature (rhbz#1926864)
  - cpumap: Add support for svme-addr-check CPU feature (rhbz#1926864)
  - cpu_map: Add EPYC-Milan x86 CPU model (rhbz#1926864)
  - cpu_map: Install x86_EPYC-Milan.xml (rhbz#1926864)
  - cpu_map: Fix spelling of svme-addr-chk feature (rhbz#1926864)


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves: rhbz#1883258


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-31
changelog:
  - Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
    not respect expiry time
  - Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
    overflow
  - Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
  - Resolves: #1869576 - httpd : mod_proxy should allow to specify
    Proxy-Authorization in ProxyRemote directive
  - Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
  - Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
    a balancer


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-33
changelog:
  - Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
    concurrency issues
  - Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
    a client cert to backend server
  - Resolves: #1680118 - unorderly connection close when client attempts
    renegotiation


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-36
changelog:
  - Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
    mod_proxy_wstunnel
  - Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-37
changelog:
  - Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
    to be able to handle certs without matching private key


author: Thomas Woerner <twoerner@redhat.com> - 4.9.0-0.rc1
changelog:
  - Upstream pre release FreeIPA 4.9.0rc1
    Resolves: RHBZ#1891832
  - Requirements and design for libpwquality integration
    Resolves: RHBZ#1340463
  - When parsing options require name/value pairs
    Resolves: RHBZ#1357495
  - WebUI: Fix issue with opening links in new tab/window
    Resolves: RHBZ#1484088
  - Use a state to determine if a 389-ds upgrade is in progress
    Resolves: RHBZ#1569011
  - Unlock user accounts after a password reset and replicate that unlock to
    all IdM servers
    Resolves: RHBZ#1784657
  - Set the certmonger subject with a string, not an object
    Resolves: RHBZ#1810148
  - Implement ACME certificate enrolment
    Resolves: RHBZ#1851835
  - [WebUI] Backport jQuery patches from newer versions of the library (e.g.
    3.5.0)
    Resolves: RHBZ#1859249
  - It is not possible to edit KDC database when the FreeIPA server is running
    Resolves: RHBZ#1875001
  - Fix nsslapd-db-lock tuning of BDB backend
    Resolves: RHBZ#1882340
  - ipa-kdb: support subordinate/superior UPN suffixes
    Resolves: RHBZ#1891056
  - wgi/plugins.py: ignore empty plugin directories
    Resolves: RHBZ#1894800


author: Thomas Woerner <twoerner@redhat.com> - 4.9.0-0.1.rc1
changelog:
  - Fix requirement for python3-kdcproxy, add no autoreqprov for ipatests sub
    package
    Related: RHBZ#1891832


author: Thomas Woerner <twoerner@redhat.com> - 4.9.0-0.2.rc2
changelog:
  - Upstream pre release FreeIPA 4.9.0rc2
    Related: RHBZ#1891832
  - Synchronize spec file with upstream and Fedora
    Related: RHBZ#1891832
  - Traceback while doing ipa-backup
    Resolves: RHBZ#1901068
  - ipa-client-install changes system wide ssh configuration
    Resolves: RRBZ#1544379
  - ipa-kdb: support subordinate/superior UPN suffixes
    Resolves: RHBZ#1891056
  - KRA Transport and Storage Certificates do not renew
    Resolves: RHBZ#1872603
  - Move where the restore state is marked during IPA server upgrade
    Resolves: RHBZ#1569011
  - Intermittent IdM Client Registration Failures
    Resolves: RHBZ#1812871
  - Nightly test failure in test_acme.py::TestACME::test_third_party_certs
    (updates-testing)
    Resolves: RHBZ#1903025
  - Add IPA RA Agent to ACME group on the CA
    Resolves: RHBZ#1902727


author: Thomas Woerner <twoerner@redhat.com> - 4.9.2-2
changelog:
  - Sync ipatests from upstream to RHEL packages for FreeIPA 4.9 branch
    Resolves: RHBZ#1932289
  - Fix krb5kdc is crashing intermittently on IPA server
    Resolves: RHBZ#1932784


author: Thomas Woerner <twoerner@redhat.com> - 4.9.2-3
changelog:
  - ipa-client-install displays false message
    'sudo binary does not seem to be present on this system'
    Resolves: RHBZ#1939371


author: Akira TAGOH <tagoh@redhat.com> - 0.0.25-6
changelog:
  - Backport fontconfig config file from Fedora.
  - Add System UI generic family alias
    Resolves: rhbz#1865788


author: David Benoit <dbenoit@redhat.com> - 1.15.2-1
changelog:
  - Rebase to 1.15.2
  - fix rhbz#1872622 in commit af9a1b1f6567a1c5273a134d395bfe7bb840b7f8
  - Resolves: rhbz#1872622
  - add net/http graceful shutdown patch
  - Resolves: rhbz#1888673
  - add x509warnCN patch
  - Resolves: rhbz#1889437


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-4
changelog:
  - Bump version to 1.4.3.16-4
  - Resolves: Bug 1843517 - Using ldifgen with --start-idx option fails with unsupported operand
  - Resolves: Bug 1801086 - [RFE] Generate dsrc file using dsconf
  - Resolves: Bug 1843838 - heap-use-after-free in slapi_be_getsuffix


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-5
changelog:
  - Bump version to 1.4.3.16-5
  - Resolves: Bug 1879386 - cli dsconf replication monitor fails to retrieve database RUV
  - Resolves: Bug 1887449 - Sync repl: missing update because operation are erroneously stated as nested
  - Resolves: Bug 1887415 - Sync repl - if a series of updates target the same entry then the cookie get wrong changenumber
  - Resolves: Bug 1851978 - SyncRepl plugin provides a wrong cookie


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-6
changelog:
  - Bump version to 1.4.3.16-6
  - Resolves: Bug 1879386 - cli dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) State (green) Reason (error (0)
  - Resolves: Bug 1904991 - Unexpected info returned to ldap request
  - Resolves: Bug 1843838 - heap-use-after-free in slapi_be_getsuffix
  - Resolves: Bug 1903133 - Server-Cert.crt created using dscreate has Subject:CN =localhost instead of hostname.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-7
changelog:
  - Bump version to 1.4.3.16-7
  - Resolves: Bug 1890118 - SIGFPE crash in rhds disk monitoring routine
  - Resolves: Bug 1904991 - 389-ds:1.4/389-ds-base: information disclosure during the binding of a DN
  - Resolves: Bug 1627645 - ldif2db does not change exit code when there are skipped entries


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-8
changelog:
  - Bump version to 1.4.3.16-8
  - Resolves: Bug 1903539 - cn=monitor is throwing err=32 with scope: -s one
  - Resolves: Bug 1893870 - PR_WaitCondVar() issue causes replication delay when clock jumps backwards


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-9
changelog:
  - Bump version to 1.4.3.16-9
  - Resolves: Bug 1924130 - RHDS11: “write” permission of ACI changes ns-slapd’s behavior on search operation
  - Resolves: Bug 1916677 - A failed re-indexing leaves the database in broken state.
  - Resolves: Bug 1912822 - sync_repl: when completing an operation in the pending list, it can select the wrong operation


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-10
changelog:
  - Bump version to 1.4.3.16-10
  - Resolves: Bug 1924130 - RHDS11: “write” permission of ACI changes ns-slapd’s behavior on search operation(part 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-11
changelog:
  - Bump version to 1.4.3.16-11
  - Resolves: Bug 1924130 - RHDS11: “write” permission of ACI changes ns-slapd’s behavior on search operation(remove patch as it breaks DogTag, will add this patch back after DogTag is fixed)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-12
changelog:
  - Bump version to 1.4.3.16-12
  - Resolves: Bug 1929067 - PKI instance creation failed with new 389-ds-base build


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-13
changelog:
  - Bump version to 1.4.3.16-13
  - Resolves: Bug 1930188 - crash in sync_repl when a MODRDN create a cenotaph


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-8
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872391), CVE-2020-14346 (#1872395),
    CVE-2020-14361 (#1872402), CVE-2020-14362 (#1872409)


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-34.el8_3.4
changelog:
  - kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1919109]
  - kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1919109]
  - kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1919109]
  - Resolves: bz#1919109
    (CVE-2020-35517 virt:rhel/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest [rhel-8.3.0.z])


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-13
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-5
changelog:
  - use infra_image = registry.redhat.io/ubi8/pause in contiainers.conf
    (unlike previous one ubi8/pause doesn't require authentication)
  - Related: #1934947


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-6
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e7880c4)
  - Related: #1938234


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-7
changelog:
  - update documentation and configs according to the current
    versions of vendored projects
  - Related: #1938234


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  - Update release notes for 8u292-b10.
  - Update tarball generation script to use PR3822 which handles
      JDK-8233228 & JDK-8035166 changes
  - Remove RH1868759 patch as this is now resolved upstream by JDK-8258833.
  - Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  - Require tzdata 2020f due to JDK-8259048
  - Require tzdata 2021a due to JDK-8260356
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Artem Egorenkov <aegorenk@redhat.com> - 5.6-30
changelog:
  - brltty requires brlapi deleted (duplication of automatically determined dependency)
  - isa macro deleted for brlapi requires brltty
  - brlapi recommends brltty
    Resolves: rhbz#1765611


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.21.0-1
changelog:
  - Resolves: RHBZ#1932315, RHBZ#1932424
  - remove --debug-nghttp2 option
  - remove ini patch
  - Backport patch to use getauxval


author: Josef Ridky <jridky@redhat.com> - 1:5.8-19
changelog:
  - revert permission of config files to 600 (#1601060)
  - fix error message when the address specified by clientaddr option
    is wrong or cannot be bound (#1877375)
  - log error with /proc/net/if_inet6 only when IPv6 is enabled (#1824367)
  - fix issue with quoting empty passphrase (#1817225)


author: Rob Crittenden <rcritten@redhat.com> - 0.7-1
changelog:
  - Update to upstream 0.7 (#1891850)
  - Include Directory Server healthchecks (#1824193)
  - Document that default output format is JSON (#1780328)
  - Fix return value on exit with --input-file (#1866558)
  - Fix examples in man page (#1809215)
  - Replace man page reference to output-format with output-type (#1780303)
  - Add dependencies on services to avoid false positives (#1780510)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-54
changelog:
  - fence_azure_arm: fix MSI support
    Resolves: rhbz#1818157
  - fence_mpath: allow spaces for comma-separated devices and add
    support for space-separated devices
    Resolves: rhbz#1851115
  - fence_ipmilan: add ability to increase ipmitool verbosity
    Resolves: rhbz#1853973
  - fence_lpar: fix list-status action
    Resolves: rhbz#1861926
  - all agents: make telnet a weak dependency
    Resolves: rhbz#1851232


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-59
changelog:
  - fencing: add disable-timeout parameter and make it true by default
    for Pacemaker 2.0+
    Resolves: rhbz#1470813, rhbz#1436429


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-61
changelog:
  - fence_scsi: dont write key to device if it's already registered,
    and dont write device to file when cluster is started again
    Resolves: rhbz#1841087


author: Honggang Li <honli@redhat.com> - 3.3.2-8
changelog:
  - Sync with Fedora build
  - Update to latest upstream release 3.3.2
  - Resolves: rhbz#1657316, rhbz#1732982, rhbz#1850080


author: Nick Clifton <nickc@redhat.com> - 9.29-1
changelog:
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 9.32-1
changelog:
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)


author: Nick Clifton <nickc@redhat.com> - 9.35-2
changelog:
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)


author: Nick Clifton <nickc@redhat.com> - 9.46-1
changelog:
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.


author: Nick Clifton <nickc@redhat.com> - 9.49-1
changelog:
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)(#1904479)
  - gcc plugin: Add support for GCC 11's cl_vars array.


author: Lubos Uhliarik <luhliari@redhat.com> - 2.9.2-9
changelog:
  - Resolves: #1824859 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-417
changelog:
  - Fix Time-Local tests to pass after year 2019 (bug #1807120)
  - Run-require perl(Encode) by perl-libs (bug #1903503)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-419
changelog:
  - Fix CVE-2020-10543 (bug #1839273)
  - Fix CVE-2020-10878 (bug #1839276)
  - Fix a file mode of a perl-example.stp example (bug #1913693)


author: Joe Orton <jorton@redhat.com> - 1.14.0~rc2-2
changelog:
  - switch subpackages to lock-step requires on -libs rather than subversion
  - fixed the build-requires (Jitka Plesnikova)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-13
changelog:
  RHEL 8.1.0 ERRATUM
  - added patch enabling stricter TLS certs checking conforming to
    common criteria requirements
    resolves: rhbz#1733244


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-5
changelog:
  RHEL 8.3.0 ERRATUM
  - added qpid-proton as another source and enabled omamqp1 module
    in a separate sub-package with it statically linked
    resolves: rhbz#1713427
  - extended config.enabled patch to cover rest of the cases
    resolves: rhbz#1659383
  - added patch making json serialization thread-safe
    resolves: rhbz#1789675
  - added another patch for imfile state-files id
    resolves: rhbz#1793569
  - fixed typo in commend-out part of default rsyslog.conf


author: Lumír Balhar <lbalhar@redhat.com> - 3.8.6-2
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868006


author: Jindrich Novy <jnovy@redhat.com> - 2:2.150.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.150.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.151.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.151.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.152.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.152.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.153.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.153.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.154.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.154.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.155.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.155.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a96b716)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/76beccc)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/1fb260f)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/db783f4)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/9dd415b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/e5384ed)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/016b90d)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/dcd385e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7aedb16)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a2854ed)
  - Resolves: #1935376


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-39.el8
changelog:
  - kvm-ppc-spapr-Add-hotremovable-flag-on-DIMM-LMBs-on-drme.patch [bz#1901837]
  - kvm-ppc-spapr-re-assert-IRQs-during-event-scan-if-there-.patch [bz#1901837]
  - kvm-slirp-check-pkt_len-before-reading-protocol-header.patch [bz#1902237]
  - kvm-s390x-s390-virtio-ccw-Reset-PCI-devices-during-subsy.patch [bz#1905386]
  - kvm-qapi-enable-use-of-g_autoptr-with-QAPI-types.patch [bz#1859494]
  - kvm-error-Fix-examples-in-error.h-s-big-comment.patch [bz#1859494]
  - kvm-error-Improve-error.h-s-big-comment.patch [bz#1859494]
  - kvm-error-Document-Error-API-usage-rules.patch [bz#1859494]
  - kvm-error-New-macro-ERRP_GUARD.patch [bz#1859494]
  - kvm-qga-add-command-guest-get-disks.patch [bz#1859494]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Linux.patch [bz#1859494]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Window.patch [bz#1859494]
  - kvm-qga-fix-missing-closedir-in-qmp_guest_get_disks.patch [bz#1859494]
  - kvm-qga-update-schema-for-guest-get-disks-dependents-fie.patch [bz#1859494]
  - Resolves: bz#1859494
    (Report logical_name for disks without mounted file-system)
  - Resolves: bz#1901837
    (Failed to hotunplug pc-dimm device)
  - Resolves: bz#1902237
    (CVE-2020-29129 CVE-2020-29130 virt:rhel/qemu-kvm: QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets [rhel-8])
  - Resolves: bz#1905386
    (RHEL8.3 - s390x/s390-virtio-ccw: Reset PCI devices during subsystem reset (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-40.el8
changelog:
  - kvm-redhat-link-etc-qemu-ga-fsfreeze-hook-to-etc-qemu-kv.patch [bz#1910267]
  - kvm-qga-rename-Error-parameter-to-more-common-errp.patch [bz#1910326]
  - kvm-util-Introduce-qemu_get_host_name.patch [bz#1910326]
  - kvm-qga-Use-qemu_get_host_name-instead-of-g_get_host_nam.patch [bz#1910326]
  - kvm-redhat-add-un-pre-install-systemd-hooks-for-qemu-ga.patch [bz#1910220]
  - Resolves: bz#1910267
    (There is no soft link '/etc/qemu-kvm/fsfreeze-hook')
  - Resolves: bz#1910326
    (Incorrect hostname returned by  qga command 'guest-get-host-name')
  - Resolves: bz#1910220
    (qemu-ga service still active and can work after qemu-guest-agent been removed)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-41.el8
changelog:
  - kvm-udev-kvm-check-remove-the-exceeded-subscription-limi.patch [bz#1909244]
  - kvm-hw-arm-smmu-common-Factorize-some-code-in-smmu_ptw_6.patch [bz#1843852]
  - kvm-hw-arm-smmu-common-Add-IOTLB-helpers.patch [bz#1843852]
  - kvm-hw-arm-smmu-Introduce-smmu_get_iotlb_key.patch [bz#1843852]
  - kvm-hw-arm-smmu-Introduce-SMMUTLBEntry-for-PTW-and-IOTLB.patch [bz#1843852]
  - kvm-hw-arm-smmu-common-Manage-IOTLB-block-entries.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Introduce-smmuv3_s1_range_inval-helper.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Get-prepared-for-range-invalidation.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Fix-potential-integer-overflow-CID-143.patch [bz#1843852]
  - kvm-memory-Rename-memory_region_notify_one-to-memory_reg.patch [bz#1843852]
  - kvm-memory-Add-IOMMUTLBEvent.patch [bz#1843852]
  - kvm-memory-Add-IOMMU_NOTIFIER_DEVIOTLB_UNMAP-IOMMUTLBNot.patch [bz#1843852]
  - kvm-intel_iommu-Skip-page-walking-on-device-iotlb-invali.patch [bz#1843852]
  - kvm-memory-Skip-bad-range-assertion-if-notifier-is-DEVIO.patch [bz#1843852]
  - kvm-memory-clamp-cached-translation-in-case-it-points-to.patch [bz#1904393]
  - kvm-hw-ehci-check-return-value-of-usb_packet_map.patch [bz#1898628]
  - kvm-hw-net-e1000e-advance-desc_offset-in-case-of-null-de.patch [bz#1903070]
  - Resolves: bz#1909244
    (Remove KVM guest count and limit info message)
  - Resolves: bz#1843852
    (qemu core dumped: qemu-kvm: /builddir/build/BUILD/qemu-4.2.0/memory.c:1928: memory_region_notify_one: Assertion `entry->iova >= notifier->start && entry_end <= notifier->end' failed.)
  - Resolves: bz#1904393
    (CVE-2020-27821 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c [rhel-8])
  - Resolves: bz#1898628
    (CVE-2020-25723 virt:rhel/qemu-kvm: QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c [rhel-8])
  - Resolves: bz#1903070
    (CVE-2020-25707 CVE-2020-28916 virt:rhel/qemu-kvm: various flaws [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-42.el8
changelog:
  - kvm-linux-headers-add-vfio-DMA-available-capability.patch [bz#1905391]
  - kvm-s390x-pci-Move-header-files-to-include-hw-s390x.patch [bz#1905391]
  - kvm-vfio-Create-shared-routine-for-scanning-info-capabil.patch [bz#1905391]
  - kvm-vfio-Find-DMA-available-capability.patch [bz#1905391]
  - kvm-s390x-pci-Add-routine-to-get-the-vfio-dma-available-.patch [bz#1905391]
  - kvm-s390x-pci-Honor-DMA-limits-set-by-vfio.patch [bz#1905391]
  - kvm-s390x-fix-build-for-without-default-devices.patch [bz#1905391]
  - Resolves: bz#1905391
    (RHEL8.4 - s390x/pci: Honor vfio DMA limiting (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-43.el8
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1918054]
  - Resolves: bz#1918054
    (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-8.4.0])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-44.el8
changelog:
  - kvm-spapr-Improve-handling-of-fdt-buffer-size.patch [bz#1901837]
  - kvm-spapr-Fold-h_cas_compose_response-into-h_client_arch.patch [bz#1901837]
  - kvm-spapr-Don-t-use-spapr_drc_needed-in-CAS-code.patch [bz#1901837]
  - kvm-spapr-Fix-handling-of-unplugged-devices-during-CAS-a.patch [bz#1901837]
  - kvm-spapr-Allow-memory-unplug-to-always-succeed.patch [bz#1901837]
  - kvm-spapr-Improve-handling-of-memory-unplug-with-old-gue.patch [bz#1901837]
  - kvm-block-Require-aligned-image-size-to-avoid-assertion-.patch [bz#1834281]
  - kvm-file-posix-Allow-byte-aligned-O_DIRECT-with-NFS.patch [bz#1834281]
  - kvm-block-iscsi-fix-heap-buffer-overflow-in-iscsi_aio_io.patch [bz#1912974]
  - Resolves: bz#1834281
    (qemu-img convert abort when converting image with unaligned size)
  - Resolves: bz#1901837
    (Failed to hotunplug pc-dimm device)
  - Resolves: bz#1912974
    (CVE-2020-11947 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-45.el8
changelog:
  - kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1919111]
  - kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1919111]
  - kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1919111]
  - Resolves: bz#1919111
    (CVE-2020-35517 virt:rhel/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest [rhel-8.4.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-46.el8
changelog:
  - kvm-redhat-makes-qemu-respect-system-s-crypto-profile.patch [bz#1902960]
  - kvm-spapr-Adjust-firmware-path-of-PCI-devices.patch [bz#1912891]
  - Resolves: bz#1902960
    (QEMU doesn't honour system crypto policies)
  - Resolves: bz#1912891
    ([ppc64le] --disk cdimage.iso,bus=usb fails to boot)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-47.el8
changelog:
  - kvm-x86-cpu-Enable-AVX512_VP2INTERSECT-cpu-feature.patch [bz#1790620]
  - kvm-target-i386-add-fast-short-REP-MOV-support.patch [bz#1790620]
  - kvm-x86-cpu-Populate-SVM-CPUID-feature-bits.patch [bz#1790620]
  - kvm-i386-Add-the-support-for-AMD-EPYC-3rd-generation-pro.patch [bz#1790620]
  - Resolves: bz#1790620
    ([RFE] AMD Milan - Add KVM/support for EPYC-Milan CPU Model - Slow Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-48.el8
changelog:
  - kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917451]
  - Resolves: bz#1917451
    (CVE-2020-29443 virt:rhel/qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-8.4.0])


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.40.2-26
changelog:
  - insufficient default memsize to open anaconda default RHEL 8.2 luks device
    resolves: rhbz#1837765


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.40.2-27
changelog:
  - selinux-relabel does not work if SELINUXTYPE != targeted
  - tar-in command does not allow restoring file capabilities
    resolves: rhbz#1384241 rhbz#1828952


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.3-1
changelog:
  - Rebase to PKI 10.9.3
  - Bug 1869893 - Common certificates are missing in CS.cfg on shared PKI instance


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.9.4-1
changelog:
  - Rebase to PKI 10.9.4
  - Bug 1873235 - Fix SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT in pki ca-user-cert-add


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.0-0.2.beta1
changelog:
  - Rebase to PKI 10.10.0-beta1
  - Bug 1868233 - Disabling AIA and cert policy extensions in ACME examples


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.0-1
changelog:
  - Rebase to PKI 10.10.0
  - Add workaround for missing capture_output in Python 3.6
  - Fix JSS initialization in pki-server <subsystem>-user-cert-add
  - Fix NPE in UGSubsystem.findUsersByKeyword()
  - Bug 1787115 - Need Method to copy SKI from CSR to Certificate signed
  - Bug 1875563 - Add KRA Transport and Storage Certificates profiles, audit for IPA
  - Bug 1883996 - Inconsistent folders in pki-tools


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.1-1
changelog:
  - Rebase to PKI 10.10.1
  - Bug 1843416 - kra-audit-mod fail with Invalid event configuration
  - Bug 1889691 - ACME failed when run with more than 1 thread/connection
  - Bug 1891577 - Sub-ordinate installation is failing with NullPointerException


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.2-1
changelog:
  - Rebase to PKI 10.10.2
  - Bug 1392616 - KRA key recovery cli kra-key-retrieve generates an invalid p12 file
  - Bug 1897120 - pki-server cert-fix command failing
  - Bug 1694664 - ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (503)


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.3-1
changelog:
  - Rebase to PKI 10.10.3
  - Bug 1584550 - CRMFPopClient: unexpected behavior with -y option when values are specified
  - Bug 1590942 - CMCResponse treats -d as optional
  - Bug 1890639 - Two-step installation with external certificates fails on HSM configured system
  - Bug 1912493 - pkispawn reports incorrect FIPS mode


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.4-1
changelog:
  - Rebase to PKI 10.10.4
  - Bug 1664435 - Error instantiating class for challenge_password with SCEP request
  - Bug 1912418 - OCSP and TKS cloning failed due to duplicate replica ID
  - Bug 1916686 - Memory leak during ACME performance test
  - Bug 1919282 - ACME cert enrollment failed with HTTP 500


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 0.3.4-26
changelog:
  - New patch do not activating SR-IOV VFs automatically. RHBZ#1931290
  - New patch fixing Nmstate waits when SR-IOV VFs are decreased. RHBZ#1931784
  - New patch fixing Nmstate activating unmanaged bridge ports. RHBZ#1932247


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-3
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8_3.3
changelog:
  - ci-sysconfig-distro-specific-config-rendering-for-BOOTP.patch [bz#1931835]
  - Resolves: bz#1931835
    (SUSE specific option, STARTMODE, should not exist in ifcfg-XXX file. [rhel-8.3.0.z])


author: Wim Taymans <wtaymans@redhat.com> - 14.0-1
changelog:
  - Update to 14.0
  - Add pulseaudio-daemon' Provides + Conflicts to support
    swapping with PipeWire
  - Resolves: rhbz#1906322


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-34.el8_3.5
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1939493]
  - Resolves: bz#1939493
    (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-8.3.0.z] [rhel-8.3.0.z])


author: Nicola Sella <nsella@redhat.com> - 0.16.2-1
changelog:
  - Update to 0.16.2
  - Add module metadata support to createrepo_c (RhBug:1795936)
  - Fix various memory leaks


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-2
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1651377 - centralizing default index.html on nginx
  - Resolves: #1825683 - Outdated Red Hat branding used in nginx default pages


author: Martin Kolman <mkolman@redhat.com> - 33.16.4.6-1
changelog:
  - Initialize librepo logger (pkratoch)
    Resolves: rhbz#1908286
  - Add RPM tests support for owners on rhel-8 (jkonecny)
    Related: rhbz#1885635
  - Use latests RHEL-8 buildroot in containers (jkonecny)
    Related: rhbz#1885635
  - Implement rpm-tests execution in the container (jkonecny)
    Related: rhbz#1885635


author: Martin Kolman <mkolman@redhat.com> - 33.16.4.7-1
changelog:
  - Allow to disable the Security module (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Services module (vponcova)
    Resolves: rhbz#1913689
  - Support should_run for standalone GUI spokes (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Localization module (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Timezone module (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the network installation (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Users module (vponcova)
    Resolves: rhbz#1913689
  - Always show pykickstart parse warnings (vslavik)
    Resolves: rhbz#1897663


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.9-1
changelog:
  - Change warning messages of missing prefix for RH products (jkonecny)
    Resolves: rhbz#1897657
  - Do not use cache for container build (jkonecny)
    Related: rhbz#1885635
  - Fix missing inst. prefixes for bootloader options in documentation (jkonecny)
    Related: rhbz#1897657
  - Fix show missing inst. prefix warning appropriately (jkonencny)
    Related: rhbz#1897657
  - Remove docs where we tell users that inst. prefix is not required (jkonecny)
    Related: rhbz#1897657
  - Print warning for boot options without inst. prefix (jkonecny)
    Related: rhbz#1897657
  - Add missing dracut commands as missing inst. prefix warning (jkonecny)
    Related: rhbz#1897657
  - Enable warning when inst. prefix is not used (jkonecny)
    Related: rhbz#1897657


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.10-1
changelog:
  - Mark the rhsm and syspurpose kickstart commands as useless (vponcova)
    Resolves: rhbz#1921787
  - Fix getting kernel version list for liveimg (rvykydal)
    Resolves: rhbz#1919463


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.11-1
changelog:
  - Take dnf substitutions from installer environment configuration (rvykydal)
    Resolves: rhbz#1920735
  - Fix exclude arguments of tar payload extracting. (rvykydal)
    Resolves: rhbz#1924118


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.14-1
changelog:
  - Fix crash in NTP servers GUI dialog on late network configuration (rvykydal)
    Resolves: rhbz#1938168


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.15-1
changelog:
  - network: clone connections from intramfs to persistent config (rvykydal)
    Resolves: rhbz#1910438
  - network: match also connections named by MAC created by NM in initramfs
    (rvykydal)
    Related: rhbz#1910438
  - network: do not reset ipv6.addr-gen-mode in tui network configuration
    (rvykydal)
    Related: rhbz#1873021
  - network: set addr-gen-mode of Anaconda default connections to eui64
    (rvykydal)
    Related: rhbz#1873021
  - network: default to addr-gen-mode eui64 (rvykydal)
    Resolves: rhbz#1873021


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14.0-4
changelog:
  - realtime-virtual-host: remove lapic advancement calculation and
    related qemu-kvm-tools-rhev requirement
    Resolves: rhbz#1845717


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.15.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1874052
    - added plugin service for linux services control
      resolves: rhbz#1869991
    - scheduler: added default_irq_smp_affinity option
      resolves: rhbz#1896348
    - bootloader: skip boom managed BLS snippets
      resolves: rhbz#1901532
    - scheduler: added perf_process_fork option to enable processing of fork
      resolves: rhbz#1894610
    - scheduler: added perf_mmap_pages option to set perf buffer size
      resolves: rhbz#1890219
    - bootloader: fixed cmdline duplication with BLS and grub2-mkconfig
      resolves: rhbz#1777874


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1
changelog:
  - Update to jdk-11.0.10.0+9
  - Update release notes to 11.0.10.0+9
  - Switch to GA mode for final release.
  - Resolves: rhbz#1908972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-7
changelog:
  - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps)
  - Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
  - Resolves: rhbz#1814915


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-8
changelog:
  - Perform static library build on a separate source tree with bundled image libraries
  - Make static library build optional
  - Based on initial work by Severin Gehwolf
  - Resolves: rhbz#1930513


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.9-0
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Fixed not-including fastdebug build in case of --without fastdebug
  - Resolves: rhbz#1938201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0
changelog:
  - Update to jdk-11.0.11.0+9
  - Update release notes to 11.0.11.0+9
  - Require tzdata 2020f to match upstream change JDK-8259048
  - Require tzdata 2021a to match upstream change JDK-8260356
  - Remove RH1868754 patch as this is now resolved upstream by JDK-8258833
  - Remove RH1868740 & RH1883849 patches as these are now resolved by JDK-8259319
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Convert spec for python39 module in RHEL8
  - Revert usage of pyproject-rpm-macros
  - Resolves: rhbz#1877430


author: Uri Lublin <uril@redhat.com> - 0.38-4
changelog:
  - Fix some static analyzer issues
    Resolves: rhbz#1839104
  - Fix spice-usbredir-redirect-on-connect
    Resolves: rhbz#1874740


author: Milan Crha <mcrha@redhat.com> - 3.28.5-10
changelog:
  - Resolves: #1886026 (Simplify OAuth2 for outlook.office365.com server)
  - Resolves: #1885229 (Allow change of the Microsoft 365 OAuth2 endpoints)


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.8.1-1
changelog:
  - Rebase to upstream JSS v4.8.1
  - Red Hat Bugilla #1908541 - jss broke SCEP - missing PasswordChallenge class
  - Red Hat Bugilla #1489256 - [RFE] jss should support RSA with OAEP padding


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-1
changelog:
  - crm_mon --resource option to filter output by resource
  - Avoid filling /dev/shm after frequent corosync errors
  - Allow configurable permissions for log files
  - Ensure ACL write permission always supersedes read
  - Use fence device monitor timeout for starts and probes
  - Allow type="integer" in rule expressions
  - Avoid error messages when running crm_node inside bundles
  - Avoid situation where promotion is not scheduled until next transition
  - crm_mon should show more clearly when an entire group is disabled
  - Rebase on upstream 2.0.5-rc1 release
  - Resolves: rhbz1300597
  - Resolves: rhbz1614166
  - Resolves: rhbz1647136
  - Resolves: rhbz1833173
  - Resolves: rhbz1856015
  - Resolves: rhbz1866573
  - Resolves: rhbz1874391
  - Resolves: rhbz1835717
  - Resolves: rhbz1748139
  - Resolves: rhbz1885645


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-2
changelog:
  - Rebase on upstream 2.0.5-rc2 release
  - Prevent ACL bypass (CVE-2020-25654)
  - Resolves: rhbz1885645
  - Resolves: rhbz1889582


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.5-4
changelog:
  - Rebase on upstream 2.0.5 release
  - Make waiting to be pinged by sbd via pacemakerd-api the default
  - Resolves: rhbz1885645
  - Resolves: rhbz1873138


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-5
changelog:
  - Allow non-critical resources that stop rather than make another resource move
  - Support crm_resource --digests option for showing operation digests
  - Clean-up of all resources should work from remote nodes
  - Resolves: rhbz1371576
  - Resolves: rhbz1872376
  - Resolves: rhbz1907726


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-6
changelog:
  - crm_mon --daemonize should reconnect if cluster restarts
  - crm_mon should show more informative messages when cluster is starting
  - crm_mon should show rest of status if fencing history is unavailable
  - cibsecret now works on remote nodes (as long as name can be reached via ssh)
  - Stop remote nodes correctly when connection history is later than node history
  - Resolves: rhbz1466875
  - Resolves: rhbz1872490
  - Resolves: rhbz1880426
  - Resolves: rhbz1881537
  - Resolves: rhbz1898457


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-15
changelog:
  - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key
  - Resolves: rhbz#1714175
  - Use system-wide crypto policy setting (PROFILE=SYSTEM) instead of custom setting
  - Resolves: rhbz#1842837
  - Enable additional logging in unbound
  - Resolves: rhbz#1850460
  - security hardening from x41 report
  - Resolves: rhbz#1859933
  - symbolic link traversal when writing PID file
  - Resolves: rhbz#1899058


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-6
changelog:
  - Bump version to 1.4.3.8-6
  - Resolves: Bug 1904348 - Duplicate entryUSN numbers for different LDAP entries in the same backend
  - Resolves: Bug 1904349 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1904350 - do not add referrals for masters with different data generation
  - Resolves: Bug 1904351 - create keep alive entry after on line init
  - Resolves: Bug 1904352 - NULL dereference in revert_cache()
  - Resolves: Bug 1904353 - ds-replcheck crashes in offline mode
  - Resolves: Bug 1904347 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-7
changelog:
  - Bump version to 1.4.3.8-7
  - Resolves: Bug 1908705 - CVE-2020-35518 389-ds:1.4/389-ds-base: information disclosure during the binding of a DN
  - Resolves: Bug 1936461 - A failed re-indexing leaves the database in broken state.
  - Resolves: Bug 1912481 - Server-Cert.crt created using dscreate has Subject:CN =localhost instead of hostname.


author: Sean O'Keeffe <seanokeeffe797@gmail.com> 0.7.0-1
changelog:
  - Fixes #98 - Don't try appending `None`, helpers (seanokeeffe797@gmail.com)
  - Fixes #104 - Replace None with "" when sorting (seanokeeffe797@gmail.com)
  - Update Python 2 dependency declarations to new packaging standards
    (seanokeeffe797@gmail.com)
  - Fixes #105 - check ID_LIKE in /etc/os-release (seanokeeffe797@gmail.com)
  - Cache process info (elyscape@gmail.com)
  - Handle sshd sessions that use privilege separation (elyscape@gmail.com)
  - fix typo in docs (seanokeeffe797@gmail.com)
  - Switch Travis to container-based infrastructure (seanokeeffe797@gmail.com)
  - Fix RHBug #1469282 - bash completion should exit cleanly if python-
    argcomplete is not installed (seanokeeffe797@gmail.com)
  - Fix argparse logic in spec (#94) (frostyx@email.cz)
  - Update branches for fedora releaser (frostyx@email.cz)
  - Add epel releaser (seanokeeffe797@gmail.com)
  - rename tito releasers (seanokeeffe797@gmail.com)


author: Jakub Kadlčík <frostyx@email.cz> 0.7.1-1
changelog:
  - Fix #116 - Support currrent versions of DNF (elyscape@gmail.com)
  - Fix #112 - handle PIDs that have no unit_path (seanokeeffe797@gmail.com)
  - Fix #119 - Improve session detection logic to fix (elyscape@gmail.com)
  - Fix space, instead of tabs (#115) (JensKuehnel@users.noreply.github.com)
  - A lot of changes to spec file regarding python2/3 (seanokeeffe797@gmail.com)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Dennis Keefe <dkeefe@redhat.com> - 2.3.0-2
changelog:
  - Update to 2.3.0
  - Resolves: rhbz#1885328
  - Stratis devices inhabit an existing root directory path
  - Resolves: rhbz#1798244
  - Add Clevis Support
  - Resolves: rhbz#1868100
  - Improve stratisd log levels
  - Resolves: rhbz#1757976


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.24.0-1
changelog:
  - Resolves: RHBZ#1932373, RHBZ#1932426
  - Resolves CVE-2021-22883 and CVE-2021-22884
  - remove -debug-nghttp2 flag (1930775)
  - remove ini patch merged upstream


author: Mark Wielaard <mjw@redhat.com> - 3.16.0-4
changelog:
  - Add valgrind-3.16.1-REX-prefix-JMP.patch
  - Add valgrind-3.16.1-epoll.patch
  - Add valgrind-3.16.1-sched_getsetattr.patch
  - Add valgrind-3.16.1-dl_runtime_resolve.patch


author: Marek Polacek <polacek@redhat.com> 8.4.1-1
changelog:
  - update from GCC 8.4 release (#1868446)
  - remove symlinks to 32-bit versions of these static libraries: libasan.a,
    libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.30.2-2
changelog:
  - Try to fix coverity build by disabling docs (thanks to Kamil Dudka <kdudka@redhat.com>!)
  - Related: #1883304


author: Miro Hrončok <mhroncok@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0 (#1768982) for Python 3.9 support (#1788494)
  - Drop old obsoletes for platform-python-six


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-8.git921f98f
changelog:
  - fix "podman can not create user inside of container" regression introduced by
    patch for CVE-2021-20188
  - Related: #1918285


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-1
changelog:
  - Rebase to 1.0.0
  Resolves: rhbz#1887448
  - Filtering rules by attribute
  Resolves: rhbz#1873953
  - Change device policy of multiple devices using rule instead of ID
  Resolves: rhbz#1852568


author: Marek Polacek <polacek@redhat.com> 10.2.1-8
changelog:
  - update from Fedora gcc 10.2.1-8 (#1878887)
  - emit DW_AT_declaration on declaration-only DIEs (#1897272, PR debug/97060)
  - add BuildRequires: make and Requires: make, the latter for -flto reasons


author: Jindrich Novy <jnovy@redhat.com> - 2:2.150.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.150.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.151.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.151.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.152.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.152.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.153.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.153.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.154.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.154.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.155.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.155.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.156.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.156.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.158.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.158.0
  - Related: #1883490


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0~rc2-2
changelog:
  - Use upstream architecture names on Fedora 34+
  - https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-2
changelog:
  - Fix man file names for Flatpak builds, exclude __pycache__ files from Flatpak builds
  - Resolves: rhbz#1896322


author: Jindrich Novy <jnovy@redhat.com> - 27.1-3
changelog:
  - another gating test fix - don't remove all containers but only admin ones
    thanks to Matej Marusak
  - Related: #1883490


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Christopher Snyder <csnyder@redhat.com> 1.28.5-1
changelog:
  - removing yarn (jmolet@redhat.com)
  - Revert "1847910: DNF plugins are part of sub-man RPM, libdnf RPM; ENT-2536"
    (csnyder@redhat.com)
  - 1886745: Fix __init__ of CPProvider; ENT-3147 (jhnidek@redhat.com)
  - 1833316: unset-addons argument is missing in the bash completion of
    syspurpose (wpoteat@redhat.com)
  - 1875595: Service-Level set issues (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.6-1
changelog:
  - 1850624: Uncaught JSONDecodeError when content_access.json is empty and
    registering to Satellite6 (wpoteat@redhat.com)
  - 1831082: Better messages for attach --auto for SCA mode; ENT-3175
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.7-1
changelog:
  - 1855437: Fixed rpm dependency of subscription-manager; ENT-3250 (#2365)
    (jhnidek@redhat.com)
  - 1894450: Fix issue with identity command; ENT-3235 (#2364)
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.8-1
changelog:
  - 1904541: subscription-manager should not prompt for "Organization" when only
    one organization (#2372) (wpoteat@redhat.com)
  - 1801570: drop scrollkeeper/rarian as a dependency from rhsm-gtk
    (csnyder@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.28.10-1
changelog:
  - Use python3-requests and not python-requests. (jhnidek@redhat.com)
  - ENT-3289: automatic registration on public cloud (#2407) (jhnidek@redhat.com)
  - ENT-3191: Collect metadata of cloud providers (#2381) (jhnidek@redhat.com)
  - Detecting of cloud providers; ENT-3288 (#2367) (jhnidek@redhat.com)
  - 1899677: Extract of strings for translations (#2399) (wpoteat@redhat.com)
  - Syntax update to translation commands (#2395) (wpoteat@redhat.com)
  - Update project to use Weblate for translations (#2388) (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.11-1
changelog:
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - 1922173: Repeat auto-register only, when first attempt fail (#2420)
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.13-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (jsefler@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)


author: Ray Strode <rstrode@redhat.com> - 3.28.3-39
changelog:
  - Ensure login screen display server is is killed at log in
  - Pull in fixes for two security issues
    Resolves: #1918391


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-24
changelog:
  - fix CVE-2021-20188
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/2c7b579)
  - Related: #1920383


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-26
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/bcbbbc4)
  - Related: #1920383


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.25-1
changelog:
  - Update to 9.11.25
  - Require libcap from devel package
  - Fix crash on NTA recheck failure (#1893761)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-2
changelog:
  - Add DNSTAP support (#1854148), new dnstap-read tool
  - Add JSON support in statistics-channel (#1899257)


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Ray Strode <rstrode@redhat.com> 84.3-1
changelog:
  - Another round of background updates. This:
       - downscales wallpapers to match their labeled size
       - fixes a few portrait/landscape swaps
       - moves centered logos away from center in portrait
         wallpapers
    Related: #1854287


author: Ray Strode <rstrode@redhat.com> 84.4-1
changelog:
  - Another round of background updates.  This:
       - Fixes missized image
       - Removes rendering artifacts from some of the backgrounds
       - Removes extraneous wallpapers for aspect ratios we don't care about
    Related: #1854287


author: Nikola Forró <nforro@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - Increase test timeout, 300 seconds is not always enough
    for test_logpdf_overflow on s390x
    resolves: #1894887


author: Tomas Orsava <torsava@redhat.com> - 1.5.4-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983 rhbz#1877430


author: Julien Ropé <jrope@redhat.com> - 0.20.0-3
changelog:
  - Fix mouse problems in multi-monitor environments under Wayland
    Resolves: rhbz#1790904 rhbz#1824610


author: - Jiri Vanek <jvanek@redhat.com> -1.8.4-2
changelog:
  - added native launchers, via separate subpackage, but efectively changed main package to arched one
  - removed policyeditor man page, it was link to itself
  - Resolves: rhbz#1900043


author: - Jiri Vanek <jvanek@redhat.com> -1.8.4-4
changelog:
  - added patch2, fed2f5b-22402bb.patch containing important fixes from future 1.8.5
  - Resolves: rhbz#1900043


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.1-3
changelog:
  - Subpackage python2-lxml has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Jack Magne <jmagne@redhat.com> - 1.1.2-18
changelog:
  - Related: rhbz#1870715 - HP Keyboard does not list the certificates on an enrolled smart card.
  - Re-spin with greater release number, to apease tps tests.


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/b4210c0)
  - Resolves: #1914884


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-4
changelog:
  - virt-install: Use minutes instead of seconds on get_time_string() (rhbz#1777664)
  - details: Fix showing the firmware type in case of firmware auto selection (rhbz#1857069)
  - details: fix detection of firmware auto-selection (rhbz#1857069)
  - domain: Fix VM deletion with firmare='efi' (rhbz#1869135)
  - virt-xml: fix defined_xml_is_unchanged (rhbz#1857504)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b08 (GA)
  - Update release notes for 8u282-b08.
  - Resolves: rhbz#1908967


author: David Benoit <dbenoit@redhat.com> - 1.15.2-1
changelog:
  - Rebase to 1.15.2
  - Related: rhbz#1870531
  - Related: rhbz#1872622
  - Related: rhbz#1888673
  - Related: rhbz#1889437
  - Related: rhbz#1891095


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17
  - Related: #1883490


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845548


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-10
changelog:
  - python/semanage: Sort imports in alphabetical order
  - python/semanage: empty stdout before exiting on BrokenPipeError (#1822100)


author: Christian Kellner <ckellner@redhat.com> - 22-1
changelog:
  - Upstream release 22
  - Remove all patches since they are all in osbuild-22.
  - bubblewrap replaced systemd-nspawn for sandboxing; change the
    requirements accordingly.


author: Christian Kellner <ckellner@redhat.com> - 23-2
changelog:
  - Explicilty require python3. See the comment above the Requires
    for an explanation why this is needed.


author: Christian Kellner <ckellner@redhat.com> - 23-3
changelog:
  - only disable the dep. generator for runners, remove explicity
    python3 requirement again. The dependency should be picked up
    via the dependency generator now.


author: Christian Kellner <ckellner@redhat.com> - 25-1
changelog:
  - Upstream 25 release
  - First tech preview of the new manifest format. Includes
    various new stages and inputs to be able to build ostree
    commits contained in a oci archive.


author: Christian Kellner <ckellner@redhat.com> - 27-1
changelog:
  - Upstream release 27
  - Various bug fixes related to the new container and installer
    stages introdcued in version 25 and 26.


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
    Resolves: bz#1880985
  - Backport fix to allow Tigervnc use boolean values in config files
    Resolves: bz#1883415


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-2
changelog:
  - Revert removal of vncserver
    Resolves: bz#1897504
  - Correctly start vncsession as a daemon
    Resolves: bz#1897498


author: Katerina Koukiou <kkoukiou@redhat.com> - 233.1-1
changelog:
  - machines: Inline error messages (rhbz#1666829)
  - machines: Reimplement the design of the main VMs list (rhbz#1780537, rhbz#1847712, rhbz#1858716, rhbz#1862406, rhbz#1873931)
  - storage: List entries from /etc/crypttab that are still locked
  - machines: Add support for reverting and deleting VM snapshots
  - machines: Add support for VM snapshots (rhbz#1668870, rhbz#1673158)
  - machines: Virtual machine list filtering
  - storage: Better support for "noauto" LUKS devices
  - machines: Fix 'PXE' installed VMs having network first in the boot order even after the installation finishded (rhbz#1859008)
  - machines: Fix Desktop Viewer Console tab CSS issues (rhbz#1868584)
  - tools: Fix duplicated -debuginfo files (rhbz#1870521)
  - machines: Show cdrom details in bootorder dialog (rhbz#1880175)


author: Katerina Koukiou <kkoukiou@redhat.com> - 234-1
changelog:
  - machines: Allow editing VM's CPU mode and model (rhbz#1683301)
  - machines: Add support for cloning VMs (rhbz#1683391)
  - dashboard: Drop cockpit-dashboard package, replaced with shell host switcher


author: Matej Marusak <mmarusak@redhat.com> - 235-1
changelog:
  - machines: Fix check of cpu configuration between active/inactive XML (rhbz#1913205)
  - machines: Fix rounding of memory when switching from MB to GB (rhbz#1908683)


author: Martin Pitt <mpitt@redhat.com> - 236-1
changelog:
  - machines: Fix unstable VNC console (rhbz#1750642)
  - machines: Fix alert close property in the VM details (rhbz#1918147)
  - machines: Fix crash when volumes disappear before starting installation (rhbz#1918156)
  - machines: Fix crash when undefining created VM before starting installation (rhbz#1916597)
  - machines: Fix shutting down transient VM (rhbz#1916595)
  - machines: Fix VM detail page's "Install" button (rhbz#1916120)


author: Katerina Koukiou <kkoukiou@redhat.com> - 237-1
changelog:
  - machines: Fix virt-viewer file download on chromium based Edge (rhbz#1730666)
  - machines: Fix crash when a target is pasted in the VM creation dialog (rhbz#1872660)
  - machines: Fix alert about pending changes in NIC edit dialog (rhbz#1911657)
  - machines: Fix alert about pending changes in overview card related to boot order (rhbz#1915765)
  - machines: Fix file autocomplete select not closing on enter (rhbz#1874392)
  - machines: Fix white screen when deleting a VM in an environment without storage pools (rhbz#1912384)


author: Katerina Koukiou <kkoukiou@redhat.com> - 238-1
changelog:
  - machines: VM disk creation supports a custom path
  - Updates: List outdated software that needs a restart


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.4-6.2
changelog:
  - Avoid situation where promotion is not scheduled until next transition
  - Avoid pcs failures when Pacemaker records negative call ID in history
  - Resolves: rhbz1935240
  - Resolves: rhbz1939533


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/17521db)
  - Related: #1883490


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-5
changelog:
  - Prevent also BackSpace from reopening a preedit when the
    option “Arrow keys can reopen a preedit” is off
  - Resolves: rhbz#1925030


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-4.el8
changelog:
  - edk2-OvmfPkg-SmmControl2Dxe-negotiate-ICH9_LPC_SMI_F_CPU_.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-befo.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-afte.patch [bz#1849177]
  - edk2-CryptoPkg-OpensslLib-Upgrade-OpenSSL-to-1.1.1g.patch [bz#1893806]
  - edk2-redhat-bump-OpenSSL-dist-git-submodule-to-1.1.1g-RHE.patch [bz#1893806]
  - Resolves: bz#1849177
    (OVMF: negotiate "SMI on VCPU hotplug" with QEMU)
  - Resolves: bz#1893806
    (attempt advancing RHEL8 edk2's OpenSSL submodule to RHEL8 OpenSSL 1.1.1g (or later))


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-5
changelog:
  - Resolves: rhbz#1805749 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                             Open redirect in logout url when using URLs with
                             leading slashes
  - Resolves: rhbz#1805068 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                             open redirect issue exists in URLs with slash and
                             backslash


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-6
changelog:
  - Fix the previous backport
  - Related: rhbz#1805749 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                            Open redirect in logout url when using URLs with
                            leading slashes
  - Related: rhbz#1805068 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                            open redirect issue exists in URLs with slash and
                            backslash


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-7
changelog:
  - Resolves: rhbz#1897992 - OIDCStateInputHeaders &
                             OIDCStateMaxNumberOfCookies in existing
                             mod_auth_openidc version
  - Backport the OIDCStateMaxNumberOfCookies option
  - Configure which header value is used to calculate the fingerprint of
    the auth state


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-8
changelog:
  - Resolves: rhbz#1823756 - Backport SameSite=None cookie from
                             mod_auth_openidc upstream to support latest browsers


author: Tomas Orsava <torsava@redhat.com> - 1.0-16
changelog:
  - Update python macros to python2 versioned macros
  - Issue found when rebuilding the python27 module to include CVE fixes
  - Related: rhbz#1883890 rhbz#1883258


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Sergio Correia <scorreia@redhat.com> - 15-1
changelog:
  - Update to latest upstream release, v15
    Resolves: rhbz#1887836
    Resolves: rhbz#1853651
    Resolves: rhbz#1874460


author: Tomas Orsava <torsava@redhat.com> - 1:0.35.1-3
changelog:
  - Add back Epoch 1 to the package version because the original version with the
    epoch was available in CentOS Stream for a few days
  - Resolves: rhbz#1877430


author: Eric Garver <egarver@redhat.com> - 0.8.2-3
changelog:
  - fix(nftables): packet marks with masks
  - fix(nftables): icmp types with code == 0
  - fix(rich icmptype): verify rule and icmptype families
  - fix(zone): cache rule_str for rich rules
  - improvement(service): IPsec: Update description and add TCP port 4500
  - feat(service): add collectd service
  - feat(service): Add rpc-rquotad.service


author: Florian Festi <ffesti@redhat.com> - 4.14.3-5
changelog:
  - Don't error out when replacing an invalid signature (#1874062)
  - Raise an expection when erasing a package fails in Python (#1872623)
  - Fix builds on NFS filesystems (#1840728)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12
changelog:
  - Bump up the limit of signature header to 64MB (#1918777)
  - Add fapolicyd plugin (#1923167)
  - Unblock signals in forked scriptlets (#1913765)
  - Fix ambiguous diagnostics output on file triggers (#1883338)
  - Ensure ELF files get stripped when debuginfo is disabled (#1634084)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13
changelog:
  - Fix minor issues found by COVSCAN in fapolicyd plugin
  - Actually honor libarchive bcond at configure time (#1902887)


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.6.0-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.6.0
    Resolves: rhbz#1903465


author: Keith Seitz <keiths@redhat.com> - 9.2-3
changelog:
  - Fix missing debuginfo messages. (Keith Seitz, RH BZ 1894703)
  - Add debuginfod.m4 patch to use pkg-config. 
  - Backport "Corefile memory access problems" patches.
    (Kevin Buettner, RH BZ 1886602)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)


author: Keith Seitz <keiths@redhat.com> - 9.2-4
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905702)


author: Jack Magne <jmagne@redhat.com> - 1.1.2-17
changelog:
  - Resolves: rhbz#1924088- HP Keyboard does not list the certificates on an enrolled smart card.
  - Provide proper tag in build.


author: William Poteat <wpoteat@redhat.com> 0.25.4-1
changelog:
  - 1718304: Fix issue when instance["BIOSGUID"] returns None
    (phess@users.noreply.github.com)
  - 1652549: Add heartbeat call to virt-who cycle (wpoteat@redhat.com)
  - 1472727: Log error, when encrypted password is missing; ENT-1344
    (jhnidek@redhat.com)
  - 1714133: can't set data property (piotr.kliczewski@gmail.com)
  - Add Nutanix AHV support for RHSS + UTs. (amir00018@gmail.com)


author: William Poteat <wpoteat@redhat.com> 0.30.0-1
changelog:
  - Add patch to remove AHV bits for RHEL builds (wpoteat@redhat.com)
  - 1878136: Deprecation warning for environment variables (wpoteat@redhat.com)
  - 184506: virt-who should send its version in the User-Agent header
    (wpoteat@redhat.com)
  - 1806572: RHEVM API url needs version specified (wpoteat@redhat.com)
  - 1847792: [ESX] Virt-who is failed when run with
    "filter/exclude_host_parents=" option (wpoteat@redhat.com)
  - 1809098: Convert UUID to big-endian for certain esx hardware versions
    (wpoteat@redhat.com)
  - 1835132: support milicpus (piotr.kliczewski@gmail.com)


author: William Poteat <wpoteat@redhat.com> 0.30.1-1
changelog:
  - 1878136: Deprecation comment in config file (wpoteat@redhat.com)
  - 1854829: rhsm_port and rhsm_password are missing in template.conf
    (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.30.2-1
changelog:
  - 1890421: New section of virt-who.conf file for environment variables
    (wpoteat@redhat.com)
  - 1876927: virt-who fails to parse output from hypervisor (wpoteat@redhat.com)
  - Correction in patch builder for directory location (wpoteat@redhat.com)
  - Update releasers (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.30.3-1
changelog:
  - 1890421: Update to docs for config change (wpoteat@redhat.com)
  - Tweak of patch builder (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.30.5-1
changelog:
  - 1855550: [Remote Libvirt] The Name in Stage Candlepin cannot update based on
    hypervisor_id configuration (wpoteat@redhat.com)
  - 1879329: List possible values for type in man page (wpoteat@redhat.com)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.3-1
changelog:
  - assure runc is set as default runtime in RHEL8
  - update shortnames from upstream
  - sync vendored component versions with upstream
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-9
changelog:
  - revert back to state of 3.0-8.4.0
  - sync shortnames with pyxis
  - improve shortnames
  - Related: #1954702


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b09 (EA)
  - Update release notes for 8u292-b09.
  - Switch to EA mode.
  - Update tarball generation script to use PR3822 which handles
      JDK-8233228 & JDK-8035166 changes
  - Remove RH1868759 patch as this is now resolved upstream by JDK-8258833.
  - Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  - Require tzdata 2020f due to JDK-8259048
  - Require tzdata 2021a due to JDK-8260356
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  - Update release notes for 8u292-b10.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Patrik Novotný <panovotn@redhat.com> - 9.6.20-1
changelog:
  - Rebase to upstream release 9.6.20
    Resolves: rhbz#1898246
    Resolves: rhbz#1898219
    Resolves: rhbz#1898335


author: Uri Lublin <uril@redhat.com> - 8.4-1
changelog:
  - mingw-virt-viewer 9.0-9
  - mingw-libgovirt   0.3.7-5
  - mingw-spice-gtk   0.38-5
    Related: rhbz#844683
    Related: rhbz#1839104 rhbz#1874740 rhbz#1017261
    Related: rhbz#1918459


author: Keith Seitz <keiths@redhat.com> - 8.2-13.el8
changelog:
  - Backport "Fix terminal problems when error() is called."
    (Alan Hayward RH BZ 1852580)
  - Backport "core file memory access problem."
    (Kevin Buettner, RH BZ 1785126)
  - Backport "Stop the BFD library from issuing a warning message..."
    (Nick Clifton, RH BZ 1878810)


author: Keith Seitz <keiths@redhat.com> - 8.2-14.el8
changelog:
  - Obsolete earlier versions on x86_64 and conflict with 64-bit
    glibc on ix86. (Keith Seitz, RH BZ 1853140)
  - Really fix 1878810 (Keith Seitz, RH BZ 1878810)


author: Keith Seitz <keiths@redhat.com> - 8.2-15.el8
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903374)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905701)


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/9788289)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/8eefca5)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/ed6f399)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/b6405c1)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/034470e)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/54bed10)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/57b6425)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/8dcd5b8)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-12
changelog:
  - require at least conmon >= 2.0.25 to assure rootless podman is able to start containers
  - Related: #1954702


author: Paul Wouters <pwouters@redhat.com> - 4.1-1
changelog:
  - Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.1
  - Resolves: rhbz#1889836 libreswan: add 3.x compat patches for obsoleted/removed keywords of 4.0 and re-port ikev2= patch


author: Paul Wouters <pwouters@redhat.com> - 4.2-1
changelog:
  - Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.2
  - Resolves: rhbz#1025061 - IKEv2 support for Labeled IPsec


author: Paul Wouters <pwouters@redhat.com> - 4.3-3
changelog:
  - Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229
  - Resolves: rhbz#1934186 virtual_private setting is missing in the default config


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-2
changelog:
  - Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
    via error pages in http/ngx_http_special_response.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.16.1-2.1
changelog:
  - Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Patrik Novotný <panovotn@redhat.com> - 10.15-1
changelog:
  - Rebase to upstream release 10.15
    Resolves: rhbz#1898214
    Resolves: rhbz#1898342
    Resolves: rhbz#1898248


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.7-0.1.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Fixed not-including fastdebug build in case of --without fastdebug
  - Resolves: rhbz#1942310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.11.0+7
  - Update release notes to 11.0.11.0+7
  - Switch to EA mode for 11.0.11 pre-release builds.
  - Require tzdata 2020f to match upstream change JDK-8259048
  - Remove RH1868754 patch as this is now resolved upstream by JDK-8258833
  - Remove RH1868740 & RH1883849 patches as these are now resolved by JDK-8259319
  - Resolves: rhbz#1942310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1
changelog:
  - Update to jdk-11.0.11.0+9
  - Update release notes to 11.0.11.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-1
changelog:
  - Resolves: rhbz#1855293
  - Resolves: rhbz#1855303
  - Resolves: rhbz#1870449
  - Resolves: rhbz#1887400

  - New upstream release (rhbz#1855293)
  - Support for reload of crypto configuration (rhbz#1855303)
  - Increase default token timeout to 3000ms (rhbz#1870449)
  - Add support for nodelist callback into quorum service (rhbz#1887400)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-3
changelog:
  - Resolves: rhbz#1897085
  - Resolves: rhbz#1896493

  - spausedd: Add ability to move process into root cgroup (rhbz#1897085)
  - totemknet: Check both cipher and hash for crypto (rhbz#1896493)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.3-3
changelog:
  - Support using the '0', '+' and '-' keys from the numeric keypad as
    accelerators
  - Resolves: #837035


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.18.0-3.1
changelog:
  - Resolves: #1963178 - CVE-2021-23017 nginx:1.18/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4-18
changelog:
  - Fix typo in default.conf
    Resolves: #1882060
  - Modify the cron command to avoid an e-mail with error message after
    ReaR is installed but not properly configured when the cron command
    is triggered for the first time
    Resolves: #1729499
  - Backport upstream code related to LUKS2 support
    Resolves: #1832394
  - Changes for NetBackup (NBU) support, upstream PR2544
    Resolves: #1898080


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.4-1
changelog:
  - Upgrade to the latest upstream release (RHBZ#1887794)
  - Treat GPFS as a remote file system (RHBZ#1840578, RHBZ#1840579)
  - Fixed the most problematic memory issues that were causing OOM situations
    for systems with large amount of files (RHBZ#1824152)
  - Proper handling of OVALs with circular dependencies between definitions (RHBZ#1812476)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.30.0-0.8
changelog:
  - Update to 1.29.10 (development)
  - bond: introduce new 'vlan+srcmac' xmit_hash_policy option (rh #1915457)
  - ovs: clean up interfaces from ovsdb at startup (rh #1861296)


author: Antonio Cardace <acardace@redhat.com> - 1:1.30.0-0.9
changelog:
  - Update to 1.29.11 (development)
  - bond: fix changing mode when the device is created externally (rh #1870691)
  - ovs: fix firewalld configuration for ovs-ports (rh #1921107)
  - ovs: avoid race condition when system interface is removed from ovsdb (rh #1923248)
  - doc: mention NETMASK as alternative to PREFIX for addresses in `man nm-settings-ifcfg-rh` (rh #1925123)


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-0.10
changelog:
  - Update to 1.30-rc1 (1.29.90-dev) (development)
  - cloud-setup: fix removing IPv4 address (rh #1920838)


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-3
changelog:
  - Increase LimitNOFILE to allow more than 1024 file descriptors (rh #1926599).
    This requires a suitable libndp version that can handle many file descriptors (rh #1933041).


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-6
changelog:
  - core: fix handling local routes generated by kernel (rh #1907661)
  - initrd: fix crash with rd.znet= argument (rh #1941106)
  - core: fix crash handling path match (rh #1942741)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.2.2-7
changelog:
  - Add support for XFS format grow
    Resolves: rhbz#1862349
  - Do not limit swap to 128 GiB
    Resolves: rhbz#1656485
  - Use UnusableConfigurationError for partially hidden multipath devices
    Resolves: rhbz#1877052
  - Fix possible UnicodeDecodeError when reading model from sysfs
    Resolves: rhbz#1849326
  - Add basic support for LVM VDO devices
    Resolves: rhbz#1828745


author: Vojtech Trefny <vtrefny@redhat.com> - 3.2.2-8
changelog:
  - Let parted fix fixable issues with partition table
    Resolves: rhbz#1846869
  - Fix possible UnicodeDecodeError when reading sysfs attributes
    Resolves: rhbz#1849326


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-9.1
changelog:
  - Fix regression in crm_mon during cluster shutdown that affects ocf:heartbeat:pgsql agent
  - Resolves: rhbz1951098


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-8
changelog:
  - crash/arm64: Fix arm64 read error with 'idmap_ptrs_per_pgd' symbol with debug kernel
    Resolves: rhbz#1876039


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.9-1
changelog:
  - Rebase to upstream crash version 7.2.9
  - Also minimize the rhel-only patches to the bare minimum.
    Resolves: rhbz#1881854


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.9-2
changelog:
  - Fix the sources file to add gdb-7.6 tarball
    [The line was somehow removed when using rhpkg new-sources to
     update the crash tarball location]
    Resolves: rhbz#1881854


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12
changelog:
  - Resolves: rhbz#1791262 - Backport SameSite=None cookie from upstream to
                             support latest browsers


author: Filip Januš <fjanus@redhat.com> - 12.2-1
changelog:
  - Rebase onto: 12.2
  - update of patch(libecpg-10.5-external-libpq.patch) was needed
  - add upstream patch libecpg-12.2-dependency-build.patch
    https://www.postgresql.org/message-id/20200321221303.GA17979%40momjian.us


author: Honza Horak <hhorak@redhat.com> - 13.1-3
changelog:
  - Add Requires: libpgtypes to avoid the need to test interoperability
    between the various combinations of old and new subpackages


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-3
changelog:
  RHEL 8.4.0 ERRATUM
  - rebase to 1.0.2
  - strong dependency on rpm/rpm-plugin-fapolicyd
  - installed dnf-plugin is dummy and we are not using it anymore
  - enabled integrity setting
  Resolves: rhbz#1887451
  - added make check
  - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
  - fixed java detection
  Resolves: rhbz#1895435
  - dnf update fails when fapolicyd is enabled
  Resolves: rhbz#1876975
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-5
changelog:
  RHEL 8.4.0 ERRATUM
  - fixed multiple problems with unlink()
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Björn Esser <besser82@fedoraproject.org> - 0.13-3
changelog:
  - Add upstream patch for adding size_t json_c_object_sizeof()
  - Enable partial multi-threaded support


author: Anna Khaitovich <akhaitov@redhat.com> - 0.13.1-0.3
changelog:
  - Don't package empty /usr/share/doc/json-c
  - Resolves: rhbz#1741076
  - Do not use --enable-rdrand
  - Resolves: rhbz#1806532


author: Florian Müllner <fmuellner@redhat.com> - 3.32.2-22
changelog:
  - Wake up lock screen when deactivated programmatically
    Resolves: #1854290
  - Backport better caps-lock warning
    Resolves: #1861357
  - Fix more (harmless) JS warnings
    Resolves: #1881312


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.10.5-3
changelog:
  - Bug 1960146 - CVE-2021-3551 Dogtag installer "pkispawn" logs admin credentials into a world-readable log file


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-4
changelog:
  - patch: Fix reencryption for custom devices with data segments
    set to use cipher_null.
  - Resolves: #1927409


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-2.el8
changelog:
  - ci-Explicit-set-IPV6_AUTOCONF-and-IPV6_FORCE_ACCEPT_RA-.patch [bz#1889635]
  - ci-Add-config-modules-for-controlling-IBM-PowerVM-RMC.-.patch [bz#1886430]
  - Resolves: bz#1886430
    (Support for cloud-init config modules for PowerVM Hypervisor in Red Hat cloud-init)
  - Resolves: bz#1889635
    (Add support for ipv6_autoconf on cloud-init-20.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-3.el8
changelog:
  - ci--Removing-net-tools-dependency.patch [bz#1881871]
  - ci--Adding-man-pages-to-Red-Hat-spec-file.patch [bz#1612573]
  - Resolves: bz#1881871
    (Remove net-tools legacy dependency from spec file)
  - Resolves: bz#1612573
    (Man page scan results for cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-4.el8
changelog:
  - ci-Changing-permission-of-cloud-init-generator-to-755.patch [bz#1897528]
  - Resolves: bz#1897528
    (Change permission on ./systemd/cloud-init-generator.tmpl to 755 instead of 771)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-5.el8
changelog:
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1881462]
  - Resolves: bz#1881462
    ([rhel8][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-6.el8
changelog:
  - ci-Installing-man-pages-in-the-correct-place-with-corre.patch [bz#1612573]
  - ci-Adding-BOOTPROTO-dhcp-to-render-sysconfig-dhcp6-stat.patch [bz#1859695]
  - ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1898943]
  - ci-ssh_util-handle-non-default-AuthorizedKeysFile-confi.patch [bz#1862967]
  - Resolves: bz#1612573
    (Man page scan results for cloud-init)
  - Resolves: bz#1859695
    ([Cloud-init] DHCPv6 assigned address is not added to VM's interface)
  - Resolves: bz#1898943
    ([rhel-8]cloud-final.service fails if NetworkManager not installed.)
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-7.el8
changelog:
  - ci-Report-full-specific-version-with-cloud-init-version.patch [bz#1898949]
  - Resolves: bz#1898949
    (cloud-init should report full specific full version with "cloud-init --version")


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-8.el8
changelog:
  - ci-Missing-IPV6_AUTOCONF-no-to-render-sysconfig-dhcp6-s.patch [bz#1859695]
  - Resolves: bz#1859695
    ([Cloud-init] DHCPv6 assigned address is not added to VM's interface)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-9.el8
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900892]
  - ci-Revert-ssh_util-handle-non-default-AuthorizedKeysFil.patch [bz#1919972]
  - Resolves: bz#1900892
    ([Azure] Update existing user password RHEL8x)
  - Resolves: bz#1919972
    ([RHEL-8.4] ssh keys can be shared across users giving potential root access)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8
changelog:
  - ci-fix-a-typo-in-man-page-cloud-init.1-752.patch [bz#1913127]
  - Resolves: bz#1913127
    (A typo in cloud-init man page)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.2
changelog:
  - ci-Fix-requiring-device-number-on-EC2-derivatives-836.patch [bz#1942699]
  - Resolves: bz#1942699
    ([Aliyun][RHEL8.4][cloud-init] cloud-init service failed to start with Alibaba instance [rhel-8.4.0.z])


author: Liming Sun <lsun@mellanox.com> - 2.0.1-1
changelog:
  - Rename bfrshim to rshim
  - Remove rshim.spec since it's auto-generated from rshim.spec.in
  - Fix warnings reported by coverity
  - Add rhel/rshim.spec.in for fedora
  - Move rshim to sbin and move man page to man8


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.4-4
changelog:
  - Expose gating.yaml file in order to enable manual CI gating for rshim
    in RHEL-8.4, by bumping release and doing a Brew build.
  - Partially resolves: rhbz#1912248


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-25
changelog:
  - Apply storage PR #153 to fix a problem with partition name on NVMe devices
    Resolves: rhbz1865990
  - Remove symlinks to roles under tests
  - Cleanup of role directories - remove files starting with . in roles' root
    directories and Git files under tests. Resolves rhbz#1650550
  - Add collection support, make Version semver compatible: 1.0 -> 1.0.0
    Resolves rhbz#1893906
  - Autogenerate Automation-Hub README.md if building for RHEL
  - Renumber sources, Source is now auto-maintenance since it is the root
    of the source tree, kdump becomes Source4 (4 was originally firewall)
  - Introduce bcond_with/without ansible, work on Fedora, RHEL and EPEL
  - Rebase certificate role to include collection-related workarounds,
    no change in behavior intended
  - Rebase network role, includes collection-related workarounds
  - Revert an invasive network change to enable EPEL (PR #335) and implement
    a minimal version


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-27
changelog:
  - Rebase the logging role, Resolves rhbz#1889484
  - Fixes to collection docs and galaxy metadata from nhosoi
  - Apply network PR #350 Resolves rhbz#1927392


author: Rich Megginson <rmeggins@redhat.com> - 1.0.0-28
changelog:
  - Add patch for sshd https://github.com/willshersystems/ansible-sshd/pull/155
    for ansible 2.8/jinja 2.7 support for sshd role
  - Rebase certificate, kernel_settings, nbde_client for jinja27
  - Rebase the logging role, Resolves rhbz#1927943
  - Rebase storage role, Resolves rhbz#1894651 - interpreatation of
    omitted parameters
  - Apply storage PR #201 to dispense with the need of listing all disks
    in existing pools, Resolves rhbz1894676
  - Apply storage PR #199 to allow reducing the requested volume sizes
    if needed to fit, Resolves rhbz1894647
  - Rebase the network role, Resolves rhbz1893959, rhbz1893957
  - Add the ssh client role, Resolves rhbz1893712
  - Minor issue in selinux - no variable named present
    Resolves rhbz1926947
  - Prefix internal roles with private_, resolves rhbz#1927417
  - Add the ha_cluster role, Resolves rhbz#1893743


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-29
changelog:
  - Change internal role prefix to more descriptive private_${role}_subrole_
  - Sync spec improvements from Fedora and introduce helper macros
    No functional change except for license files location
  - Disable mssql metrics test on non-x86_64 where the packages
    are not available. Upstream PR #73


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-30
changelog:
  - Correct merge botch in previous (ssh/README.md is a doc file)
  - Update galaxy.yml even on Fedora, auto-maintenance may not have
    a consistent version number
  - Update collection doc transformation to match a modified text
    and include the Tech Preview note again


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-31
changelog:
  - Rebase certificate role to pick up a test fix, Resolves rhbz#1931568
  - Rebase logging role to fix default private key path,
    upstream PR #218


author: Noriko Hosoi <nhosoi@redhat.com> - 1.0.1-1
changelog:
  - Fix description field in galaxy.yml
  - Remove "Technology Preview" from Collection README
  - Merging individual ignore file and add it to the package
  - Add a note to each module Doc to indicate it is private
  - Add patches for network and storage role ansible-test fixes
    Resolves rhbz#1935451
  - Simplify doc tags in %files, corrects a forgotten doc tag for ha_cluster
  - Suppress one ansible-lint warning in ha_cluster


author: Jonas Ådahl <jadahl@redhat.com> - 3.32.2-52
changelog:
  - Support polyinstantiation
    Resolves: #1861769
  - Mitigate nouveau misidentifying connectors
    Resolves: #1786496


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-17
changelog:
  - Resolves: #1876525 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.10-16
changelog:
  - Subpackage python2-pyodbc has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jindrich Novy <jnovy@redhat.com> - 1.5.0-2
changelog:
  - be sure to disable openat2 syscall also with 1.5.0 - this is not supported
    in RHEL8 kernel (yet)
  - Related: #1954702


author: Brian C. Lane <bcl@redhat.com> 28.14.56-1
changelog:
  - Switch to using upstream mk-s390image for s390 cdboot.img creation (bcl)
    Related: rhbz#1892404
  - Add --squashfs-only option to drop inner rootfs.img layer (marmarek)
    Resolves: rhbz#1846282


author: Brian C. Lane <bcl@redhat.com> 28.14.57-1
changelog:
  - fixes #543 qemu -nodefconfig deprecated (afm404)
    Resolves: rhbz#1904168
  - sshd_config: Apply suggested changes (bcl)
    Resolves: rhbz#1872892


author: Brian C. Lane <bcl@redhat.com> 28.14.58-1
changelog:
  - composer-cli: Add support for start-ostree --url URL (bcl)
    Resolves: rhbz#1929381
  - tests: Override rhel-8-beta.json repositories for osbuild-composer (atodorov)
  - tests: Remove systemctl for osbuild-composer (atodorov)
  - tests: Start osbuild-composer.socket (bcl)
  - test: Fix vm.install for non-LVM cloud images (martin)


author: Honggang Li <honli@redhat.com> - 2.3.4-1
changelog:
  - Update to upstream stable point release v2.3.4
  - Build against hwloc-2.2.0
  - Resolves: rhbz#1850084


author: Jacob Kozol <jkozol@redhat.com> - 27-1
changelog:
  - Sync with upstream release 27
  - Add additional form validation for the Create Image Wizard
  - Improve page size dropdown styling
  - Improve error state messages
  - Update pagination component for pf4
  - Add wildcards and support for multiple values to input filter
  - Update translations


author: Jacob Kozol <jkozol@redhat.com> - 28-1
changelog:
  - Use sentence case rather than title case
  - Add and update tests
  - Update translations from weblate
  - Update minor NPM dependencies


author: Jacob Kozol <jkozol@redhat.com> - 29-1
changelog:
  - Add ability to upload to VMWare
  - Add support for additional ostree parameters
  - Update NPM dependencies
  - Add and update translations
  - Minor test fixes


author: Jacob Kozol <jkozol@redhat.com> - 29.1-1
changelog:
  - Add RHEL for Edge Container and Installer image types
  - Update translations
  - Add tests for new image types
  - Improve test reliability


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/22fc573)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/135d63d)
  - Related: #1954702


author: Pranita Ghole<pghole@redhat.com> - 0.11.3-2
changelog:
  - Resolves: rhbz#1882771 - redhat-support-tool: UnboundLocalError: local variable 'timer' referenced before assignment
  - Resolves: rhbz#1882772 - [RFE] Add functionality to generate and send sosreport after selecting the case.
  - Resolves: rhbz#1882773 - [RFE] Generate and upload sosreport to case from cli


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-1
changelog:
  - Upstream release 0.34.7
  - Force LC_ALL=C.UTF-8 in oddjobd systemd service environment
  - Resolves: rhbz#1907481 - oddjob locale issue
  - Resolves: rhbz#1907541 - rebase oddjob to 0.34.7


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-4.2
changelog:
  - Resolves: #1944260 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Alejandro Sáez <asm@redhat.com> - 2-17
changelog:
  - Add and update the go-compiler functionality (gobuild macro)
  - Deprecate ix86
  - Update Source0
  - Resolves: rhbz#1905383


author: Brian C. Lane <bcl@redhat.com> - 8.4-2
changelog:
  - Switch to using upstream mk-s390image for s390 cdboot.img creation (bcl)
    Resolves: rhbz#1892404
  - Remove mdmonitor service from boot.iso (bcl)
    Resolves: rhbz#1888728


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Michael Catanzaro <mcatanzaro@redhat.com> - 0.9.11-16
changelog:
  - Fix CVE-2019-20839
    Resolves: #1851032
  - Fix CVE-2018-21247
    Resolves: #1852516
  - Fix CVE-2020-14405
    Resolves: #1860527
  - Fix CVE-2020-14397
    Resolves: #1861152


author: Wim Taymans <wtaymans@redhat.com> - 0.3.13-12
changelog:
  - Add explicit Requires for the -libs package.
  - Do NVR bump to move twolame-devel from buildroot to CRB
  - Resolves: rhbz#1843275


author: Michal Ruprich <mruprich@redhat.com> - 0.16.105-4
changelog:
  - Resolves: #1780311 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
  - Resolves: #1780313 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-2
changelog:
  - switch to master branch to fix /dev/null ownership issues
    (https://github.com/containers/conmon/commit/372fa19211cfeabdb2bad52a4ab8a4d1b0b0063c)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.26-3
changelog:
  - fix "Permission on /dev/null are changing from 666 to 777 after running podman as root [rhel-8.4.0.z]"
  - Resolves: #1961682


author: Matej Tyc <matyc@redhat.com> - 1.1.1-6
changelog:
  - Improved handling of conflicts between packages removed vs software wanted to be installed - rhbz#1892310


author: Jindrich Novy <jnovy@redhat.com> - 2:2.160.2-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.160.2
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.161.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.161.1
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.0
  - Related: #1954702


author: Thomas Woerner <twoerner@redhat.com> - 0.3.0-1
changelog:
  - Update to version 0.3.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.0
    With tests sub package
    Resolves: RHBZ#1891826
  - Support for firewalld zone in ipaserver and ipareplica roles 
    Resolves: RHBZ#1894488
  - ipagroup: Add support for the IPA CLI option `posix`
    Resolves: RHBZ#1894493
  - New ipabackup role for backup and restore
    Resolves: RHBZ#1894494
  - New management module ipadelegation
    Resolves: RHBZ#1894496
  - New management module ipalocation
    Resolves: RHBZ#1894497
  - New management module ipaprivilege
    Resolves: RHBZ#1894498
  - New management module ipapermission
    Resolves: RHBZ#1894499
  - New management module iparole
    Resolves: RHBZ#1894500
  - New management module ipaselfservice
    Resolves: RHBZ#1894501
  - New management module ipatrust
    Resolves: RHBZ#1894502
  - Fixed log of vault data return when retrieving to a file
    Resolves: RHBZ#1875378
  - ipadnszone: Fix modification o SOA serial with other attributes
    Resolves: RHBZ#1876896
  - Fix symmetric vault password change when using password_files
    Resolves: RHBZ#1879004
  - ipadnsrecord: fix record modification behavior
    Resolves: RHBZ#1880409
    Resolves: RHBZ#1881452
  - ipadnsrecord: fix record update when multiple records exist
    Resolves: RHBZ#1881436


author: Thomas Woerner <twoerner@redhat.com> - 0.3.1-1
changelog:
  - Update to version 0.3.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.1
    Related: RHBZ#1891826
  - ipabackup: Fix undefined vars for conditions in shell tasks without else
    Related: RHBZ#1894494


author: Thomas Woerner <twoerner@redhat.com> - 0.3.2-1
changelog:
  - Update to version 0.3.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.2
    Related: RHBZ#1891826
  - Not able to add additional privileges with existing privilege in role module
    Resolves: RHBZ#1893678
  - Required error message while adding non-existing members in role handling
    Resolves: RHBZ#1893679
  - Not able to add new members with existing members role handling
    Resolves: RHBZ#1893684
  - service members are removed while updating other members in role handling
    Resolves: RHBZ#1893685
  - after changing the vault type from standard to symmetric, Salt is missing
    Resolves: RHBZ#1880367
  - After changing the vault type from symmetric to asymmetric, Salt is present
    in the asymmetric vault
    Resolves: RHBZ#1880377
  - After changing the vault type from asymmetric to the standard vault, the
    Public key is present in the standard vault
    Resolves: RHBZ#1880378
  - Not able to replace public-key-file to the public-key in asymmetric vault
    type
    Resolves: RHBZ#1880862
  - ipauser module does not seem to support --check flag to ansible-playbook
    Resolves: RHBZ#1893675
  - Not able to add additional attributes with existing attributes in permission
    handling
    Resolves: RHBZ#1893687
  - Privilege variable is removed from permission handling
    Resolves: RHBZ#1893688


author: Jeremy Crafts <jcrafts@redhat.com> - 0.1.4-1
changelog:
  - Enhancements to playbook validation
  - Fixes for regular execution status updates
  - Configuration fixes


author: Jeremy Crafts <jcrafts@redhat.com> - 0.1.5-1
changelog:
  - Changes to playbook validation logic
  - Enhancements for logging to rhcd
  - Fix for subprocess environment


author: Vladis Dronov <vdronov@redhat.com> - 15.9-8
changelog:
  - Fix a double-free in changestring() (bz1886165)
  - Update Requires to include coreutils and ed
  - Adjust cscope-coverity-fixes.patch removing the fclose(script) chunk
  - Adjust BuildRequires and remove trailing spaces
  - Remove older source version from .gitignore
  - Rename cscope-invindex-sizing.patch as it is for the older upstream version


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.49.2-2.el8
changelog:
  - wla-Fixed-faulty-check-for-run_command-2093.patch [bz#1903074]
  - Resolves: bz#1903074
    ([Azure][WALA] Miss report "hostnamectl set-hostname --static] failed, attempting fallback")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.49.2-3.el8
changelog:
  - wla-Provide-udev-rules-as-a-separate-subpackage.patch [bz#1913074]
  - Resolves: bz#1913074
    ([Azure][RFE] please provide the WALinuxAgent-udev subpackage)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.4-1
changelog:
  - update to 7.3.4 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies
  - optionally bundle node.js dependencies and build and test frontend as part of the specfile
  - merge all datasources into main grafana package
  - change default provisioning path to /etc/grafana/provisioning
  - resolve https://bugzilla.redhat.com/show_bug.cgi?id=1843170


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.6-1
changelog:
  - update to 7.3.6 tagged upstream community sources, see CHANGELOG
  - remove dependency on SAML (not supported in the open source version of Grafana)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.6-2
changelog:
  - change working dir to $GRAFANA_HOME in grafana-cli wrapper (fixes Red Hat BZ #1916083)
  - add pcp-redis-datasource to allow_loading_unsigned_plugins config option


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
changelog:
  - CVE 2021-3480:  idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
  - Resolves: rhbz#1944713


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.53-3
changelog:
  - Enforce pam_wheel for "su" in the OSPP profile (RHBZ#1884062)
  - Fix case insensitive checking in rsyslog_remote_tls (RHBZ#1899032)
  - Exclude kernel_trust_cpu_rng related rules on s390x (RHBZ#1899041)
  - Create a SSH_USE_STRONG_RNG rule for SSH client and select it in OSPP profile (RHBZ#1884067)
  - Disable usbguard rules on s390x architecture (RHBZ#1899059)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.53-4
changelog:
  - Fix description of rule installed_OS_is_vendor_supported (RHBZ#1914193)
  - Fix RHEL6 CPE dictionary (RHBZ#1899059)
  - Fix SRG mapping references for ssh_client_rekey_limit and use_pam_wheel_for_su (RHBZ#1914853)


author: Watson Sato <wsato@redhat.com> - 0.1.54-1
changelog:
  - Update to the latest upstream release (RHBZ#1889344)
  - Add Minimal, Intermediary and Enhanced ANSSI Profiles (RHBZ#1778188)


author: Eduardo Otubo <otubo@redhat.com> - 20.3-1.el8
changelog:
  - Rebase to cloud-init 20.3 [bz#1885185]
  - Resolves: bz#1885185
    ([RHEL-8.4.0] cloud-init rebase to 20.3)


author: Clark Williams <williams@redhat.com> - 1.1-1
changelog:
  - Fix an option in README.md; consistency in user facing docs.
  - Makefile: add 'static' target to link stalld statically
  - gitignore: ignore object files and the stalld executable
  - use FIFO for boosting (v3)
  - stalld.c: fix sched_debug parsing and modify waiting task parsing
  - redhat:  update release for features and bugfix
  - stalld: Do not die if sched_debug returns an invalid value
  - src/stalld: Do not die if the comm is too large
  - src/stalld: Do not die if cannot write a message to the log
  - src/stalld: Do not die if the main runs while a thread is monitoring the CPU
  - implement RT throttling management and refactor source files
  - more refactoring
  - src/stalld: Reuse already read nr_running nr_rt_running
  - src/stalld: Gracefully handle CPUs not found on sched_debug
  - src/stalld: Use dynamically allocated memory to read sched_debug
  - src/utils: Die with a divizion by zero if verbose
  - src/stalld: Add config_buffer_size variable
  - src/stalld: Increase the sched_debug read buffer if it gets too small
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning


author: Clark Williams <williams@redhat.com> - 1.2-1
changelog:
  - utils.c: added info() functions
  - detect and correctly parse old-style /proc/sched_debug
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning
  - ensure we only count task lines in old-format sched_debug info
  - Add comments, clean up trailing whitespace
  - src/utils: Fix runtime parameters check
  - stalld: Do not take actions if log_only is set
  - remove warning from parse_old_task_format


author: Clark Williams <williams@redhat.com> - 1.3-1
changelog:
  - Readme: Add information about repositories
  - Add version management and version option
  - create doc and scripts directory and add info on releases


author: Clark Williams <williams@redhat.com> - 1.4-1
changelog:
  - stalld: Set rt_runtime to -1 before trying the SCHED_DEADLINE
  - Fix incorrect recursion of specfile version field


author: Clark Williams <williams@redhat.com> - 1.7-1
changelog:
  - rework detect_task_format and buffer_size logic
  - make CFLAGS for local compile match rpmbuild CFLAGS


author: Clark Williams <williams@redhat.com> - 1.8-1
changelog:
  - Fix Readiness Protocol Mismatch with systemd
  - test01:  update to use buildin atomic operations
  - test01: add throttling check


author: Clark Williams <williams@redhat.com> - 1.9-1
changelog:
  - Set starvation threshold default to 30 seconds
  - rework read buffer allocation to properly find page size
  - Add the -g/--granularity option
  - Change the default granularity to five seconds
  - Implement idle detection
  - Implement the single-threaded mode
  - Add HRTICK_DL support


author: Uri Lublin <uril@redhat.com> - 9.0-5
changelog:
  - More specific key accelerator description for cursor release
    Resolves: rhbz#1548371
  - Report detailed error when file transfer fails
    Resolves: rhbz#1753563
  - Update copyright year in "about ui"
    Resolves: rhbz#1848267
  - Show an error dialog upon vnc-error
    Resolves: rhbz#1448151
  - Fix warning by Coverity
    Resolves: rhbz#1876719


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.0.0-1
changelog:
  - update to 3.0.0 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies and (optionally) node.js dependencies


author: Karel Zak <kzak@redhat.com> 2.32.1-25
changelog:
  - fix #1884194 - RHEL-8: chrt command does not support the -R option
  - fix #1855759 - mount.8: clarify (no)suid behavior on file capabilities
  - fix #1861670 - lsblk can not show serial information for virtio disk
  - fix #1883783 - lscpu: avoid segfault on PowerPC systems with valid hardware configurations
  - fix #1900498 - libfdisk/libmount: backport two patches for upstream systemd
  - fix #1883056 - lscpu support for Fujitsu A64FX
  - fix #1882740 - lscpu: use SMBIOS Type 4 strings for CPU vendor and model on ARM


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6
  - Bump testlib to 229
  - Add binary recording test
  - Update UI to adopt PatternFly 4
  - Update dependencies
  - Use --all journalctl option
  - Fixed timezone issue by searching in client time
  - Bump cockpit test version from 199 to 219
  - Improve test coverage with more tests
  - Simplify and cleanup existing tests


author: Patrik Novotný <panovotn@redhat.com> - 12.5-1
changelog:
  - Rebase to upstream release 12.5
    Resolves: rhbz#1898330
    Resolves: rhbz#1898224
    Resolves: rhbz#1898244


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-35.1.el8
changelog:
  - network: make it safe to call networkSetupPrivateChains() multiple times (rhbz#1958301)
  - network: force re-creation of iptables private chains on firewalld restart (rhbz#1958301)


author: Jindrich Novy <jnovy@redhat.com> - 1.21.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/42dbc97)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/f517d85)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/56ff12f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/71b8003)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/98960f2)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/4d20222)
  - Related: #1934415


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.8-3
changelog:
  - Security fix for CVE-2021-29921: Leading zeros in IPv4 addresses are no longer tolerated
  Resolves: rhbz#1957458


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/c1d6200)
  - fixes CVE-2021-3602
  - Related: #1977943


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.15.4-1
changelog:
  - Security rebase to 14.15.4
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1913001, RHBZ#1912953
  - Resolves: RHBZ#1912636, RHBZ#1898602, RHBZ#1898768, RHBZ#1893987, RHBZ#1893184


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.3-1
changelog:
  - Resolves: RHBZ#1980032, RHBZ#1978203
  - Resolves RHBZ#1842826
  - Resolves CVE-2021-22918(libuv), use system cipher list


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+6
  - Update release notes to 11.0.12.0+6
  - Switch to EA mode for 11.0.12 pre-release builds.
  - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
  - Re-order source files to sync with Fedora.
  - Remove explicit compiler flags which should be handled by the upstream build
    (-std=gnu++98, -fno-delete-null-pointer-checks, -fno-lifetime-dse)
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Correct bug ID JDK-8264846 to intended ID of JDK-8264848
  - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0
changelog:
  - Update to jdk-11.0.12.0+7
  - Update release notes to 11.0.12.0+7
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-1
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Reduce disk footprint by removing build artifacts by default.
  - Related: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.13.0+7
  - Update release notes to 11.0.13.0+7
  - Update tarball generation script to use git following OpenJDK 11u's move to github
  - Switch to EA mode for 11.0.13 pre-release builds.
  - Remove non-Free test from source tarball.
  - Related: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1
changelog:
  - Update to jdk-11.0.12.0+8
  - Update release notes to 11.0.12.0+8
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2012333


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-39
changelog:
  - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
  Resolves: rhbz#1995234


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.19.1-1
changelog:
  - Resolves: RHBZ#1861602, #1874302, #1898598, #1898765
  - c-ares, ajv and y18n CVEs and yarn installability issues


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.20.1-1
changelog:
  - Security rebase for January security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1913000, RHBZ#1912952
  - Resolves: RHBZ#1912635, RHBZ#1893984


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.21.0-1
changelog:
  - Resolves: RHBZ#1932316, RHBZ#1932365
  - remove --debug-nghttp2 option
  - remove ini patch
  - Backport patch to use getauxval


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-1
changelog:
  - Resolves: RHBZ#1980031, RHBZ#1978201
  - Resolves #1952915
  - Resolves CVE-2021-22918(libuv), use system cipher list


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.57-1
changelog:
  - Update to the latest upstream release (RHBZ#1997634)
  - Update RHEL8 STIG profile to V1R3 (RHBZ#1997634)
  - Enable RHEL8 STIG with GUI profile (RHBZ#2005431)
  - Enable the ISM profile (RHBZ#2005891)
  - Reestructure RHEL7 and RHEL8 CIS profiles according to the policy (RHBZ#2005427)
  - Enable ANSSI High Profile (RHBZ#2005429)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.57-3
changelog:
  - Reintroduce docker_selinux_enabled rule to RHEL8.
  - Set package_rear_installed not applicable on s390x arch. (RHBZ#2013553)


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1952627
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1954968
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: rhbz#1954969


author: David Benoit <dbenoit@redhat.com> - 1.15.15-1
changelog:
  - Rebase to Go 1.15.15
  - Resolves: rhbz#1994087
  - Add reject leading zeros patch
  - Resolves: rhbz#1994010


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1952626
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1955010


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.3-3
changelog:
  - Resolves: RHBZ#1991584, RHBZ#1991578
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Bump for missing mentions of CVEs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves RHBZ#1847529 (make FIPS always available)
  - Resolves: RHBZ#1988599, RHBZ#1994000, RHBZ#1993998, RHBZ#1993095
  - Resolves: RHBZ#1994028, RHBZ#1994402, RHBZ#1994406, RHBZ#1994398
  - Resolves: RHBZ#1993924 (make FIPS always available)


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/4f91b37)
  - Related: #2011409


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.6-2.1
changelog:
  - Resolves: #1982861 - CVE-2021-36740 varnish:6/varnish: HTTP/2 request
    smuggling attack via a large Content-Length header for a POST request


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.2
    (https://github.com/containers/podman/commit/6f0bf16)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.5
changelog:
  - install CNI manually as install.cni target is missing from the Makefile
  - simplify unit file packaging
  - put 87-podman-bridge.conflist to main podman package not podman-remote
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.2
    (https://github.com/containers/podman/commit/275b0d8)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.2
    (https://github.com/containers/podman/commit/60d12f7)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.2
    (https://github.com/containers/podman/commit/4136f8b)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.2.3-rhel
    (https://github.com/containers/podman/commit/78f0bd7)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.2.3-rhel
    (https://github.com/containers/podman/commit/47dc7d7)
  - Related: #1954702


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-4
changelog:
  - Better fix for the sdb timeout. The issue wasn't a race, it was
    the sqlite timeout waiting to begin a transaction under heavy
    thread usage.


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-14
changelog:
  - Bump version to 1.4.3.16-14
  - Resolves: Bug 1968588 - ACIs are being evaluated against the Replication Manager account in a replication context
  - Resolves: Bug 1960720 - sync_repl NULL pointer dereference in sync_create_state_control()


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-15
changelog:
  - Bump version to 1.4.3.16-15
  - Resolves: Bug 1970791 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-16
changelog:
  - Bump version to 1.4.3.16-16
  - Resolves: Bug 1972738 - Changelog cache can upload updates from a wrong starting point (CSN)
  - Resolves: Bug 1972721 - Large updates can reset the CLcache to the beginning of the changelog


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-36
changelog:
  - network: make it safe to call networkSetupPrivateChains() multiple times (rhbz#1942805)
  - network: force re-creation of iptables private chains on firewalld restart (rhbz#1942805)
  - hostdev: Update mdev pointer reference after checking device type (rhbz#1940449)
  - hostdev: mdev: Lookup mdevs by sysfs path rather than mdev struct (rhbz#1940449)
  - qemu_firmware: don't error out for unknown firmware features (rhbz#1961562)
  - docs: improve description of secure attribute for loader element (rhbz#1929357)
  - conf: introduce virDomainDefParseBootInitOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootKernelOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootFirmwareOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootLoaderOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootAcpiOptions (rhbz#1929357)
  - conf: use switch in virDomainDefParseBootOptions (rhbz#1929357)
  - conf: introduce support for firmware auto-selection feature filtering (rhbz#1929357)
  - qemu: implement support for firmware auto-selection feature filtering (rhbz#1929357)
  - domain_conf: Don't leak def->os.firmwareFeatures (rhbz#1929357)
  - conf: remove duplicated firmware type attribute (rhbz#1929357)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-37
changelog:
  - security: fix SELinux label generation logic (CVE-2021-3631)
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath (CVE-2021-3667)


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1951999
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1952000


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b07 (EA)
  - Update release notes for 8u302-b07.
  - Switch to EA mode.
  - Cleanup architecture handling
  - Fixed not-including fastdebug build in case of --without fastdebug
  - Re-order source files to sync with Fedora.
  - Introduced nm based check to verify alt-java on x86_64 is patched, and no other alt-java or java is patched
  - Patch600, rh1750419-redhat_alt_java.patch, amended to die, if it is used wrongly
  - Introduced ssbd_arches with currently only valid arch of x86_64 to separate real alt-java architectures
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Fix name of javadoc debug packages in Obsoletes declarations and add version where it was removed.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b08 (EA)
  - Update release notes for 8u302-b08.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
  - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
  - Reduce disk footprint by removing build artifacts by default.
  - Switch to EA mode.
  - Remove non-Free test and demo files from source tarball.
  - Related: rhbz#2011826


author: Martin Balao <mbalao@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
  - Resolves: rhbz#2014201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Port FIPS system detection support to OpenJDK 8u
  - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
  - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
  - Resolves: rhbz#2014201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.4.ea
changelog:
  - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
  - Resolves: rhbz#2014193


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b07 (EA)
  - Update release notes for 8u312-b07.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2011826


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-137
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: rhbz#1986768
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: rhbz#1986812
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: rhbz#1986813
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327


author: Josh Stone <jistone@redhat.com> - 1.51.0-1
changelog:
  - Update to 1.51.0. Update to 1.51.0. Includes security fixes for
    CVE-2021-28875 and CVE-2021-28877.


author: Josh Stone <jistone@redhat.com> - 1.52.1-1
changelog:
  - Update to 1.52.1. Includes security fixes for CVE-2020-36323,
    CVE-2021-28876, CVE-2021-28878, CVE-2021-28879, and CVE-2021-31162.


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-4.el8_4.1
changelog:
  - edk2-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch [bz#1952953]
  - Resolves: bz#1952953
    (edk2: possible heap corruption with LzmaUefiDecompressGetInfo [rhel-8] [rhel-8.4.0.z])


author: Jindrich Novy <jnovy@redhat.com> - 3.3.1-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3
    (https://github.com/containers/podman/commit/8809aed)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3
    (https://github.com/containers/podman/commit/d09259a)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3
    (https://github.com/containers/podman/commit/7752c73)
  - Related: #1934415


author: Lokesh Mandvekar <lsm5@redhat.com> - 3.3.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3.1-rhel
    (https://github.com/containers/podman/commit/405507a)
  - Related: #1934415


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 3.3.1-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3.1-rhel
    (https://github.com/containers/podman/commit/405507a)
  - Related: #1934415
  - correct previous changelog entry


author: Jindrich Novy <jnovy@redhat.com> - 3.3.1-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3.1-rhel
    (https://github.com/containers/podman/commit/8305248)
  - Resolves: #2000943


author: Jindrich Novy <jnovy@redhat.com> - 3.3.1-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3.1-rhel
    (https://github.com/containers/podman/commit/910b09c)
  - Related: #2000943


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-3
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990355


author: Martin Sehnoutka <msehnout@redhat.com> - 27.3-1
changelog:
  - Upstream release 27.3
  - New algorithm for getting RHSM secrets from the host system
    which supports multiple entitlements at the same time.


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.1
  - Related: #1954702


author: Thomas Woerner <twoerner@redhat.com> - 4.9.5-1
changelog:
  - Upstream release FreeIPA 4.9.5
    Related: RHBZ#1945038
  - IPA to allow setting a new range type
    Resolves: RHBZ#1688267
  - ipa-server-install displays debug output when --debug output is not
    specified.
    Resolves: RHBZ#1943151
  - ACME fails to generate a cert on migrated RHEL8.4 server
    Resolves: RHBZ#1934991
  - Switch ipa-client to use the JSON API
    Resolves: RHBZ#1937856
  - IDM - Allow specifying permanent logging settings for BIND
    Resolves: RHBZ#1951511
  - Cache LDAP data within a request
    Resolves: RHBZ#1953656
  - ipa-server-upgrade is failing while upgrading rhel8.3 to rhel8.4
    Resolves: RHBZ#1957768


author: Thomas Woerner <twoerner@redhat.com> - 4.9.6-1
changelog:
  - Upstream release FreeIPA 4.9.6
    Related: RHBZ#1945038
  - Revise PKINIT upgrade code
    Resolves: RHBZ#1886837
  - ipa-cert-fix man page: add note about certmonger renewal
    Resolves: RHBZ#1780317
  - Certificate Serial Number issue
    Resolves: RHBZ#1919384


author: Thomas Woerner <twoerner@redhat.com> - 4.9.6-2
changelog:
  - IPA server in debug mode fails to run because time.perf_counter_ns is
    Python 3.7+
    Resolves: RHBZ#1974822
  - Add checks to prevent assigning authentication indicators to internal IPA
    services
    Resolves: RHBZ#1979625
  - Unable to set ipaUserAuthType with stageuser-add
    Resolves: RHBZ#1979605


author: Thomas Woerner <twoerner@redhat.com> - 4.9.6-3
changelog:
  - man page: update ipa-server-upgrade.1
    Resolves: RHBZ#1973273
  - Fall back to krbprincipalname when validating host auth indicators
    Resolves: RHBZ#1979625
  - Add dependency for sssd-winbind-idmap to server-trust-ad
    Resolves: RHBZ#1982211


author: Thomas Woerner <twoerner@redhat.com> - 4.9.6-5
changelog:
  - Catch and log errors when adding CA profiles
    Resolves: RHBZ#1999142
  - selinux policy: allow custodia to access /proc/cpuinfo
    Resolves: RHBZ#1998129
  - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
    Resolves: RHBZ#2000263
  - ipa migrate-ds command fails to warn when compat plugin is enabled
    Resolves: RHBZ#1999992
  - Backport latest test fixes in python3-ipatests
    Resolves: RHBZ#2000553


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-17
changelog:
  - Bump version to 1.4.3.16-17
  - Resolve: Bug 1983095 - Internal unindexed searches in syncrepl
  - Resolve: Bug 1980063 - IPA installation fails on s390x with 389-ds-base-1.4.3.8-4.module+el8.3.0+7193+dfd1e8ad.s390x


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-18
changelog:
  - Bump version to 1.4.3.16-18
  - Resolve: Bug 1983121 - CRYPT password hash with asterisk allows any bind attempt to succeed


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-19
changelog:
  - Bump version to 1.4.3.16-19
  - Resolve: Bug 1984091 - persistent search returns entries even when an error is returned by content-sync-plugin


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-39.1
changelog:
  - Resolves: #2007234 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path
  - Resolves: #2007646 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
    mod_session


author: Remi Collet <rcollet@redhat.com> - 5.0.3-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Link Dupont <link@redhat.com> - 0.2.0-1
changelog:
  - New upstream release
  - Mark config file as a noreplace config file
  - Add two patches that fix some UX issues


author: Jindrich Novy <jnovy@redhat.com> - 2:2.167.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.167.0
  - Related: #1999245


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/eebd611)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/2bed76e)
  - fixes CVE-2021-3602
  - Related: #1977943


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-6
changelog:
  - fix rhel-shortnames.conf generation (avoid duplicates and records
    with invalid URL)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/a05ddb8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/6c0e35a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-10
changelog:
  - update shortnames from Pyxis
  - sync with the vendored versions in 3.0-8.5.0
  - bump release to assure upgrade path from 3.0-8.4.0
  - Related: #1934415


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.22-1
changelog:
  - Update to MySQL 8.0.22
  - mysql-certs-expired.patch patched by upstream
  - New zlib_decompress binary file in test package


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Ray Strode <rstrode@redhat.com> - 3.28.1-10.1
changelog:
  - Exclude kiosk-session from xsession subpackage
  - Disable VT switching when kiosk-session is installed
    Related: #1959505


author: David King <dking@redhat.com> - 2.9.7-9.1
changelog:
  - Fix CVE-2021-3516 (#1956975)
  - Fix CVE-2021-3517 (#1957000)
  - Fix CVE-2021-3518 (#1957027)
  - Fix CVE-2021-3537 (#1957283)


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.2
    (https://github.com/containers/podman/commit/ac740c6)
  - Related: #1954702


author: Lumír Balhar <lbalhar@redhat.com> - 20.2.4-4
changelog:
  - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
  Resolves: rhbz#1962856


author: Jindrich Novy <jnovy@redhat.com> - 1.21.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/7f9540d)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.21.4-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/d1e9240)
  - Related: #1954702


author: Wen Liang <wenliang@redhat.com> - 1:1.30.0-8
changelog:
  - core: fix finding active connection for controller (rh #1965337)
  - bond: support 'tlb_dynamic_lb' in 'balance-alb' mode (rh #1965948)
  - manager: delete default connection when veth removed (rh #1965336)


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.6-1
changelog:
  - Update to 3.9.6
  - Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module
  Resolves: rhbz#1957458


author: Christopher Snyder <csnyder@redhat.com> 1.28.13-4
changelog:
  - 1993897 - [RFE] subscription-manager should return a module stream's
    "activity" in the modular profile (wpoteat@redhat.com)


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jarek Prokop <jprokop@redhat.com> - 3.0.1-138
changelog:
  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-139
changelog:
  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010403


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-48.el8_4
changelog:
  - kvm-net-remove-an-assert-call-in-eth_get_gso_type.patch [bz#1939494]
  - kvm-libqos-usb-hcd-ehci-use-32-bit-write-for-config-regi.patch [bz#1944621]
  - kvm-libqos-pci-pc-use-32-bit-write-for-EJ-register.patch [bz#1944621]
  - kvm-memory-Revert-memory-accept-mismatching-sizes-in-mem.patch [bz#1944621]
  - kvm-acpi-accept-byte-and-word-access-to-core-ACPI-regist.patch [bz#1944621]
  - kvm-xhci-fix-valid.max_access_size-to-access-address-reg.patch [bz#1944621]
  - kvm-softmmu-memory-Log-invalid-memory-accesses.patch [bz#1944621]
  - kvm-hw-intc-arm_gic-Fix-interrupt-ID-in-GICD_SGIR-regist.patch [bz#1952986]
  - Resolves: bz#1939494
    (CVE-2020-27617 virt:rhel/qemu-kvm: QEMU: net: an assert failure via eth_get_gso_type [rhel-8.4.0.z])
  - Resolves: bz#1944621
    (CVE-2020-13754 virt:rhel/qemu-kvm: QEMU: msix: OOB access during mmio operations may lead to DoS [rhel-8.4.0.z])
  - Resolves: bz#1952986
    (CVE-2021-20221 virt:rhel/qemu-kvm: qemu: out-of-bound heap buffer access via an interrupt ID field [rhel-8.4.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-48.el8_4.2
changelog:
  - kvm-pc-bios-s390-ccw-fix-off-by-one-error.patch [bz#1975679]
  - kvm-pc-bios-s390-ccw-break-loop-if-a-null-block-number-i.patch [bz#1975679]
  - kvm-pc-bios-s390-ccw-don-t-try-to-read-the-next-block-if.patch [bz#1975679]
  - Resolves: bz#1975679
    (RHEL8.4 Nightly[0322] - KVM guest fails to find zipl boot menu index (qemu-kvm) [rhel-8.4.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-48.el8_4.3
changelog:
  - kvm-net-introduce-qemu_receive_packet.patch [bz#1932917]
  - kvm-e1000-switch-to-use-qemu_receive_packet-for-loopback.patch [bz#1932917]
  - kvm-dp8393x-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
  - kvm-sungem-switch-to-use-qemu_receive_packet-for-loopbac.patch [bz#1932917]
  - kvm-tx_pkt-switch-to-use-qemu_receive_packet_iov-for-loo.patch [bz#1932917]
  - kvm-rtl8139-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
  - kvm-pcnet-switch-to-use-qemu_receive_packet-for-loopback.patch [bz#1932917]
  - kvm-cadence_gem-switch-to-use-qemu_receive_packet-for-lo.patch [bz#1932917]
  - kvm-lan9118-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
  - Resolves: bz#1932917
    (CVE-2021-3416 virt:rhel/qemu-kvm: QEMU: net: infinite loop in loopback mode may lead to stack overflow [rhel-8.4.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-50.el8
changelog:
  - kvm-hw-intc-arm_gic-Fix-interrupt-ID-in-GICD_SGIR-regist.patch [bz#1925430]
  - kvm-libqos-usb-hcd-ehci-use-32-bit-write-for-config-regi.patch [bz#1842478]
  - kvm-libqos-pci-pc-use-32-bit-write-for-EJ-register.patch [bz#1842478]
  - kvm-memory-Revert-memory-accept-mismatching-sizes-in-mem.patch [bz#1842478]
  - kvm-acpi-accept-byte-and-word-access-to-core-ACPI-regist.patch [bz#1842478]
  - kvm-xhci-fix-valid.max_access_size-to-access-address-reg.patch [bz#1842478]
  - kvm-softmmu-memory-Log-invalid-memory-accesses.patch [bz#1842478]
  - Resolves: bz#1925430
    (CVE-2021-20221 virt:rhel/qemu-kvm: qemu: out-of-bound heap buffer access via an interrupt ID field [rhel-8.5.0])
  - Resolves: bz#1842478
    (CVE-2020-13754 virt:rhel/qemu-kvm: QEMU: msix: OOB access during mmio operations may lead to DoS [rhel-8.5.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-51.el8
changelog:
  - kvm-linux-headers-Add-VFIO_CCW_REQ_IRQ_INDEX.patch [bz#1940450]
  - kvm-vfio-ccw-Connect-the-device-request-notifier.patch [bz#1940450]
  - kvm-pc-bios-s390-ccw-fix-off-by-one-error.patch [bz#1942880]
  - kvm-pc-bios-s390-ccw-break-loop-if-a-null-block-number-i.patch [bz#1942880]
  - kvm-pc-bios-s390-ccw-don-t-try-to-read-the-next-block-if.patch [bz#1942880]
  - Resolves: bz#1940450
    (RHEL8.5 - Mediated Device already in use by same domain we are booting (vfio-ccw/Multipath Testing) (kvm) - qemu-kvm part (also has kernel and libvirt parts))
  - Resolves: bz#1942880
    (RHEL8.4 Nightly[0322] - KVM guest fails to find zipl boot menu index (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-52.el8
changelog:
  - kvm-file-posix-Mitigate-file-fragmentation-with-extent-s.patch [bz#1877163]
  - kvm-block-file-posix-Fix-problem-with-fallocate-PUNCH_HO.patch [bz#1944861]
  - kvm-spapr-Remove-stale-comment-about-power-saving-LPCR-b.patch [bz#1969768]
  - kvm-spapr-Set-LPCR-to-current-AIL-mode-when-starting-a-n.patch [bz#1969768]
  - Resolves: bz#1877163
    ([FJ 8.3 Bug] The progress bar of the "virt-clone --nonsparse" command shows the progress rate exceeding 100%.)
  - Resolves: bz#1944861
    (Qemu-img convert fails when source image is on gpfs)
  - Resolves: bz#1969768
    ([ppc64le] Hotplug vcpu device hit call trace:[qemu output] KVM: unknown exit, hardware reason 7fff9ce87ed8)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-53.el8
changelog:
  - kvm-virtiofsd-Whitelist-fchmod.patch [bz#1967914]
  - kvm-spapr-Fix-EEH-capability-issue-on-KVM-guest-for-PCI-.patch [bz#1957866]
  - kvm-Compress-lines-for-immediate-return.patch [bz#1970912]
  - kvm-file-posix-Handle-EINVAL-fallocate-return-value.patch [bz#1970912]
  - Resolves: bz#1967914
    ([virtio-fs] virtiofsd quit when coping file to a folder in virtio-fs mounted volume(windows guest))
  - Resolves: bz#1957866
    (RHEL8.4 - EEH capability disabled on KVM guest and recovery of PCI passthru device fails(CX5 / mlx5_core) (qemu-kvm))
  - Resolves: bz#1970912
    (Deployment fails with "Invalid or missing agent token received")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-54.el8
changelog:
  - kvm-redhat-Fix-unversioned-Obsoletes-warning.patch [bz#1967329]
  - Resolves: bz#1967329
    (Make qemu-kvm use versioned obsoletes for qemu-kvm-ma and qemu-kvm-rhev)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-55.el8
changelog:
  - kvm-net-introduce-qemu_receive_packet.patch [bz#1932917]
  - kvm-e1000-switch-to-use-qemu_receive_packet-for-loopback.patch [bz#1932917]
  - kvm-dp8393x-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
  - kvm-sungem-switch-to-use-qemu_receive_packet-for-loopbac.patch [bz#1932917]
  - kvm-tx_pkt-switch-to-use-qemu_receive_packet_iov-for-loo.patch [bz#1932917]
  - kvm-rtl8139-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
  - kvm-pcnet-switch-to-use-qemu_receive_packet-for-loopback.patch [bz#1932917]
  - kvm-cadence_gem-switch-to-use-qemu_receive_packet-for-lo.patch [bz#1932917]
  - kvm-lan9118-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
  - Resolves: bz#1932917
    (CVE-2021-3416 virt:rhel/qemu-kvm: QEMU: net: infinite loop in loopback mode may lead to stack overflow)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.2.0-56
changelog:
  - kvm-glib-compat-add-g_unix_get_passwd_entry_qemu.patch [bz#1967716]
  - kvm-qga-add-ssh-add-remove-authorized-keys.patch [bz#1967716]
  - kvm-qga-add-reset-argument-to-ssh-add-authorized-keys.patch [bz#1967716]
  - kvm-qga-add-ssh-get-authorized-keys.patch [bz#1967716]
  - kvm-Add-mtod_check.patch [bz#1970819 bz#1970835 bz#1970843 bz#1970853]
  - kvm-bootp-limit-vendor-specific-area-to-input-packet-mem.patch [bz#1970819 bz#1970835 bz#1970843 bz#1970853]
  - kvm-bootp-check-bootp_input-buffer-size.patch [bz#1970819]
  - kvm-upd6-check-udp6_input-buffer-size.patch [bz#1970835]
  - kvm-tftp-check-tftp_input-buffer-size.patch [bz#1970843]
  - kvm-tftp-introduce-a-header-structure.patch [bz#1970819 bz#1970835 bz#1970843 bz#1970853]
  - kvm-udp-check-upd_input-buffer-size.patch [bz#1970853]
  - kvm-Fix-DHCP-broken-in-libslirp-v4.6.0.patch [bz#1970819 bz#1970835 bz#1970843 bz#1970853]
  - kvm-net-check-if-the-file-descriptor-is-valid-before-usi.patch [bz#1982134]
  - kvm-net-detect-errors-from-probing-vnet-hdr-flag-for-TAP.patch [bz#1982134]
  - Resolves: bz#1967716
    (RFE: rebuild guest agent to include public ssh injection api support)
  - Resolves: bz#1970819
    (CVE-2021-3592 virt:rhel/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) [rhel-8])
  - Resolves: bz#1970835
    (CVE-2021-3593 virt:rhel/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) [rhel-8])
  - Resolves: bz#1970843
    (CVE-2021-3595 virt:rhel/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) [rhel-8])
  - Resolves: bz#1970853
    (CVE-2021-3594 virt:rhel/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) [rhel-8])
  - Resolves: bz#1982134
    (QEMU core dump while booting guest with a non-exist fd on tap)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.2.0-57
changelog:
  - kvm-aio-wait-delegate-polling-of-main-AioContext-if-BQL-.patch [bz#1969848]
  - kvm-async-use-explicit-memory-barriers.patch [bz#1969848]
  - Resolves: bz#1969848
    (qemu-img convert hangs on aarch64)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-58.el8
changelog:
  - kvm-virtiofsd-Disable-remote-posix-locks-by-default.patch [bz#1967496]
  - kvm-virtiofsd-Fix-the-help-message-of-posix-lock.patch [bz#1967496]
  - Resolves: bz#1967496
    ([virtio-fs] nfs/xfstest generic/089 generic/478 generic/632 failed)


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-59
changelog:
  - kvm-scsi-make-io_timeout-configurable.patch [bz#1994041]
  - Resolves: bz#1994041
    (qemu-kvm scsi: change default passthrough timeout to non-infinite)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.0.2-13
changelog:
  - Fix SR-IOV BCM57416 failure when creating VFs. RHBZ#1979515
  - Fix applying route rule changes over ovs interface. RHBZ#1979943


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-40
changelog:
  - Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
  - Resolves: #1937334 - SSLProtocol with based virtual hosts


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-41
changelog:
  - Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
  - Resolves: #1905613 - mod_ssl does not like valid certificate chain
  - Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
    usertrack
  - Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
  - Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
    dereference in parser
  - Resolves: #1934741 - Apache trademark update - new logo


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-3
changelog:
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Resolves: RHBZ#1991584, RHBZ#1991578
  - Add missing CVE trackers


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves RHBZ#1951621 (make FIPS always available)
  - Resolves: RHBZ#1988595, RHBZ#1993992, RHBZ#1993989, RHBZ#1993093
  - Resolves: RHBZ#1994025, RHBZ#1994403, RHBZ#1994407, RHBZ#1994399
  - Resolves: RHBZ#1993927 (make FIPS always available)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.16.0-1
changelog:
  - Resolves CVE-2021-22883 CVE-2021-22884
  - Resolves: RHBZ#1934566, RHBZ#1934599
  - Rebase, remove ini patch


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.1.0-1
changelog:
  - Resolves: RHBZ#1953991
  - Rebase to v16.x
  - Update version of gcc and gcc-c++ needed
  - Remove libs conditionals
  - Remove unused patches
  - Bundle nghttp3 and ngtcp2


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.4.2-1
changelog:
  - Resolves: RHBZ#1979847
  - Resolves CVE-2021-22918(libuv)
  - Use system cipher list(1842826, 1952915)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.7.0-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939,
  - CVE-2021-22940, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves: RHBZ#1988608, RHBZ#1993816, RHBZ#1993810
  - Resolves: RHBZ#1993097, RHBZ#1993948, RHBZ#1993941, RHBZ#1994963


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.7.0-2
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939,
  - CVE-2021-22940, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves: RHBZ#1988608, RHBZ#1993816, RHBZ#1993810
  - Resolves: RHBZ#1993097, RHBZ#1993948, RHBZ#1993941, RHBZ#1994963
  - fix python3 in gyp


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.8.0-1
changelog:
  - Resolves CVE-2021-32803, CVE-2021-32804, CVE-2021-37701, CVE-2021-37712
  - Resolves: RHBZ#1993948, RHBZ#1993941, RHBZ#2000151, RHBZ#2002176


author: Jindrich Novy <jnovy@redhat.com> - 2:2.167.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.167.0
  - Related: #1934415


author: Patsy Griffin <patsy@redhat.com> - 2021b-1
changelog:
  - Rebase to tzdata-2021b
    - Innclude patch for Mayen
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.3
changelog:
  - ci-get_interfaces-don-t-exclude-Open-vSwitch-bridge-bon.patch [bz#1957135]
  - ci-net-exclude-OVS-internal-interfaces-in-get_interface.patch [bz#1957135]
  - Resolves: bz#1957135
    (Intermittent failure to start cloud-init due to failure to detect macs [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.4
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [bz#1963981]
  - ci-cloud-init.spec.template-update-systemd_postun-param.patch [bz#1967600]
  - Resolves: bz#1963981
    ([cloud-init] From RHEL 82+ cloud-init no longer displays sshd keys fingerprints from instance launched from a backup image [rhel-8.4.0.z])
  - Resolves: bz#1967600
    (cloud-init brew build fails on Fedora 33 [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.5
changelog:
  - ci-write-passwords-only-to-serial-console-lock-down-clo.patch [bz#1979252]
  - Resolves: bz#1979252
    (CVE-2021-3429 cloud-init: randomly generated passwords logged in clear-text to world-readable file [rhel-8] [rhel-8.4.0.z])


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-2
changelog:
  - switch to master branch to fix /dev/null ownership issues
    (https://github.com/containers/conmon/commit/372fa19211cfeabdb2bad52a4ab8a4d1b0b0063c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-4
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/3161452)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-5
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/b033cb5)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-6
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/75e067e)
  - Related: #1934415


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.5-9.3
changelog:
  - retry fence-agent metadata
  - assure transient attributes of lost node are cleared
  - added configurable watchdog-fencing feature
  - Resolves: rhbz1992014
  - Resolves: rhbz1989622
  - Resolves: rhbz1993891


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c - supersedes tzdata-2021b
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.
  - Includes changes in tzdata-2021b
    - Innclude patch for Mayen
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-4.el8_4.2
changelog:
  - edk2-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch [bz#1956676]
  - edk2-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch [bz#1956676]
  - edk2-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch [bz#1956676]
  - edk2-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch [bz#1956676]
  - edk2-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch [bz#1956676]
  - edk2-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch [bz#1956676]
  - edk2-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch [bz#1956676]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch [bz#1956676]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch [bz#1956676]
  - edk2-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch [bz#1956676]
  - Resolves: bz#1956676
    (EMBARGOED edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe [rhel-8.4.0.z])


author: Jindrich Novy <jnovy@redhat.com> - 0.2.5-2
changelog:
  - New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995041)
  - Replace capability dictionary with str.lower()
  - Enable udica to generate policies with fifo class
  - Sort container inspect data before processing
  - Update templates to work properly with new cil parser
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/6a746dc)
  - fixes CVE-2021-3602
  - Related: #1977942


author: Alejandro Sáez <asm@redhat.com> - 1.16.1-1
changelog:
  - Rebase to go-1.16.1-2-openssl-fips
  - Resolves: rhbz#1938071
  - Adds a workaround for rhbz#1939923
  - Removes Patch224, it's on upstream -> rhbz#1888673
  - Removes Patch225, it's on upstream -> https://go-review.googlesource.com/c/text/+/238238
  - Removes old patches for cleaning purposes


author: Alejandro Sáez <asm@redhat.com> - 1.16.5-1
changelog:
  - Rebase to 1.16.5
  - Removes rhbz#1955032 patch, it's already included in this release
  - Removes rhbz#1956891 patch, it's already included in this release
  - Related: rhbz#1979677
  - Related: rhbz#1968738
  - Related: rhbz#1972420


author: David Benoit <dbenoit@redhat.com> - 1.16.7-1
changelog:
  - Rebase to Go 1.16.7
  - Resolves: rhbz#1994079
  - Add reject leading zeros patch
  - Resolves: rhbz#1993314


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-13
changelog:
  - put back ubi8/buildah and ubi8/skopeo as it was released in 8.4
    (only ubi8/podman was not)
  - Related: #1972700


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.3
    (https://github.com/containers/skopeo/commit/038f70e)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-3
changelog:
  - add direct runc dependency to avoid situation when runc is listed
    as default runtime but only crun is present in RHEL8
  - Related: #1954702


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.30.0-11
changelog:
  - platform: preserve IPv6 multicast route added by kernel (rh #2007264)
  - cloud-setup: don't interfere with other subnets (rh #2007341)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.30.0-12
changelog:
  - initrd: set an IPv4 required-timeout of 20 seconds, to prefer IPv4
    over IPv6 for default connections (rh #1961666)


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-1
changelog:
  - new version 6.0.8
  - Resolves: #1982862 - CVE-2021-36740 varnish:6/varnish: HTTP/2 request
    smuggling attack via a large Content-Length header for a POST request


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-1
changelog:
  - Update to 0.0.99.2
  - Make 'toolbox' create or fall back to a container if possible
  Resolves: #1914687
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-2
changelog:
  - Actually apply the patch to make 'toolbox' create or fall back to a
    container if possible
  - Support logging into a registry if necessary
  - Related: #1934415


author: Jan Grulich <jgrulich@redhat.com> - 0.26-11
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990397


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10.1
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985027)


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-26
changelog:
  - fix regression introduced by fix of CVE-2021-20188
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/bcbbbc4)
  - Resolves: #1934649


author: Jeremy Crafts <jcrafts@redhat.com> - 3.1.5-1
changelog:
  - Fix metrics auth and connection issues (RHBZ#1966761)
  - Disallow --offline and --unregister together (RHBZ#1920946)
  - Do not modify motd if already set (RHBZ#1945481)
  - Enable insights-client-boot service on install (RHBZ#1951750)


author: Jack Magne <jmagne@redhat.com> - 1.1.2-19
changelog:
  - Resolves: rhbz#1972570 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-20
changelog:
  - Resolves: rhbz#1972570 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], z stream respin.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-22
changelog:
  - Resolves: rhbz#1972570 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], z stream respin.
  - Adjust final pcsc-lite package requirement.


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Allow pcp-atop to filter processes on state (BZ 1807046)
  - Dynamically adjust the pmproxy open file limit (BZ 1954711)
  - Rebase to a more recent upstream version of PCP (BZ 1922040)
  - PCP scalability and memory footprint improvements (BZ 1942292)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-4
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-1
changelog:
  - Improved diagnostics from pmie service scripts (BZ 1954576)
  - Drop option configuration file env var setting (BZ 1967174)
  - Add pmie support for thermal throttle detection (BZ 1908212)
  - Annotate a couple of obscure config files in rpm (BZ 1964253)
  - Rebase to a more recent upstream version of PCP (BZ 1922040)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-2
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-3
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.0.99.902-1
changelog:
  - xwayland 21.0.99.902
  - Remove xdmcp, udev, udev_kms build options
  - Stop overriding the vendor name, same as xorg-x11-server


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-7 + 0.10.3-7
changelog:
  - SFTP sort upon the modification time (#1909988)
  - ssh-keygen printing fingerprint issue with Windows keys (#1901518)
  - PIN is lost when iterating over tokens when adding pkcs11 keys to ssh-agent (#1843372)
  - ssh-agent segfaults during ssh-add -s pkcs11 (#1868996)
  - ssh-copy-id could not resolve ipv6 address ends with colon (#1933517)
  - sshd provides PAM an incorrect error code (#1879503)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-9
changelog:
  - CVE-2020-14145 openssh: Observable Discrepancy leading to an information
    leak in the algorithm negotiation (#1882252)
  - Hostbased ssh authentication fails if session ID contains a '/' (#1944125)


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.1-1
changelog:
  - subscription: allow dates in ISO 8601 format (ptoscano)
    Resolves: rhbz#1947445
  - Add RHEL-specific advice to X timeout message (vslavik)
    Related: rhbz#1918702
  - Fix AskVNCSpoke call (vslavik)
    Related: rhbz#1918702
  - Improve X startup error messages (vslavik)
    Related: rhbz#1918702
  - Terminate X server after timeout and restore crash test handler (vslavik)
    Related: rhbz#1918702
  - Reorganize control flow in startX (vslavik)
    Related: rhbz#1918702
  - Handle SIGUSR1 correctly after Xorg timeout (vslavik)
    Resolves: rhbz#1918702
  - Refactor minor details in startX (vslavik)
    Related: rhbz#1918702
  - Add base repo name for CentOS Stream after repository renaming (jkonecny)
    Resolves: rhbz#1946347
  - Avoid a race condition during Connect to Red Hat spoke initialization
    (mkolman)
    Resolves: rhbz#1950053


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.2-1
changelog:
  - Use modinfo to check ko before modprobe (t.feng94)
    Resolves: rhbz#1577544
  - network: do not crash on team without IP config (rvykydal)
    Resolves: rhbz#1929008
  - Add the "Encrypt my data" checkbox to the custom partitioning spoke
    (vponcova)
    Resolves: rhbz#1903786
  - Allow encryption of thin logical volumes (vponcova)
    Resolves: rhbz#1877777
  - Don't automatically execute the default partitioning (vponcova)
    Resolves: rhbz#1954408
  - Don't run the execute method in the kickstart installation in TUI by default
    (vponcova)
    Related: rhbz#1954408
  - Don't run the execute method in the kickstart installation in GUI by default
    (vponcova)
    Related: rhbz#1954408
  - Enable closest mirror in CentOS Stream config (carl)
    Resolves: rhbz#1953698
  - Add CentOS Stream config (riehecky)
    Resolves: rhbz#1953698


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.3-1
changelog:
  - Check source type directly, not via DBus (mkolman)
    Resolves: rhbz#1941578
  - Remove autostep functionality (vslavik)
    Resolves: rhbz#1976913
  - Make it possible to skip install time Insights errors (mkolman)
    Resolves: rhbz#1931069
  - Fix CDN button visibility (mkolman)
    Resolves: rhbz#1903178
  - network: do not bind virtual devices to mac (rvykydal)
    Resolves: rhbz#1963834
  - Add a log message for successful installation (vslavik)
    Resolves: rhbz#1949487


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.4-1
changelog:
  - Disable anaconda-core's requirement on subscription-manager on CentOS (carl)
    Resolves: rhbz#1984958
  - Show suggestions for an error caused by inconsistent sector sizes (vponcova)
    Resolves: rhbz#1935722
  - Use a custom stylesheet to define CentOS-specific stylesheet data (carl)
    Related: rhbz#1974149
  - Use RHEL help content for RHV/Ovirt (mkolman)
    Resolves: rhbz#1915910
  - Move post installation scripts to the end of queue (lveyde)
    Resolves: rhbz#1970879
  - Do not generate dracut arguments multiple times for some storage devices
    (rvykydal)
    Related: rhbz#1937208
  - Make failure in generating of dracut arguments for iSCSI device non-fatal.
    (rvykydal)
    Resolves: rhbz#1937208


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.5-1
changelog:
  - Remove misleading warning about inst.ks.device replacing ksdevice (rvykydal)
    Resolves: rhbz#2001913


author: Nick Clifton <nickc@redhat.com> - 9.24-1
changelog:
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72.  (#1957319)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Split plugins into separate sub-packages
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - NVR bump for another ELN sidetag rebuild.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.


author: Nick Clifton <nickc@redhat.com> - 9.79-1
changelog:
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - Annocheck: Remove limit on number of input files.
  - Annocheck: Conditionalize test of DF_PIE_1 flag.
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)


author: Nick Clifton <nickc@redhat.com> - 9.85-1
changelog:
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
  - Annocheck: Process files in command line order.  (#1988714)
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Luca BRUNO <lucab@redhat.com> - 2021.3-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.3
    Resolves: rhbz#1981865


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-1
changelog:
  - Bump version to 1.4.3.23-1
  - Resolves: Bug 1947044 - Rebase 389 DS with 389-ds-base-1.4.3.23 for RHEL 8.5
  - Resolves: Bug 1850664 - RFE - Add an option for the Retro Changelog to ignore some attributes
  - Resolves: Bug 1903221 - Memory leak in 389ds backend (Minor)
  - Resolves: Bug 1898541 - Changelog cache can upload updates from a wrong starting point (CSN)
  - Resolves: Bug 1889562 - client psearch with multiple threads hangs if nsslapd-maxthreadsperconn is under sized
  - Resolves: Bug 1924848 - Negative wtime on ldapcompare
  - Resolves: Bug 1895460 - RFE - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  - Resolves: Bug 1897614 - Performance search rate: change entry cache monitor to recursive pthread mutex
  - Resolves: Bug 1939607 - hang because of incorrect accounting of readers in vattr rwlock
  - Resolves: Bug 1626633 - [RFE] DS - Update the password policy to support a Temporary Password with expiration
  - Resolves: Bug 1952804 - CVE-2021-3514 389-ds:1.4/389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-2
changelog:
  - Bump version to 1.4.3.23-2
  - Resolves: Bug 1812286 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  - Resolves: Bug 1748441 - RFE - Schedule execution of "compactdb" at specific date/time
  - Resolves: Bug 1938239 - RFE - Extend DNA plugin to support intervals sizes for subuids


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-3
changelog:
  - Bump version to 1.4.3.23-3
  - Resolves: Bug 1944494 - support for RFC 4530 entryUUID attribute
  - Resolves: Bug 1967839 - ACIs are being evaluated against the Replication Manager account in a replication context
  - Resolves: Bug 1970259 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
  - Resolves: Bug 1972590 - Large updates can reset the CLcache to the beginning of the changelog
  - Resolves: Bug 1903221 - Memory leak in 389ds backend (Minor)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-4
changelog:
  - Bump version to 1.4.3.23-4
  - Resolves: Bug 1976906 - Instance crash at restart after changelog configuration
  - Resolves: Bug 1480323 - ns-slapd crash at startup - Segmentation fault in strcmpi_fast() when the Referential Integrity log is manually edited
  - Resolves: Bug 1967596 - Temporary password - add CLI and fix compiler errors


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-5
changelog:
  - Bump version to 1.4.3.23-5
  - Resolves: Bug 1951020 - Internal unindexed searches in syncrepl
  - Resolves: Bug 1978279 - ds-replcheck state output message has 'Master' instead of 'Supplier'


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-6
changelog:
  - Bump version to 1.4.3.23-6
  - Resolves: Bug 1982787 - CRYPT password hash with asterisk allows any bind attempt to succeed


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-7
changelog:
  - Bump version to 1.4.3.23-7
  - Resolves: Bug 1983921 - persistent search returns entries even when an error is returned by content-sync-plugin


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-8
changelog:
  - Bump version to 1.4.3.23-8
  - Resolves: Bug 1947044 - add missing patch for import result code
  - Resolves: Bug 1944494 - support for RFC 4530 entryUUID attribute


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-9
changelog:
  - Bump version to 1.4.3.23-9
  - Resolves: Bug 1947044 - remove unsupported GOST password storage scheme


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-10
changelog:
  - Bump version to 1.4.3.23-10
  - Resolves: Bug 1997138 - LDAP server crashes when dnaInterval attribute is set to 0


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-1
changelog:
  - Rebase to 2.3.0.2 [bz#1972102]
  - Resolves: bz#1972102
    ([Azure][RHEL-8]Rebase WALinuxAgent to 2.3.0.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2
changelog:
  - wla-Require-iptables-for-setting-up-persistent-firewall-.patch [bz#1985198]
  - Resolves: bz#1985198
    ([Azure][WALA][RHEL-8] WALA needs iptables package)


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-2
changelog:
  RHEL 8.5.0 ERRATUM
  - rebase to 8.2102.0
    resolves: rhbz#1932795
  - Enable openssl
    resolves: rhbz#1891458
  - EKU check for client cert on server side
    resolves: rhbz#1783348
  - Use GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1880434
  - Use librelp with openssl enabled
    resolves: rhbz#1795607
  - Close dir when fsync=on
    resolves: rhbz#1960536


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-3
changelog:
  - Priority field must have valid length
    resolves: rhbz#1866877
  - Allocate more memory on too large groups
    resolves: rhbz#1944718


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-5
changelog:
  - Do not exit when user/group can not be found
    resolves: rhbz#1984489
  - Remove abortOnIDResolution fail


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-6
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1889886


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task() (1934582)
  - stalld.service: Run stalld as sched_fifo via systemd
  - stalld: Add error handling in get_cpu_idle_time() (1966259)
  - packaging: clean up Makefiles and rpm specfile (1972806)
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096 (1934581)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one (1920041)
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic (1977663)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983100)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Keith Seitz <keiths@redhat.com> - 8.2-16.el8
changelog:
  - Backport "Fix segfault with nameless fortran modules."
    (Bernhard Heckel, RH BZ 1934673)
  - Backport "PowerPC remove 512 bytes region limit if 2nd DAWR is available"
    and related patches.
    (Rogerio Alves et al RH BZ 1854784)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-69
changelog:
  - fencing: add "stonith_status_sleep" parameter to set sleep between
    status calls during STONITH action
    Resolves: rhbz#1780825


author: Christian Kellner <christian@kellner.me> - 30-1
changelog:
  - Upstream release 30
  - Ship osbuild-mpp in new tools sub-package.
  - Remove executable bit from schemata files.


author: Christian Kellner <gicmo@redhat.com> - 35-2
changelog:
  - Include patch for ostree.config stage to support the selection of
    the bootloader backend.
  - Include patch to fix a potential crash in the detection of rhsm
    secrets when 'redhat.repo' is missing.


author: Jan Friesse <jfriesse@redhat.com> 3.1.4-1
changelog:
  - Related: rhbz#1948973
  - Resolves: rhbz#1962139

  - New upstream release (rhbz#1948973)
  - stats: fix crash when iterating over deleted keys (rhbz#1962139)


author: Sahana Prasad <sahana@redhat.com> - 0.9.4-3
changelog:
  - Fix CVE-2020-16135 NULL pointer dereference in sftpserver.c if
    ssh_buffer_new returns NULL (#1862646)


author: Brian C. Lane <bcl@redhat.com> 28.14.59-1
changelog:
  - Backport mkksiso to RHEL 8.5.0 (bcl)
    Resolves: rhbz#1955355
  - Move manpages into the correct subpackages (bcl)
    Resolves: rhbz#1928962
  - composer-cli: Update documentation URLs (bcl)
    Resolves: rhbz#1915361
  - Use wildcard for grub2 modules in livemedia.ks example (bcl)
    Related: rhbz#1973530
  - runtime-install: Install ipcalc (bcl)
    Related: rhbz#1958314
  - test: Add new osbuild-composer expected types (martin) (martin)
  - test: Fix URL to bots testmap (martin) (martin)


author: Brian C. Lane <bcl@redhat.com> 28.14.60-1
changelog:
  - New lorax documentation - 28.14.59 (bcl)
    Related: rhbz#1955355
  - docs: Add missing mkksiso.1 manpage (bcl)
    Related: rhbz#1955355
  - docs: Fix reference in composer-cli.rst (bcl)
    Related: rhbz#1915361
  - Makefile: Use user-mode podman and fix docs-in-docker target (bcl)
    Related: rhbz#1955355


author: Andreas Schneider <asn@redhat.com> - 4.13.3-3
changelog:
  - resolves: #1924615 - Fix a memcache bug when cache is full
  - resolves: #1924571 - Ensure that libwbclient has been updated before
                         restarting services


author: Andreas Schneider <asn@redhat.com> - 4.14.4-2
changelog:
  - resolves: rhbz#1944657 - Update to version 4.14.4
  - resolves: rhbz#1949445 - Fix CVE-2021-20254
  - resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
  - resolves: rhbz#1908506 - Fix creating the gencache user directory
  - resolves: rhbz#1901029 - Build the vfs_io_uring module


author: Andreas Schneider <asn@redhat.com> - 4.14.4-0
changelog:
  - related: rhbz#1944657 - Update to version 4.14.5
  - resolves: rhbz#1969787 - Fix memory leak in RPC server
  - resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
  - resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
  - resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
  - resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
  - resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16
changelog:
  - 2004974 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.5.0]
  - 2004891 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-8.5.0]


author: Jindrich Novy <jnovy@redhat.com> - 3.15-3
changelog:
  - add Requires: criu-libs = %{version}-%{release} in criu-devel
  - add gating tests
  - Related: #1934415


author: Attila Lakatos <alakatos@redhat.com> - 1.9.0-1
changelog:
  - rebase to 1.9.0
  - add patch to comply with crypto policies
  - add support for openssl
    resolves: rhbz#1932783
  - Properly end TLS connections
    resolves: rhbz#1886400


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.8-2
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1977732


author: Florian Müllner <fmuellner@redhat.com> - 3.32.1-15
changelog:
  - Fix stuck window picker after screen lock
    Resolves: #1905000
  - Add tooltips to workspace previews
    Resolves: #1894613


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.3.ea
changelog:
  - Remove explicit compiler flags which should be handled by the upstream build
    (-std=gnu++98, -fno-delete-null-pointer-checks, -fno-lifetime-dse)
  - Resolves: rhbz#1966234


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.1.ea
changelog:
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Resolves: rhbz#1966234


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+4
  - Update release notes to 11.0.12.0+4
  - Correct bug ID JDK-8264846 to intended ID of JDK-8264848
  - Resolves: rhbz#1967374


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+6
  - Update release notes to 11.0.12.0+6
  - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
  - Resolves: rhbz#1967374


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-1
changelog:
  - Update to jdk-11.0.12.0+7
  - Update release notes to 11.0.12.0+7
  - Switch to GA mode for final release.
  - Resolves: rhbz#1972395


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2
changelog:
  - Add patch in order to fix java.library.path issue on aarch64 (JDK-8269668)
  - Resolves: rhbz#1994104


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4
changelog:
  - Extend the default security policy to accomodate PKCS11 accessing jdk.internal.misc.
  - Resolves: rhbz#1997357


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-4
changelog:
  - Possible assertion failure on DNAME processing (CVE-2021-25215)
  - Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-16
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1922448


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-17
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1830625


author: Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.33-0.2.ea
changelog:
  - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
  - Related: rhbz#1995150


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.2.ea
changelog:
  - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
  - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
  - Related: rhbz#1995150


author: Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.33-0.3.ea
changelog:
  - Add patch to disable non-FIPS crypto in the SUN and SunEC security providers.
  - Resolves: rhbz#1995150


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.5.ea
changelog:
  - Extend the default security policy to accomodate PKCS11 accessing jdk.internal.access.
  - Resolves: rhbz#1996182


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.35-3
changelog:
  - Update release notes to document the major changes between OpenJDK 11 & 17.
  - Resolves: rhbz#1994084


author: Marek Polacek <polacek@redhat.com> 10.3.1-1
changelog:
  - update from Fedora gcc 10.3.1-1 (#1929382)
  - drop gcc10-pr97060.patch
  - use --enable-cet
  - ship gcc-accel-nvptx-none-lto-dump
  - backport PR96939 fixes


author: Marek Polacek <polacek@redhat.com> 11.1.1-2
changelog:
  - update from Fedora gcc 11.1.1-2
  - fix up mausezahn miscompilation (PR tree-optimization/100566)
  - fix build with removed linux/cyclades.h header (PR sanitizer/100379)
  - add a few Provides: bundled (#1859893)


author: Marek Polacek <polacek@redhat.com> 11.1.1-6
changelog:
  - update from Fedora gcc 11.1.1-6 (#1946782)
    - PRs c++/100876, c++/100879, c++/101106, c/100619, c/100783, fortran/95501,
     fortran/95502, fortran/100283, fortran/101123, inline-asm/100785,
     libstdc++/91488, libstdc++/95833, libstdc++/100806, libstdc++/100940,
     middle-end/100250, middle-end/100307, middle-end/100574,
     middle-end/100684, middle-end/100732, middle-end/100876,
     middle-end/101062, middle-end/101167, target/99842, target/99939,
     target/100310, target/100777, target/100856, target/100871,
     target/101016


author: Marek Polacek <polacek@redhat.com> 11.2.1-1
changelog:
  - update from releases/gcc-11-branch (#1986838)
    - GCC 11.2 release
    - PRs middle-end/101586, rtl-optimization/101562


author: Josef Ridky <jridky@redhat.com> - 1:5.8-21
changelog:
  - prevent parsing IP address twice (#1768908)
  - add support for digests detected from ECC certs (#1919714)
  - fix broken ErrorMsg at ucd-snmp (#1933150)
  - add support for intermediate certs (#1914656)
  - fix crash of certs with longer extension (#1908718)


author: Christopher Snyder <csnyder@redhat.com> 1.28.15-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - make value possibly plural for addons in syspurpose man page
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - update language of REPOS OPTIONS in subscription-manager man page
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - change add-ons to addons (tmerry@localhost.localdomain)
  - 1634780: typo in syspurpose man page (tmerry@localhost.localdomain)
  - 1856832: add --org=ORG to the ROLE OPTIONS, USAGE OPTIONS and ADDONS OPTIONS
    of the subscription-manager man pages (tmerry@localhost.localdomain)
  - 1637083: add unset sections (tmerry@localhost.localdomain)
  - 1920017: Remove a sentence from the subscription-manager man page.
    (tmerry@localhost.localdomain)
  - 1646718: Debrand message to not include Red Hat Subscription Manager but
    instead with an entitlement server (tmerry@localhost.localdomain)
  - 1682943: put a blank space back into a comment to separate two sentences
    (tmerry@localhost.localdomain)
  - 1857491: Add newline character to split a message into 2 lines
    (tmerry@localhost.localdomain)
  - 1920020: Set default_log_level to INFO when an invalid value is passed on the
    command line (#2481) (31166354+tlhmerry9@users.noreply.github.com)
  - 1924921: Fix getting releases, when SCA is used (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Added translation using Weblate (Sinhala) (r45xveza@pm.me)
  - Added translation using Weblate (Sinhala) (r45xveza@pm.me)
  - 1927245: Mark several dir as part of RPM (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.16-1
changelog:
  - 1950015: fix typos in syspurpose(8) (#2604) (ptoscano@redhat.com)
  - Updated translations for Korean and Italian from weblate (simmon@nplob.com)
  - 1916540: Negative proxy tests occasionally encounter the wrong exception
    handling (tmerry@redhat.com)
  - 1880920: check for invalid addons (ptoscano@redhat.com)
  - 1637083: Removed the parameters to the unset-addons subcommand
    (tmerry@redhat.com)
  - 1898552: refactor/fix collection of IP v4/v6 address info
    (ptoscano@redhat.com)
  - 1636950: modify description in the man page for syspurpose for the generic
    commands (tmerry@redhat.com)
  - cockpit: Enable TLS for mock insights server (martin@piware.de)
  - cockpit: Update test API to 236 (martin@piware.de)
  - cockpit: Replace obsolete wait_present() with wait_visible()
    (martin@piware.de)
  - cockpit: Adjust for changed services image (martin@piware.de)
  - 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
  - 1878133: Deprecation message for syspurpose (#2421) (wpoteat@redhat.com)
  - 1819555: cockpit: translate untranslatable messages (ptoscano@redhat.com)
  - cockpit: fix extraction of plural messages (ptoscano@redhat.com)
  - 1863039: Fix issue with dnf/yum variables (jhnidek@redhat.com)
  - 1878736: use our i18n functions instead of dnf ones (ptoscano@redhat.com)
  - Switch dates returned by D-Bus ListInstalledProducts to ISO 8601
    (ptoscano@redhat.com)
  - 1793501: switch dates returned by D-Bus GetPool to ISO 8601
    (ptoscano@redhat.com)
  - ENT-2779: call format() on translated string (ptoscano@redhat.com)
  - 1930037: cockpit: ensure /etc/pki/product exist (ptoscano@redhat.com)
  - 1749395: Proper handling when a user does not have an org
    (wpoteat@redhat.com)
  - Add RHEL 8.5 releaser (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.17-1
changelog:
  - 1920020: show error message when setting invalid default_log_level as well as
    on every run until changed to a valid value (#2641)
    (tmerry@redhat.com)
  - 1897767: improve wording for missing or empty syspurpose values
    (ptoscano@redhat.com)
  - 1951057: Cherry Pick to Add in memory read of cache, delete SCA cert with not
    needed. (#2618) (tmerry@redhat.com)
  - 1896715: Set proper read permissions on certs (wpoteat@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1956764: New extraction for translatable strings (ptoscano@redhat.com)
  - 1672805: 'Addons' is failing spell check and should be changed to 'Add-ons'
    to match documentation (tmerry@redhat.com)
  - 1638080: surround the syspurpose feedback in quotes (tmerry@redhat.com)
  - 1949492: remove bogus %changelog entries (ptoscano@redhat.com)
  - 1637083: remove the unset PROPERTY VALUE from the Generic Commands
    (tmerry@redhat.com)
  - 1897767: what does 'No valid values provided for usage' mean to the user for
    subscription-manager-1.28 branch (tmerry@redhat.com)
  - 1879856: suppress the warning message when setting syspurpose values (tmerry@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.18-1
changelog:
  - Removed .orig files, which leaked into main branch (jhnidek@redhat.com)
  - Move cloud detector/collector to cloud-what package (jhnidek@redhat.com)
  - Make Azure cloud collector more reliable (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Fixed reporting of AWS cloud facts (null value) (#2693) (jhnidek@redhat.com)
  - New extraction for translatable strings (#2688) (ptoscano@redhat.com)
  - Refactoring of cloud collector/detector and facts (#2657)
    (jhnidek@redhat.com)
  - 1973731: fix wording on error when listing syspurpose values
    (ptoscano@redhat.com)
  - 1971693: syspurpose: remove deprecation notices (#2683) (ptoscano@redhat.com)
  - 1968420: improve description of rhsm.conf format (ptoscano@redhat.com)
  - 1967210: Do not print warning, when valid value is provided
    (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1971693: syspurpose: adjust deprecation messages (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (ljanda@redhat.com)
  - Update translation files (noreply@weblate.org)
  - Fixed white space before '(' (jhnidek@redhat.com)
  - flake8: add more locally found issues (ptoscano@redhat.com)
  - Remove extra whitespace before '(' (ptoscano@redhat.com)
  - 1967780: improve placeholders in help text (ptoscano@redhat.com)
  - Add missing second empty line after class/function (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Add flake8 configuration (ptoscano@redhat.com)
  - build: drop version requirements for pep8 and flake8 (ptoscano@redhat.com)
  - build: remove pyqver test requirement (ptoscano@redhat.com)
  - jenkins: disambiguate virtualenv names (ptoscano@redhat.com)
  - jenkins: switch stylish job to Python 3 (ptoscano@redhat.com)
  - cockpit: Invoke setup.py with python3 (martin@piware.de)
  - 1897767: improve wording for invalid syspurpose values (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Korean) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)


author: Christopher Snyder <csnyder@redhat.com> 1.28.19-1
changelog:
  - Translated using Weblate (German) (ljanda@redhat.com)
  - Translated using Weblate (German) (patrick.vollandt@mein-gym.de)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Remove no arch from python3-cloud-what package (csnyder@redhat.com)
  - 1976324: Added cloud_what to log root namespaces (#2704) (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.20-1
changelog:
  - 1876828: Try to suppress errors in stderr when not run as root
    (mhorky@redhat.com)
  - 1924126: Fix profile upload on AWS systems (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.21-1
changelog:
  - Updated translations from weblate
  - 1922151: Add /var/cache/cloud-what to python3-cloud-what RPM.
    (jhnidek@redhat.com)
  - 1922151: Use in-memory cache on AWS too (jhnidek@redhat.com)
  - hwprobe.py: Fix counting cores per cpu for Fujitsu A64FX CPU
    (m.mizuma@jp.fujitsu.com)
  - 1980418: Add 'active' field to module stream profile (ianballou67@gmail.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.21-2
changelog:
  - 1922151: Revert "hwprobe.py: Fix counting cores per cpu for Fujitsu A64FX CPU"
    (ptoscano@redhat.com)


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-1
changelog:
  - Add crm_simulate --show-attrs and --show-failcounts options
  - Retry getting fence agent meta-data after initial failure
  - Add debug option for more verbose ocf:pacemaker:ping logs
  - Rebase on upstream 2.1.0-rc2 release
  - Support OCF Resource Agent API 1.1 standard
  - Fix crm_mon regression that could cause certain agents to fail at shutdown
  - Allow setting OCF check level for crm_resource --validate and --force-check
  - Resolves: rhbz1686426
  - Resolves: rhbz1797579
  - Resolves: rhbz1843177
  - Resolves: rhbz1935464
  - Resolves: rhbz1936696
  - Resolves: rhbz1948620
  - Resolves: rhbz1955792


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-2
changelog:
  - Rebase on upstream 2.1.0 final release
  - Correct schema for crm_resource XML output
  - Resolves: rhbz1935464
  - Resolves: rhbz1967087


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-3
changelog:
  - crm_resource now supports XML output from resource agent actions
  - Correct output for crm_simulate --show-failcounts
  - Avoid remote node unfencing loop
  - Resolves: rhbz1644628
  - Resolves: rhbz1686426
  - Resolves: rhbz1961857


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-4
changelog:
  - Show better error messages in crm_resource with invalid resource types
  - Avoid selecting wrong device when dynamic-list fencing is used with host map
  - Do not schedule probes of unmanaged resources on pending nodes
  - Fix regressions in crm_attribute and crm_master argument handling
  - Resolves: rhbz1447918
  - Resolves: rhbz1978010
  - Resolves: rhbz1982453
  - Resolves: rhbz1984120


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-6
changelog:
  - Fix watchdog agent version information
  - Ensure transient attributes are cleared when multiple nodes are lost
  - Resolves: rhbz1443666
  - Resolves: rhbz1986998


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-33
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1947900


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-4
changelog:
  - Update to upstream 3.17.0 final.
  - Add valgrind-3.17.0-ppc64-isa-3.1{,tests}.patch
  - Add valgrind-3.17.0-s390_insn_as_string.patch
  - Add valgrind-3.17.0-debuginfod.patch
  - Add valgrind-3.17.0-clone-parent-res.patch


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-5
changelog:
  - Add valgrind-3.17.0-s390-prep.patch
  - Add valgrind-3.17.0-s390-z15.patch
  - Add valgrind-3.17.0-s390-z13-vec-fix.patch


author: Victor Stinner <vstinner@redhat.com> - 3.6.8-39
changelog:
  - Fix reentrant call to threading.enumerate() (rhbz#1959459)
  - Don't exit Python with abort() when a thread exit and there is no available
    file descriptor to load dynamically the libgcc_s.so.1 library (rhbz#1972293)


author: Lumír Balhar <lbalhar@redhat.com> - 1.25.7-5
changelog:
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1968074
  - Update RECENT_DATE dynamically


author: Omair Majid <omajid@redhat.com> - 5.0.104-2
changelog:
  - Mark files under /etc/ as config(noreplace)
  - Add an rpm-inspect configuration file
  - Add an rpmlintrc file
  - Enable gating for release branches and ELN too


author: Ray Strode <rstrode@redhat.com> - 3.28.1-11
changelog:
  - Exclude kiosk-session from xsession subpackage
  - Disable VT switching when kiosk-session is installed
    Related: #1955754


author: Ray Strode <rstrode@redhat.com> - 3.28.1-12
changelog:
  - Introduce gnome-wayland session to allow users that use
    Xorg on the login screen to try wayland for the user session.
    Related: #1962211


author: Ray Strode <rstrode@redhat.com> - 3.28.1-13
changelog:
  - Add patch to tell grub boot was successful when user is
    able to explicitly request shutdown/reboot.
    Resolves: #1914925


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Colin Walters <walters@verbum.org> - 2020.7-4
changelog:
  - Backport https://github.com/coreos/rpm-ostree/pull/2386/commits/aa8e49aaeddfc5d38651fa08f46e059655818fd1
    Resolves: #1944760


author: Luca BRUNO <lucab@lucabruno.net> - 2021.5-1
changelog:
  - New upstream version
    https://github.com/coreos/rpm-ostree/releases/tag/v2021.5
    Resolves: rhbz#1959874


author: Luca BRUNO <lucab@redhat.com> - 2021.5-2
changelog:
  - Backport _dbpath fixes, see
    https://github.com/coreos/rpm-ostree/issues/2904
    Resolves: rhbz#1973579


author: Rob Crittenden <rcritten@redhat.com> - 0.7-5
changelog:
  - Return a user-friendly message when no issues are found (#1780062)
  - Report on FIPS status (#1781107)
  - Detect mismatches beteween certificates in LDAP and filesystem (#1886770)
  - Verify owner/perms for important log files (#1780020)


author: Brian C. Lane <bcl@redhat.com> - 3.16.12-1
changelog:
  - docs: Use python3 from environment so that tox installed modules are found (bcl)
    Related: rhbz#1916487
  - tests: Name zipl test RHEL8_TestCase (bcl)
    Related: rhbz#1916487
  - Makefile: Use unittest instead of nose (bcl)
    Related: rhbz#1916487
  - pylint: Fix warnings and errors from pylint 2.5.x (bcl)
    Related: rhbz#1916487
  - tests: Ignore W0707 raise-missing-from warnings (bcl)
    Related: rhbz#1916487
  - setup.py: Fix script installation without filename extension (bcl)
    Related: rhbz#1916487
  - move dependencies into setup.py and use setuptools (carlos)
    Related: rhbz#1916487
  - Switch to using GitHub Actions instead of Travis CI (bcl)
    Resolves: rhbz#1916487
  - Add support for running via tox (bcl)
    Related: rhbz#1916487


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.3
  - fix build
  - Related: #1934415


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - Remove maven-surefire-provider-junit5 dependency as it doesn't exist in RHEL 8.
  - Correct some typos.
  - Unable to build until criu-devel is available in RHEL 8.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972024


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-1
changelog:
  - Update to version 0.3.6
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.6
    Resolves: RHBZ#1959875
  - ansible-freeipa-tests not in the compose
    Resolves: RHBZ#1936869
  - Remove unsupported parameter for (ipapermission) module: perm_rights from
    permission-present.yml
    Resolves: RHBZ#1921654
  - Sample playbook included for selfservice module is incorrect
    Resolves: RHBZ#1922060
  - ipa-client-install failing with error code 7(keytab: /usr/sbin/ipa-rmkeytab
    returned 7)
    Resolves: RHBZ#1935123
  - New management module ipaserver
    Resolves: RHBZ#1966493
  - New management module ipaautomember
    Resolves: RHBZ#1966496


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-3
changelog:
  - Apply fix for ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
    Related: RRBZ#1969847


author: Thomas Woerner <twoerner@redhat.com> - 0.3.7-1
changelog:
  - Update to version 0.3.7
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.7
    Related: RHBZ#1959875
  - automember: Fix action to be automember or member, not service
    Resolves: RRBZ#1976923
  - automember: Fix result["failed"] issues with conditions
    Resolves: RRBZ#1976926


author: Thomas Woerner <twoerner@redhat.com> - 0.3.8-1
changelog:
  - Update to version 0.3.8
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.8
    Related: RHBZ#1959875
  - automember: Verify condition keys
    Related: RHBZ#1976926


author: Thomas Haller <thaller@redhat.com> - 1:1.32.0-0.5
changelog:
  - update to 1.32-rc1 (1.31.90) (release candidate)
  - core: allow to preserved external TFilter and QDisc settings (rh #1928078)
  - bond: support "tlb_dynamic_lb" in "balance-alb" mode (rh #1959934)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.0-1
changelog:
  - update to 1.32.0 release
  - veth: fix null error when deleting the device (rh #1915278)
  - veth: fix crash when deleting the device profile (rh #1915276)
  - firewall: add new "nftables" firewall-backend (rh #1548825)
  - DNS: fix lookup of hostname via DNS (rh #1970335)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.2-1
changelog:
  - update to 1.32.2 release
  - device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
  - docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
  - cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
  - daemon: performance improvements (rh #1847125)
  - dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
  - Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)


author: Gris Ge <fge@redhat.com> - 1:1.32.4-1
changelog:
  - Upgrade to 1.32.4 with fixes of:
  - nmcli: show DNS SEARCH field in device information. (rh #1852317)
  - device: avoid crash setting VPN config during unrealize. (rh #1912423)
  - core: send ARP announcements when there is carrier. (rh #1956793)
  - core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
  - core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
  - ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
  - cloud-setup: add support for Aliyun cloud. (rh #1823315)


author: Gris Ge <fge@redhat.com> - 1:1.32.6-1
changelog:
  - Upgrade to 1.32.6 release
  - core: fix adding stale local routes when address changes (rh #1979192)
  - dhcp: handle filename/bootfile_name DHCP option and write it to device state
    file for initrd/kickstart (rh #1979387)
  - initrd: add "ib.pkey=" command line option (rh #1805708)
  - core: introduce "keep-configuration" device option to forcefully activate a
    profile on start (rh #1934122)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.32.8-1
changelog:
  - Upgrade to 1.32.8 release
  - firewalld: configure zones on "Reloaded" signal (rh #1982403)
  - ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
  - core: fix wrong MTU for bridge interfaces (rh #1973536)
  - cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.10-1
changelog:
  - update to 1.32.10 release
  - nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
  - IP: fix the order of IP addresses during service restart (rh #1988751)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.32.10-3
changelog:
  - preserve the IPv6 multicast route added by kernel (rh #2004212)
  - cloud-setup: better handle other route configuration (rh #1977984)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-4
changelog:
  - CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    Resolves: bz#1953758

  - CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1953772


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-39
changelog:
  - 1941437 - cupsd doesn't log job ids when logging into journal
  - 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
  - 1938384 - CUPS doesn't start if sssd starts after cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-40
changelog:
  - 1955964 - PreserveJobHistory doesn't work with seconds
  - 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]


author: Marek Polacek <polacek@redhat.com> 8.5.0-2
changelog:
  - revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
  - fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)


author: Nikola Forró <nforro@redhat.com> - 2.4.0-1
changelog:
  - Rebase to 2.4.0
  - Resolves: CVE-2018-5727 (#1538467)
  - Resolves: CVE-2018-5785 (#1538556)
  - Resolves: CVE-2018-20845 (#1730679)
  - Resolves: CVE-2018-20847 (#1734337)
  - Resolves: CVE-2019-12973 (#1739076)
  - Resolves: CVE-2020-15389 (#1855115)
  - Resolves: CVE-2020-27814 (#1908965)
  - Resolves: CVE-2020-27823 (#1906222)
  - Resolves: CVE-2020-27824 (#1906216)
  - Resolves: CVE-2020-27842 (#1908165)
  - Resolves: CVE-2020-27843 (#1908164)
  - Resolves: CVE-2020-27845 (#1908168)


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931670
  - Remove requirement for python3-semantic_version
  - Resolves: rhbz#1972355
  - Remove unnecessary keyutils Requires line


author: Luboš Uhliarik <luhliari@redhat.com> - 84.5-1
changelog:
  - Provide: system-logos(httpd-logo-ng) for httpd subpackage
  - Resolves: #1934800 - Apache trademark update


author: Nikola Forró <nforro@redhat.com> - 8.5.0.0-1
changelog:
  - Upload new tarball
  - statx.2: add STATX_ATTR_DAX
    resolves: #1899552
  - resolv.conf.5: update information about search list and
    attempt to clarify domain/search interaction
    resolves: #1928160


author: Milan Crha <mcrha@redhat.com> - 3.28.5-17
changelog:
  - Resolves: #1972749 (PrintableOptions.cmake: Correct variable name comparison)
  - Resolves: #1971676 (ECalBackendFile: Free interval tree only when being allocated)


author: Martin Pitt <mpitt@redhat.com> - 242-1
changelog:
  - Updates: Show subscription status on cloud images (rhbz#1931429)
  - Machines: Allow creation of non-root user for unattended installations (rhbz#1940287)


author: Martin Pitt <mpitt@redhat.com> - 246-1
changelog:
  - Polish of the Storage page
  - Storage: Show both SHA256 and SHA1 Tang fingerprints
  - Updated translations


author: Katerina Koukiou <kkoukiou@redhat.com> - 248-1
changelog:
  - Machines: Share host files with the guest using virtiofs
  - Machines: Show list of pass-through devices


author: Matej Marusak <mmarusak@redhat.com> - 249-1
changelog:
  - Machines: Fix input for "Target Path" when Creating storage pool (rhbz#1866225)
  - Machines: Don't round or floor memory and storage size unnecessarily (rhbz#1979152)
  - Machines: Use cockpit's proxy API for monitoring libvirt service changes (rhbz#1974223)
  - Machines: Fix ooops when press the down arrow several times when inputting custom path (rhbz#1977554)


author: Martin Pitt <mpitt@redhat.com> - 250-1
changelog:
  - Software Updates: Introduce basic kpatch support
  - Software Updates: Handle unregistered RHEL systems with non-CDN OS repository
    (rhbz#1970057)
  - Machines: Read qemu.conf to get spice/vnc address (rhbz#1963701)


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5.
  - Modify rshim.spec accordingly.
  - Resolves: rhbz#1950425


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-2
changelog:
  - Add sysconfig/rshim file and update rshim.service to source it.
  - jbastian made the first cut of this patch, which needed to be
    modified due to the update to 2.0.5. And I chose to go with
    %autosetup to handle Patch0, instead of sticking with %setup.
  - Resolves: rhbz#1946349


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-18
changelog:
  - Protect against negative values to memmove that caused
    "ipmitool sol activate" to crash against an IBM DataPower appliance
    (#1951480)
    Cherry-picked from upstream PR#78.


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15
changelog:
  - Add out-of-bounds checks to hdrblobInit() (#1929445)
  - Fixes CVE-2021-20266
  - Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16
changelog:
  - Add support for read-only sqlite rpmdb (#1938928)
  - Drop compat .decode() method from returned Py3 strings (#1840142)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b05 (EA)
  - Update release notes for 8u302-b05.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.1.ea
changelog:
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Resolves: rhbz#1966233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.2.ea
changelog:
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Fix name of javadoc debug packages in Obsoletes declarations and add version where it was removed.
  - Resolves: rhbz#1966233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b06 (EA)
  - Update release notes for 8u302-b06.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b07 (EA)
  - Update release notes for 8u302-b07.
  - Resolves: rhbz#1967812


author: Martin Balao <mbalao@redhat.com> - 1:1.8.0.302.b08-2
changelog:
  - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
  - Resolves: rhbz#1971679


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-2
changelog:
  - Port FIPS system detection support to OpenJDK 8u
  - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
  - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
  - Resolves: rhbz#1971679


author: Bryan Gurney <bgurney@redhat.com> - 2.4.0-3
changelog:
  - Update to 2.4.0
  - Resolves: rhbz#1931671
  - Improve stratis by adding Multi-threading
  - Resolves: rhbz#1927485
  - Dump stratis configuration on demand or in debug
  - Resolves: rhbz#1735475
  - Add noalign option to XFS creation on MDV
  - Resolves: rhbz#1908318
  - Cap thinpool metadata device size at devicemapper-set limit
  - Resolves: rhbz#1707461


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931671
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Ray Strode <rstrode@redhat.com> - 3.32.2-36
changelog:
  - Add ability to lock down password showing
    Resolves: #1770302
  - Add requires on newer mutter version
    Related: #1937866


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-1
changelog:
  - update vendored components
  - ship /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release only on non-RHEL and
    CentOS distros
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/ea32394)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/130f32f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/01e51ce)
  - Related: #1934415


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-2
changelog:
  - Resolves: #1860216 - tcpdump can not parse mptcp options
  - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory
  - Adding tedude test to gating


author: Jiri Kucera <jkucera@redhat.com> - 1.113-2
changelog:
  - Fix typo in pam-panel-icon manpage
    Do not use deprecated selinux API
    Do not use fexecve
    Resolves: #1775931


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Jindrich Novy <jnovy@redhat.com> - 4.4.0-1
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
  - Related: #1934415


author: Gris Ge <fge@redhat.com> - 1.1.0-3
changelog:
  - Fix state=ignore for OVS interface. RHBZ#1944054
  - Fix verification for next hop address 0.0.0.0. RHBZ#1985879


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.5-1
changelog:
  - Upgrade to the latest upstream release (RHBZ#1953092)
  - Fix segfault when using --stig-viewer option and latest XML file from DoD (RHBZ#1912000)
  - Improve doc about --stig-viewer (RHBZ#1918759)
  - Backport an upstream patch adding CentOS CPE (RHBZ#1907935)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.5-3
changelog:
  - Waive known issue with hugepages in upstream testsuite (RHBZ#1912000)
  - Fix issues reported by the coverity scan
  - Introduce OSBuild 'blueprint' fix type


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1895005 CVE-2021-3571)
  - add read-only UDS port (#1929797)
  - add option to set clockClass threshold (#1980386)
  - don't repeat some log messages in multi-port configuration (#1980377)
  - increase default TX timestamp timeout to 10 ms (#1977136)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-2
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [bz#1957532]
  - ci-cloud-init.spec.template-update-systemd_postun-param.patch [bz#1952089]
  - Resolves: bz#1957532
    ([cloud-init] From RHEL 82+ cloud-init no longer displays sshd keys fingerprints from instance launched from a backup image)
  - Resolves: bz#1952089
    (cloud-init brew build fails on Fedora 33)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-3
changelog:
  - ci-write-passwords-only-to-serial-console-lock-down-clo.patch [bz#1945891]
  - Resolves: bz#1945891
    (CVE-2021-3429 cloud-init: randomly generated passwords logged in clear-text to world-readable file [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-4
changelog:
  - ci-ssh-util-allow-cloudinit-to-merge-all-ssh-keys-into-.patch [bz#1862967]
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-5
changelog:
  - ci-Add-dhcp-client-as-a-dependency.patch [bz#1977385]
  - Resolves: bz#1977385
    ([Azure][RHEL-8] cloud-init must require dhcp-client on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-6
changelog:
  - ci-Stop-copying-ssh-system-keys-and-check-folder-permis.patch [bz#1862967]
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-7
changelog:
  - ci-Fix-home-permissions-modified-by-ssh-module-SC-338-9.patch [bz#1995840]
  - Resolves: bz#1995840
    ([cloudinit]  Fix home permissions modified by ssh module)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-13
changelog:
  - Resolves: #1897548 - Rebuild IBus emoji with unicode-emoji-13.0-4 and cldr-emoji-annotation-39-2
  - Rebuild ibusemojigen.h and ibusunicodegen.h
  - Add ibus-1897548-emoji-unicode.patch to lookup Unicode names
  - Add U+32FF to IBusUnicodeData
  - Add ibus-po-1.5.19-20210706.tar.gz


author: <msekleta@redhat.com> - 11.7.3-6
changelog:
  - Don't trigger autofs mounts when running sadc (#1954793)
  - sar: Add missing %gnice CPU value for tickless CPU (#1908996)


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Charalampos Stratakis <cstratak@redhat.com> - 5.6.4-4
changelog:
  - Security fix for CVE-2019-18874: double free because of refcount mishandling
  Resolves: rhbz#1772014


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-3
changelog:
  - Resolves: rhbz#1958909 - fix regression for scoped searches in compat tree
  - Resolves: rhbz#1978189 - better handle error response from libsss_nss_idmap


author: Gopal Tiwari <gtiwari@redhat.com> - 5.56-1
changelog:
  + bluez-5.56-1
  - Fixing (#1965057)
  - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56


author: Nick Clifton <nickc@redhat.com> - 9.64-1
changelog:
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.1.11-1
changelog:
  - Rebase to 3.1.11
  - Add updates for paths in libraries_include_path.patch
  - Patch add_docs_license_dir_option upstreamed


author: Paul Wouters <pwouters@redhat.com> - 4.3-3
changelog:
  - Resolves: rhbz#1933064 - IKEv2 support for Labeled IPsec
  - Resolves: rhbz#1935150 RFE: Support IKE and ESP over TCP: RFC 8229
  - Resolves: rhbz#1935339 virtual_private setting is missing in the default config


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Resolves: rhbz#1958968 Rebase libreswan to 4.4
  - Resolves: rhbz#1954423 Libreswan: TS_UNACCEPTABLE on multiple connections between the same peers


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Remove bots sudo rm from Makefile
  - Use journalctl --utc for Logs view to handle DST
  - Add Applications Menu test
  - Install cockpit-packagekit in local VM
  - Set timezone for Logs Correlation test


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-19
changelog:
  - Backport PR2608:
    Fix setting boot path in case of UEFI partition (ESP) on MD RAID
    Resolves: rhbz1945869
  - Backport PR2625
    Prevents accidental backup removal in case of errors
    Resolves: rhbz1958247
  - Fix rsync error and option handling
    Fixes metadata storage when rsync user is not root
    Resolves: rhbz1930662


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-1
changelog:
  - Rebase to upstream release 2.6 and drop unneded patches.
    Add S/390 support.
    Resolves: rhbz1983003, rhbz1988493, rhbz1868421
  - Add missing dependencies on dhcp-client (see #1926451), file
  - Patch documents to be compatible with asciidoc,
    we don't have asciidoctor
  - On POWER add bootlist & ofpathname to the list of required programs
    conditionally (bootlist only if running under PowerVM, ofpathname
    always except on PowerNV) - upstream PR2665, add them to package
    dependencies
    Resolves: rhbz1983013


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-2
changelog:
  - Fix multipath performance regression in 2.6, introduced by upstream PR #2299.
    Resolves: rhbz1993296


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-3
changelog:
  - Add patch for better handling of thin pools and other LV types not supported
    by vgcfgrestore
    Resolves: rhbz1747468


author: Nathan Scott <nathans@redhat.com> 2.0.3-1
changelog:
  - Updated for new version with changed namespace
  - Ansible collection macros now used in the spec
  - Added ansible-lint checking in %check section


author: Tomas Popela <tpopela@redhat.com> - 1.6.0-5
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1949809


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.7-2
changelog:
  - remove unused cryptographic implementations
  - use cryptographic functions from OpenSSL if FIPS mode is enabled


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.8-1
changelog:
  - update to 7.5.8 tagged upstream community sources, see CHANGELOG
  - remove unused dependencies selfsigned, http-signature and gofpdf


author: Honggang Li <honli@redhat.com> - 5.7-2
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960078


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-7
changelog:
  - Include the /usr/bin/pybabel binary that runs on Python 3.6 in the
    python3-babel package
  Resolves: rhbz#1967173


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Fire SIGCHLD after utempter_add_record since it probably eats it.
  - Correct suse rpmbuild
  - Update debbuild for travis CI


author: Daiki Ueno <dueno@redhat.com> - 3.6.16-1
changelog:
  - Update to upstream 3.6.16 release (#1956783)
  - Fix potential use-after-free in key_share handling (#1927597)
  - Fix potential use-after-free in pre_shared_key handling (#1927593)
  - Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
  - Fix cert expiration issue in tests (#1908110)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlčík <jkadlcik@redhat.com> - 0.7-2
changelog:
  - Do not generate manpages on the fly
  - Drop python-parameterized dependency
  - Fix python3 macro for running tests


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.11-1
changelog:
  - modulemd_tools: compatibility for upgrade_ext on EPEL8 (frostyx@email.cz)
  - modulemd_tools: compatibility for read_packager_string on EPEL8
    (frostyx@email.cz)
  - dir2module: generate also profiles and modulemd-defaults file
    (frostyx@email.cz)
  - modulemd_tools: use upgrade_ext instead of upgrade (frostyx@email.cz)
  - modulemd_tools: use read_packager_string instead of read_string
    (frostyx@email.cz)
  - Add installation instructions (frostyx@email.cz)
  - bld2repo: do not create empty repos when --result-dir is used
    (kdudka@redhat.com)
  - bld2repo: print status in a more intuitive format (kdudka@redhat.com)
  - tito: stop releasing for Fedora 32 (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> 0.7-6
changelog:
  - Do not install bld2repo as RHEL8 doesn't have python3-koji
    (jkadlcik@redhat.com)
  - Drop the Patch1 and make the change directly in this repository
    (jkadlcik@redhat.com)
  - Use UpstreamBuilder instead of DistributionBuilder (jkadlcik@redhat.com)
  - Skip some tests because they require binary files (jkadlcik@redhat.com)


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.2
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.163.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.163.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.2
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.165.1-2
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.165.1
  - Related: #1934415


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1936426
    - realtime: "isolate_managed_irq=Y" should be mentioned in
      "/etc/tuned/realtime-virtual-*-variables.conf"
      resolves: rhbz#1817827
    - realtime: changed tuned default to "isolcpus=domain,managed_irq,X-Y"
      resolves: rhbz#1820626
    - applying a profile with multiple inheritance where parents include a common
      ancestor fails
      resolves: rhbz#1825882
    - failure in moving i40e IRQ threads to housekeeping CPUs from isolated CPUs
      resolves: rhbz#1933069
    - sort network devices before matching by regex
      resolves: rhbz#1939970
    - net: fixed traceback while adjusting the netdev queue count
      resolves: rhbz#1943291
    - net: fixed traceback if the first listed device returns netlink error
      resolves: rhbz#1944686
    - realtime: improve verification
      resolves: rhbz#1947858
    - bootloader: add support for the rpm-ostree
      resolves: rhbz#1950164
    - net: fixed traceback if a device channel contains n/a
      resolves: rhbz#1974071
    - mssql: updated the profile
      resolves: rhbz#1942733


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.3-1
changelog:
  - Resolves: RHBZ#1979844, RHBZ#1977829
  - Resolves: RHBZ#1842826
  - Resolves CVE-2021-22918(libuv), use system cipher list


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.3-3
changelog:
  - Resolves: RHBZ#1945513, RHBZ#1945287
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Bump for missing mentions of CVEs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves RHBZ#1847529 (make FIPS always available)
  - Resolves: RHBZ#1988600, RHBZ#1993815, RHBZ#1993809, RHBZ#1993096
  - Resolves: RHBZ#1986743, RHBZ#1993947, RHBZ#1993940, RHBZ#1989427
  - Resolves: RHBZ#1951620 (make FIPS always available)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.18.2-1
changelog:
  - Resolves: RHBZ#2027609
  - Resolves: RHBZ#2027649, RHBZ#2027646, RHBZ#2027642, RHBZ#2027635
  - Rebase to new version to fix CVEs


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-37.1.el8
changelog:
  - network: Implement virConnectSupportsFeature() (rhbz#2038812)
  - lib: Fix calling of virNetworkUpdate() driver callback (rhbz#2038812)


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.57-2
changelog:
  - Update Ansible login banner fixes to avoid unnecessary updates (RHBZ#1857179)
  - Include tests for Ansible Playbooks that remove and reintroduce files.
  - Update RHEL8 STIG profile to V1R3 (RHBZ#1993056) 
  - Improve Audit Rules remediation to group similar syscalls (RHBZ#1876483)
  - Reestructure RHEL7 and RHEL8 CIS profiles according to the policy (RHBZ#1993197)
  - Add Kickstart files for ISM profile (RHBZ#1955373)
  - Fix broken RHEL7 documentation links (RHBZ#1966577)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.57-3
changelog:
  - Fix remaining audit rules file permissions (RHBZ#1993056)
  - Mark a STIG service rule as machine only (RHBZ#1993056)
  - Fix a remaining broken RHEL7 documentation link. (RHBZ#1966577)


author: Andreas Gerstmayr <agerstmayr@redhat.com> - 0.5.4-4
changelog:
  - Obsolete (remove) vulnerable versions of log4j12 (NVR < 1.2.17-23)
    when upgrading to parfait 0.5.4-4 (CVE-2021-4104)


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-59.el8_5
changelog:
  - kvm-hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-allowed-in-MODE.patch [bz#2025605]
  - kvm-e1000-fix-tx-re-entrancy-problem.patch [bz#2025011]
  - Resolves: bz#2025605
    (CVE-2021-3930 virt:rhel/qemu-kvm: QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c [rhel-8.5.0.z])
  - Resolves: bz#2025011
    (CVE-2021-20257 virt:rhel/qemu-kvm: QEMU: net: e1000: infinite loop while processing transmit descriptors [rhel-8.5.0.z])


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-42
changelog:
  - Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path
  - Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
    mod_session


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43
changelog:
  - Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.13.1-1
changelog:
  - Resolves: RHBZ#2027644, RHBZ#2027643, RHBZ#2027638, RHBZ#2027633
  - Resolves: RHBZ#2027610
  - Rebase to LTS release and to fix multiple low and medium CVEs


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/4f91b37)
  - Resolves: #2011410


author: Jacob Kozol <jkozol@redhat.com> - 31-1
changelog:
  - Add new ostree image types
  - Improve loading state when waiting for api responses
  - Improve notification system
  - Improve test stability
  - Update NPM dependencies
  - Update translations


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16.3
changelog:
  - 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
  - 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16.4
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-11
changelog:
  - Bump version to 1.4.3.23-11
  - Resolves: Bug 2022005 - ipa user-add fails with "gecos: invalid per syntax: Invalid syntax"
  - Resolves: Bug 2021998 - IPA server is very slow in execution of some searches


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-12
changelog:
  - Bump version to 1.4.3.23-12
  - Resolves: Bug 2024697 - DB corruption "_entryrdn_insert_key - Same DN (dn: nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,<SUFFIX>) is already in the entryrdn file"


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
  - Resolves: rhbz#2014194


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43.1
changelog:
  - Resolves: #2035062 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
    overflow when parsing multipart content


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-14
changelog:
  - Fixed CVE-2019-5827 (#1710184)
  - Fixed CVE-2019-13750 (#1786510)
  - Fixed CVE-2019-13751 (#1786522)
  - Fixed CVE-2019-19603 (#1792013)
  - Fixed CVE-2020-13435 (#1841233)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-1
changelog:
  - January 2022 security update to jdk 17.0.2+8
  - Rebase RH1995150 & RH1996182 patches following JDK-8275863 addition to module-info.java
  - Rename libsvml.so to libjsvml.so following JDK-8276025
  - ** This tarball is embargoed until 2022-01-18 @ 1pm PT. **
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-3
changelog:
  - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps) and @JAVA_SPEC_VER@
  - Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
  - Related: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-4
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Related: rhbz#2039366


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-4
changelog:
  - Work around unknown msgctl/semctl/shmctl cmd check issue in tests-m32
    and tests-mx32 as well (#1997082).


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-3
changelog:
  - Copy changes made to linux-system-roles in this PR:
    https://src.fedoraproject.org/rpms/linux-system-roles/pull-request/13#
  - Make spec file available for older versions of OSes.
  - Drop python3-six dependency which was used by lsr_role2collection.py.
  - Drop html files from rpm if the version has no markdown parser.
  - Drop unnecessary python scripts which include python3 only code, e.g.,
    f-strings.
    Resolves rhbz#1970165


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.11-1
changelog:
  - Update the version to be consistent with the Galaxy collection at
    https://galaxy.ansible.com/microsoft/sql


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.11-2
changelog:
  - Make the ansible_collection_files macro defined in Fedora automatically and
    in RHEL manually consistent - having slash at the end to clean double-slashes


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.12-1
changelog:
  - Add the meta-runtime option from the latest auto-maintenance
  - Use the latest mssql that ships fixes for issues #24,#25,#26,#27,#28,35


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.12-2
changelog:
  - Copy fix for RHEL 7 builds from rhel-system-roles
    Link to the original fix:
    https://src.fedoraproject.org/rpms/linux-system-roles/c/093981119f99ac51a6e06a2714b587e4e2fe287c


author: Colin Walters <walters@verbum.org> - 2021.3-2
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/2453/commits/e6a560b40797324aa8b90e7100c6d50bff91f14d
    Resolves: rhbz#2029578


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-2
changelog:
  - cu-growpart-Use-LANG-C-to-parse-sfdisk-output.patch [bz#1933768]
  - Resolves: bz#1933768
    (cloud-utils-growpart: Wrong parsing of sfdisk output in french locale)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-3
changelog:
  - cu-Fix-issue-LP-1928167-growpart-doesn-t-work-when-LANG.patch [bz#1885992]
  - Resolves: bz#1885992
    ([RHEL-8] growpart doesn't work when LANG=cs_CZ.UTF-8)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
  - Update release notes for 8u322-b04.
  - Require tzdata 2021c as of JDK-8274407.
  - Switch to EA mode.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Related: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.13.0+7
  - Update release notes to 11.0.13.0+7
  - Update tarball generation script to use git following OpenJDK 11u's move to github
  - Switch to EA mode for 11.0.13 pre-release builds.
  - Remove non-Free test from source tarball.
  - Drop JDK-8269668 patch which is now applied upstream.
  - Related: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-2
changelog:
  - Update to jdk-11.0.12.0+8
  - Update release notes to 11.0.12.0+8
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2012334


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-4
changelog:
  - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
  - Resolves: rhbz#2014212


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.ea
changelog:
  - Replaced hardcoded 11 by featurever where appropriate
  - Fixed comment of `for slowdebug` to correct `any debug`
  - Related: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.14.0+8
  - Update release notes to 11.0.14.0+8
  - Switch to EA mode for 11.0.14 pre-release builds.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Rename blacklisted.certs to blocked.certs following JDK-8253866
  - Rebase RH1996182 login patch and drop redundant security policy extension after JDK-8269034
  - Related: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1
changelog:
  - Update to jdk-11.0.14.0+9
  - Update release notes to 11.0.14.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-01-18 @ 1pm PT.
  - Resolves: rhbz#2039366


author: Artem Egorenkov <aegorenk@redhat.com> - 3.4.0-23
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Nikola Forró <nforro@redhat.com> - 4.0.9-19
changelog:
  - Fix CVE-2020-35521 (#1945539)
  - Fix CVE-2020-35522 (#1945555)
  - Fix CVE-2020-35523 (#1945542)
  - Fix CVE-2020-35524 (#1945546)


author: Rich Megginson <rmeggins@redhat.com> - 1.6.3-1
changelog:
  - storage - tag tests that use NVME and SCSI
    Resolves rhbz#1989211 (EL9)
    Resolves rhbz#1989638 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.6.4-1
changelog:
  - sshd - support for rhel9 managed hosts
    Resolves rhbz#1989221 (EL9)
    Resolves rhbz#1989638 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.6.6-1
changelog:
  - logging, certificate - Instead of the archive module, use "tar" command for backup.
    Resolves rhbz#1984182 (EL9)
    Resolves rhbz#1987096 (EL8)
  - logging - Add a support for list value to server_host in the elasticsearch output
    Resolves rhbz#1986460 (EL9)
    Resolves rhbz#1986463 (EL8)
  - logging - tests_relp.yml; Can't detect any of the required Python libraries cryptography (>= 1.2.3) or PyOpenSSL (>= 0.6)
    Resolves rhbz#1989962 (EL9)
    Resolves rhbz#1990142 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.6.7-1
changelog:
  - storage - tests_create_lvmvdo_then_remove fails - Module dm-vdo not found
    Resolves rhbz#1991141 (EL8)
    Resolves rhbz#1991062 (EL9)
  - storage - Get syntax errors in tests_lvm_errors.yml
    Resolves rhbz#1990793 (EL8)
    Resolves rhbz#1991142 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.0-1
changelog:
  - drop support for Ansible 2.8 - min_ansible_version is now 2.9
    Resolves rhbz#1989197 (EL9)
    Resolves rhbz#1989199 (EL8)
  - sshd - fix rhel6 support - failed to validate: error:Missing Match criteria for all Bad Match condition
    Resolves rhbz#1991598 (EL9)
    Resolves rhbz#1990947 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.1-1
changelog:
  - metrics - the bpftrace role does not properly configure bpftrace agent
    Resolves rhbz#1994180 (EL9)
    Resolves rhbz#1993240 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.2-1
changelog:
  - logging - Update the certificates copy tasks
    Resolves rhbz#1996777 (EL9)
    Resolves rhbz#1994580 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.3-1
changelog:
  - storage - revert the dm-vdo workaround fix for vdo testing
    Resolves rhbz#1978488 (EL9)
    Resolves rhbz#1991141 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.3-2
changelog:
  - selinux - tag tests_selinux_disabled.yml with tests::avc
    Resolves rhbz#1996315 (EL9)
    Resolves rhbz#1996317 (EL8)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/867c1bc)
  - Related: #2021990


author: Nick Clifton <nickc@redhat.com> - 2.30-100
changelog:
  - Do not strip the static BFD library.  (For real this time).  (#1924068)
  - Remove support for ARM v8.6 ISA.  (#1875912)


author: Nick Clifton <nickc@redhat.com> - 2.30-101
changelog:
  - Fix excessive memory consumption in the BFD librart when parsing corrupt DWARF information.  (#1947134)


author: Jiri Kucera <jkucera@redhat.com> - 2.3-2
changelog:
  - wrudf: Fix parsing Volume Descriptor Sequence
  - wrudf: Exit on allocation failure
    Related: #1882531


author: Matthias Clasen <mclasen@redhat.com> - 3.22.30-7
changelog:
  - Only mention Emoji in context menus when requested (rhbz#1893196)
  - Fix warnings from non-overlay scrollbars (rhbz#1873488)


author: Ray Strode <rstrode@redhat.com> - 40.0-10
changelog:
  - Let customers using vendor nvidia driver choose wayland sessions
    Resolves: #1962211
  - Drop unused patches


author: Ray Strode <rstrode@redhat.com> - 40.0-11
changelog:
  - Read session settings from users even if they've never saved
    before. Needed to support accountsservice templated user
    defaults.
    Related: #1812788


author: Daiki Ueno <dueno@redhat.com> - 3.4.1-5
changelog:
  - Backport powerpc64 optimization patches from upstream (#1855228)
    Patch from Christopher M. Riedl.


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72.  (#1960299)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: William Poteat <wpoteat@redhat.com> 1.30.6-1
changelog:
  - 1943486: Clear previous report hash when hypervisor count is zero
    (wpoteat@redhat.com)
  - Convert CI from Travis to Jenkins (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.30.7-1
changelog:
  - 1984018: Take out AHV removal patch mechanism (wpoteat@redhat.com)
  - Update tito releaser for next release (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.30.8-1
changelog:
  - 1986761:  Add the description for nutanix mode in man virt-who and man virt-
    who-config (wpoteat@redhat.com)
  - 1985210: The guest state in mapping should be uniform with other hypervisors
    1985213: The guest shows wrong active value "0" in mapping when it's running.
    (wpoteat@redhat.com)
  - 1985224: Get UnboundLocalError when configured hypervisor_id=hwuuid
    (wpoteat@redhat.com)
  - 1985203: Add dmi.system.uuid to ahv facts (wpoteat@redhat.com)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-9
changelog:
  - Resolves: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (coming
                             from lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-10
changelog:
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-11
changelog:
  - Bump release to force the package through OSCI as the previous
    build reached CI just in time for an outage
  - Related: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (comingfrom lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-12
changelog:
  - Fix a dead code issue in the signature wrapping patch
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Andreas Schneider <asn@redhat.com> - 4.14.4-4
changelog:
  - resolves: rhbz#2021163
    Fix CVE-2016-2124
  - resolves: rhbz#2021167
    Fix CVE-2021-23192
  - resolves: rhbz#2021171
    Fix CVE-2020-25717


author: Andreas Schneider <asn@redhat.com> - 4.14.5-5
changelog:
  - resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
  - related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'


author: Andreas Schneider <asn@redhat.com> - 4.14.5-9
changelog:
  - resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
  - resolves: rhbz#2046160 - Fix possible segfault while joining a domain
  - resolves: rhbz#2046152 - Fix CVE-2021-44142


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.3-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/815f36a)
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.2-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4.2-rhel
    (https://github.com/containers/podman/commit/f601d7a)
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.2-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4.2-rhel
    (https://github.com/containers/podman/commit/4853c18)
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.2-5
changelog:
  - add Patch0: https://patch-diff.githubusercontent.com/raw/containers/podman/pull/12540.patch
    which reverts removal of code which is in fact required for proper podman functionality
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.2-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4.2-rhel
    (https://github.com/containers/podman/commit/90fb2cf)
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.2-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4.2-rhel
    (https://github.com/containers/podman/commit/30a6e0d)
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.2-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4.2-rhel
    (https://github.com/containers/podman/commit/75e9870)
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.2-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4.2-rhel
    (https://github.com/containers/podman/commit/16e80e0)
  - Related: #2021990


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Josef Ridky <jridky@redhat.com> - 2.0.14-5
changelog:
  - Fix CVE-2021-26927 (#1933860)
  - Fix CVE-2021-26926 (#1922316)
  - Fix CVE-2021-3272 (#1922283)
  - Fix CVE-2020-27828 (#1905692)


author: Karel Zak <kzak@redhat.com> 2.32.1-28
changelog:
  - fix #1906157 - after su from root to a normal user mesg is unable to show current status
  - fix #1917852 - findmnt: add option to list all fs-independent flags
  - fix #1922299 - throws error using /sbin/nologin: invalid option -- 'c'
  - fix #1940607 - lsblk sometimes returns block devices in wrong order with --pairs
  - fix #1919529 - [RFE] RHEL-8: Support option flags with mount(8) --bind
  - fix #1946921 - RHEL8: mount --rbind -o rprivate doesn't do recursive bind mount


author: Jiri Vanek <jvanek@redhat.com> - 4.0-2
changelog:
  - commented out requires lua-posix, it was always commented out in el8, never in fedora. IDK
  - Resolves: rhbz#1953923


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: Uri Lublin <uril@redhat.com> - 8.4-1
changelog:
  - mingw-virt-viewer 9.0-3
  - mingw-libgovirt   0.3.7-5
  - mingw-spice-gtk   0.38-5
    Related: rhbz#844683
    Related: rhbz#1839104 rhbz#1874740 rhbz#1017261
    Related: rhbz#1918459


author: Uri Lublin <uril@redhat.com> - 8.5-5
changelog:
  - mingw-virt-viewer 9.0-6
    Resolves: rhbz#1997058
    Resolves: rhbz#1918877
    Related:  rhbz#1939111
    Related:  rhbz#1942919


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2027630
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Pavel Březina <pbrezina@redhat.com> - 1.2.2-2
changelog:
  - try_first_pass option no longer works on some PAM modules in RHEL8 (RHBZ #1949070)
  - Need to localize the description of --debug option in authselect show (RHBZ #1970408)


author: Link Dupont <link@redhat.com> - 3.1.7-1
changelog:
  - New upstream version (Resolves RHBZ#2014070)
  - Disable client metrics collection
  - Create fallback.json dynamically at build time


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - fbtl-posix: link to common_ompio
  - Require environment(modules)
  - Revert upstream commit c36d7459b6331c4da82
  - Resolves: rhbz#1974780, rhbz#1971771


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-5.el8
changelog:
  - edk2-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch [bz#1892318]
  - edk2-redhat-add-OVMF-binary-that-will-support-SEV-ES.patch [bz#1956837]
  - Resolves: bz#1892318
    (edk2: possible heap corruption with LzmaUefiDecompressGetInfo [rhel-8])
  - Resolves: bz#1956837
    (Additional build of edk2 without SMM (dual build / sub-package) for SEV-ES)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-1
changelog:
  - Rebase to edk2-stable202105 [bz#1938238]
  - Resolves: bz#1938238
    ((edk2-rebase-rhel-8.5) - rebase edk2 to edk2-stable202105 for RHEL-8.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-2
changelog:
  - edk2-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch [bz#1956408]
  - Resolves: bz#1956408
    (edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe [rhel-8.5.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-3
changelog:
  - edk2-MdeModulePkg-PartitionDxe-Ignore-PMBR-BootIndicator-.patch [bz#1988762]
  - Resolves: bz#1988762
    (edk2 does not ignore PMBR protective record BootIndicator as required by UEFI spec)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-7.el8_5.1
changelog:
  - ci-cc_ssh.py-fix-private-key-group-owner-and-permission.patch [bz#2017697]
  - Resolves: bz#2017697
    (cloud-init fails to set host key permissions correctly [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-7.el8_5.2
changelog:
  - ci-fix-error-on-upgrade-caused-by-new-vendordata2-attri.patch [bz#2028738]
  - Resolves: bz#2028738
    (cloud-init.service fails to start after package update [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-7.el8_5.3
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2028756]
  - Resolves: bz#2028756
    ([RHEL-8] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP [rhel-8.5.0.z])


author: Jiri Kucera <jkucera@redhat.com> - 1.13.1-8
changelog:
  - Add LICENSES file into the tarball, update License field
    Add pkgconfig files to gpgme-devel
    Resolves: #1882423, #1953905


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.40.1-43
changelog:
  - Fixed races during pdf documentation build which should build docs correctly
    Related: CVE-2020-18032


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - update shortnames from Pyxis
  - Related: #2009153


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-27
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/c19e460)
  - Resolves: #2062401


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-28
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/9407ffd)
  - fixes CVE-2022-27651
  - Resolves: #2067545


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/4f91b37)
  - Related: #2009106


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/c5d8129)
  - Resolves: #2067512


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-2
changelog:
  - kvm-redhat-Add-rhel8.6.0-machine-type-for-s390x.patch [bz#2005325]
  - kvm-redhat-Define-pseries-rhel8.6.0-machine-type.patch [bz#2031041]
  - Resolves: bz#2005325
    (Fix CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#2031041
    (Add rhel-8.6.0 machine types for RHEL 8.6 [ppc64le])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-4
changelog:
  - kvm-hw-arm-virt-Register-iommu-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Register-its-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Rename-default_bus_bypass_iommu.patch [bz#2031039]
  - kvm-hw-arm-virt-Add-8.6-machine-type.patch [bz#2031039]
  - kvm-hw-arm-virt-Check-no_tcg_its-and-minor-style-changes.patch [bz#2031039]
  - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2029582]
  - Resolves: bz#2031039
    (Add rhel-8.6.0 machine types for RHEL 8.6 [aarch64])
  - Resolves: bz#2029582
    ([8.6] machine types: 6.2: Fix prefer_sockets)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-5
changelog:
  - kvm-acpi-validate-hotplug-selector-on-access.patch [bz#2036580]
  - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#2031035]
  - Resolves: bz#2036580
    (CVE-2021-4158 virt:rhel/qemu-kvm: QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c [rhel-8])
  - Resolves: bz#2031035
    (Add rhel-8.6.0 machine types for RHEL 8.6 [x86])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-6
changelog:
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046198]
  - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2033279]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2021778 bz#2036178]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2021778 bz#2036178]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2037135]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2037135]
  - Resolves: bz#2046198
    (CVE-2022-0358 virt:av/qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-8.6])
  - Resolves: bz#2033279
    ([wrb][qemu-kvm 6.2] The hot-unplugged device can not be hot-plugged back)
  - Resolves: bz#2021778
    (Qemu core dump when do full backup during system reset)
  - Resolves: bz#2036178
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2037135
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-7
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#1518984]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#1518984]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#1518984]
  - kvm-Enable-SGX-RH-Only.patch [bz#1518984]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#1518984]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041480]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041480]
  - Resolves: bz#1518984
    ([Intel 8.6 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041480
    ([incremental_backup] Inconsistent block status reply in qemu-nbd)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-8
changelog:
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2035185]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2035185]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2035185]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2035185]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2035185]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2035185]
  - Resolves: bz#2035185
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-9
changelog:
  - kvm-Revert-redhat-Add-hw_compat_4_2_extra-and-apply-to-u.patch [bz#2061856]
  - kvm-Revert-redhat-Enable-FDC-device-for-upstream-machine.patch [bz#2061856]
  - kvm-Revert-redhat-Expose-upstream-machines-pc-4.2-and-pc.patch [bz#2061856]
  - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2027208]
  - kvm-pci-expose-TYPE_XIO3130_DOWNSTREAM-name.patch [bz#2054597]
  - kvm-acpi-pcihp-pcie-set-power-on-cap-on-parent-slot.patch [bz#2054597]
  - Resolves: bz#2061856
    (Revert IBM-specific Ubuntu-compatibility machine type for 8.6-AV GA)
  - Resolves: bz#2027208
    ([virtual network][vDPA] qemu crash after hot unplug vdpa device)
  - Resolves: bz#2054597
    (Do operation to disk will hang in the guest of target host after hotplugging and migrating)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-10
changelog:
  - kvm-vmxcap-Add-5-level-EPT-bit.patch [bz#2056986]
  - kvm-i386-Add-Icelake-Server-v6-CPU-model-with-5-level-EP.patch [bz#2056986]
  - kvm-acpi-fix-QEMU-crash-when-started-with-SLIC-table.patch [bz#2059311]
  - kvm-tests-acpi-whitelist-expected-blobs-before-changing-.patch [bz#2059311]
  - kvm-tests-acpi-add-SLIC-table-test.patch [bz#2059311]
  - kvm-tests-acpi-SLIC-update-expected-blobs.patch [bz#2059311]
  - kvm-tests-acpi-manually-pad-OEM_ID-OEM_TABLE_ID-for-test.patch [bz#2059311]
  - kvm-tests-acpi-whitelist-nvdimm-s-SSDT-and-FACP.slic-exp.patch [bz#2059311]
  - kvm-acpi-fix-OEM-ID-OEM-Table-ID-padding.patch [bz#2059311]
  - kvm-tests-acpi-update-expected-blobs.patch [bz#2059311]
  - kvm-tests-acpi-test-short-OEM_ID-OEM_TABLE_ID-values-in-.patch [bz#2059311]
  - kvm-rhel-workaround-for-lack-of-binary-patches-in-SRPM.patch [bz#2059311]
  - Resolves: bz#2056986
    (Win11 (q35+edk2) guest broke after install wsl2 through 'wsl --install -d Ubuntu-20.04')
  - Resolves: bz#2059311
    (Guest can not start with SLIC acpi table)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11
changelog:
  - kvm-target-i386-properly-reset-TSC-on-reset.patch [bz#1975840]
  - Resolves: bz#1975840
    (Windows guest hangs after updating and restarting from the guest OS)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.15.0+8
  - Update release notes to 11.0.15.0+8
  - Switch to EA mode for 11.0.15 pre-release builds.
  - Rebase RH1996182 FIPS patch after JDK-8254410
  - Related: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1
changelog:
  - Update to jdk-11.0.15.0+9
  - Update release notes to 11.0.15.0+9
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
  - Resolves: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2
changelog:
  - Remove security items from release notes that were only in 17u and N/A for 11u
  - Related: rhbz#2073422


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1757844
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950308


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-108
changelog:
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.12.0-0.1
changelog:
  - Rebase to PKI 10.12.0
  - Bug 1904112 - pki fails to start if empty dir /var/lib/pki/pki-tomcat/kra exists
  - Bug 1984455 - [RFE] Date Format on the TPS Agent Page
  - Bug 1980378 - 'keyctl_search: Required key not available' message when running 'ipa-healthcheck'
  - Bug 2004084 - Reinstall of the same ipa-replica fails with 'RuntimeError: CA configuration failed.'
  - Bug 2006070 - Upgrades incorrectly add secret attribute to connectors


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.6-12
changelog:
  - ipa-server-install uninstall: remove tdb files
  - ipa-client-samba uninstall: remove tdb files
    Resolves: RHBZ#2065719


author: Filip Januš <fjanus@redhat.com> - 10.19-2
changelog:
  - Add missing files into file section of server package
    postgresql-setup v8.6 newly provides postgresql-upgrade


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b06 (EA)
  - Update release notes for shenandoah-8u332-b06.
  - Switch to EA mode.
  - Remove JDK-8279077 patch now upstream.
  - Related: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-04-19 @ 1pm PT.
  - Resolves: rhbz#2073422


author: Jiri Denemark <jdenemar@redhat.com> - 7.8.0-1
changelog:
  - Rebased to libvirt-7.8.0 (rhbz#2012802)
  - The rebase also fixes the following bugs:
      rhbz#1839070, rhbz#1942275, rhbz#1995865, rhbz#1806857, rhbz#1924616
      rhbz#1978574, rhbz#1989457, rhbz#1965589, rhbz#1677608, rhbz#1926508
      rhbz#1810863, rhbz#1845468, rhbz#1738392, rhbz#1965140


author: Jiri Denemark <jdenemar@redhat.com> - 7.9.0-1
changelog:
  - Rebased to libvirt-7.9.0 (rhbz#2012802)
  - The rebase also fixes the following bugs:
      rhbz#2011731, rhbz#2012385, rhbz#2013539


author: Jiri Denemark <jdenemar@redhat.com> - 7.10.0-1
changelog:
  - Rebased to libvirt-7.10.0 (rhbz#2012802)
  - The rebase also fixes the following bugs:
      rhbz#1845468, rhbz#2017928, rhbz#2024419, rhbz#1953389, rhbz#1510237


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-0rc1.1
changelog:
  - Rebased to libvirt-8.0.0-rc1 (rhbz#2012802)
  - The rebase also fixes the following bugs:
      rhbz#1689202, rhbz#2014369, rhbz#2030119, rhbz#2029380, rhbz#2035237
      rhbz#2035714, rhbz#2034180


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - Revert "report error when virProcessGetStatInfo() is unable to parse data" (rhbz#2041610)
  - qemu: fix inactive snapshot revert (rhbz#2043584)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-3
changelog:
  - qemuDomainSetupDisk: Initialize 'targetPaths' (rhbz#2046172)
  - RHEL: Remove <glib-2.64.0 workaround for GSource race (rhbz#2045879)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-4
changelog:
  - qemu_command: Generate memory only after controllers (rhbz#2050697)
  - qemu: Validate domain definition even on migration (rhbz#2050702)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5
changelog:
  - node_device: Rework udevKludgeStorageType() (rhbz#2056673)
  - node_device: Treat NVMe disks as regular disks (rhbz#2056673)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-462
changelog:
  - Fix inheritance resolution of lexial objects in a debugger (GH#17661)
  - Fix a misoptimization when assignig a list in a list context (GH#17816)
  - Fix handling left-hand-side undef when assigning a list (GH#16685)
  - Fix a memory leak when compiling a long regular expression (GH#18054)
  - Fix handling exceptions in a global destruction (GH#18063)
  - Fix sorting with a block that calls return (GH#18081)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-463
changelog:
  - Run-require complete perl by perl-CPAN
  - Fix ownership of /usr/share/perl5/{ExtUtils,File,Module,Text,Time} directories
  - Fix a buffer overflow when compiling a regular expression with a bracketed
    character class with a white space
  - Fix a mismatch with the recursive subpatterns (GH#18096)
  - Update perl-IO-Zlib metadata
  - Fix sv_collxfrm macro to respect locale
  - Fix an iterator signedness in handling an mro exception (GH#18155)
  - Fix a code flow in Perl_sv_inc_nomg()


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-464
changelog:
  - Fix an undefined behavior in Perl_custom_op_get_field()
  - Fix Config variable names in in t/op tests
  - Fix fetching a magic on the stacked file test operators


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.32.1-466
changelog:
  - 5.32.1 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.32.1/pod/perldelta.pod>
    or release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-467
changelog:
  - Fix a crash in optimizing split() (GH#18232)
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-468
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-469
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Rob Crittenden <rcritten@redhat.com> - 0.7-7
changelog:
  - ipa-healthcheck command takes some extra time to complete when dirsrv
    instance is stopped (#1776687)
  - ipa-healthcheck complains about pki.server.healthcheck errors even CA
    is not configured on the replica (#1983060)


author: Rob Crittenden <rcritten@redhat.com> - 0.7-8
changelog:
  - Suppress the CRLManager check false positive when a CA is not
    configured (#1983060)
  - Fix the backport of the pki.server.healthcheck suppression (#1983060)


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1757846
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950307
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-108
changelog:
  - Upgrade to Ruby 2.6.9.
  - Skip JIT tests in RHEL 8.
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
    Resolves: CVE-2020-36327


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:3.08-461
changelog:
  - Fix memory leak in function encode_method()
  - "Fix a memory leak on FB_CROAK" was reverted in Encode 3.15


author: Ray Strode <rstrode@redhat.com> - 0.9.4-10.git1688935.1
changelog:
  - Fix typo in --with-runtimedir argument to actually stop using
    /var/run and instead use /run instead
    Resolves: #2057275


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-59.el8_5.2
changelog:
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2048627]
  - Resolves: bz#2048627
    (CVE-2022-0358 virt:rhel/qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-60.el8_5.2
changelog:
  - kvm-target-i386-Declare-constants-for-XSAVE-offsets.patch [bz#2065239]
  - kvm-target-i386-Consolidate-the-X86XSaveArea-offset-chec.patch [bz#2065239]
  - kvm-target-i386-Clarify-the-padding-requirements-of-X86X.patch [bz#2065239]
  - kvm-target-i386-Pass-buffer-and-length-to-XSAVE-helper.patch [bz#2065239]
  - kvm-target-i386-Make-x86_ext_save_areas-visible-outside-.patch [bz#2065239]
  - kvm-target-i386-Observe-XSAVE-state-area-offsets.patch [bz#2065239]
  - kvm-target-i386-Populate-x86_ext_save_areas-offsets-usin.patch [bz#2065239]
  - Resolves: bz#2065239
    (KVM Fedora 35 guest x86 programs randomly crash in signal handler [rhel-8.5.0.z])


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-9
changelog:
  - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
  Resolves: rhbz#2036020


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-10
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  Resolves: rhbz#2047376


author: Christopher Snyder <csnyder@redhat.com> 1.28.21-5
changelog:
  - 2044349: Fix redundant API calls to Candlepin (hyu@redhat.com)
  - Update translation files (noreply@weblate.org)
  - build: pin flake8 to < 4 (ptoscano@redhat.com)
  - cockpit: Move from obsolete node-sass to Dart sass (martin@piware.de)
  - cockpit: wait 5 seconds for candlepin at first (ptoscano@redhat.com)
  - cockpit: use the self-signed key in mock-insights (ptoscano@redhat.com)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43.2
changelog:
  - Resolves: #2059256 - CVE-2021-34798 httpd:2.4/httpd: NULL pointer dereference
    via malformed requests
  - Resolves: #2059257 - CVE-2021-39275 httpd:2.4/httpd: out-of-bounds write in
    ap_escape_quotes() via malicious input


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.2
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.174.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.174.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.176.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.176.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.177.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.177.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.178.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.178.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.179.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.179.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.0-0.28
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0
    (https://github.com/containers/podman/commit/a34f279)
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:4.0.0-1
changelog:
  - use correct commit 49f8da72 for podman, previous commit said 4.0.1-dev
  - install podman-plugins for gating tests
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/9237d75)
  - Related: #2059296


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/5a54f81)
  - Resolves: #2066493
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/bb1e6e6)
  - fixes CVE-2022-21698
  - Related: #2066493


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/3d24a66)
  - Related: #2066493


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-5
changelog:
  - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
  - Resolves: rhbz#2018189


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-6
changelog:
  - Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode
  - Resolves: rhbz#2055396


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.5-0.1.ea
changelog:
  - Update to jdk-17.0.3.0+5
  - Update release notes to 17.0.3.0+5
  - Switch to EA mode for 17.0.3 pre-release builds.
  - Add JDK-8283911 to fix bad DEFAULT_PROMOTED_VERSION_PRE value
  - Related: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.6-1
changelog:
  - April 2022 security update to jdk 17.0.3+6
  - Update to jdk-17.0.3.0+6 pre-release tarball (17usec.17.0.3+5-220408)
  - Add JDK-8284548 regression fix missing from pre-release tarball but in jdk-17.0.3+6/jdk-17.0.3-ga
  - Update release notes to 17.0.3.0+6
  - Add missing README.md and generate_source_tarball.sh
  - Introduce tests/tests.yml, based on the one in java-11-openjdk
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
  - Resolves: rhbz#2073575


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.6-2
changelog:
  - JDK-8275082 should be listed as also resolving JDK-8278008 & CVE-2022-21476
  - Related: rhbz#2073575


author: Tom Stellard <tstellar@redhat.com> - 1:2.22-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-42
changelog:
  - Resolves: #2007236 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path
  - Resolves: #1969229 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
    mod_session


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43
changelog:
  - Related: #2007236 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-44
changelog:
  - Resolves: #1968278 - CVE-2020-35452 httpd:2.4/httpd: Single zero byte stack
    overflow in mod_auth_digest
  - Resolves: #2001046 - Apache httpd OOME with mod_dav in RHEL 8
  - Resolves: #2005128 (CVE-2021-34798) - CVE-2021-34798 httpd: NULL pointer
    dereference via malformed requests
  - Resolves: #1984828 - mod_proxy_hcheck piles up health checks leading to high
    memory consumption
  - Resolves: #2005119 - CVE-2021-39275 httpd: out-of-bounds write in
    ap_escape_quotes() via malicious input


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-45
changelog:
  - Resolves: #2007199 - CVE-2021-36160 httpd:2.4/httpd: mod_proxy_uwsgi:
    out-of-bounds read via a crafted request uri-path
  - Resolves: #1972491 - CVE-2021-33193 httpd:2.4/mod_http2: Request splitting via
    HTTP/2 method injection and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-46
changelog:
  - Resolves: #2035063 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
    overflow when parsing multipart content


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-47
changelog:
  - Resolves: #2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference
    or SSRF in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-47.1
changelog:
  - Resolves: #2065248 - CVE-2022-22720 httpd:2.4/httpd: HTTP request smuggling
    vulnerability in Apache HTTP Server 2.4.52 and earlier


author: Alejandro Sáez <asm@redhat.com> - 1.17.2-1
changelog:
  - Rebase to Go 1.17.2
  - Related: rhbz#2014088
  - Remove golang-1.15-warnCN.patch
  - Remove reject-leading-zeros.patch
  - Remove favicon.ico and robots.txt references
  - Exclude TestEd25519Vectors test


author: David Benoit <dbenoit@redhat.com> - 1.17.4-1
changelog:
  - Rebase Go to 1.17.4
  - Add remove_waitgroup_misuse_tests patch
  - Related: rhbz#2014088
  - Resolves: rhbz#2028570
  - Resolves: rhbz#2022828
  - Resolves: rhbz#2024686
  - Resolves: rhbz#2028662


author: David Benoit <dbenoit@redhat.com> - 1.17.5-1
changelog:
  - Rebase to Go 1.17.5
  - Remove vdso_s390x_gettime patch
  - Resolves: rhbz#2031112
  - Related: rhbz#2028570


author: Remi Collet <rcollet@redhat.com> - 7.4.19-2
changelog:
  - fix SSRF bypass in FILTER_VALIDATE_URL
    CVE-2021-21705
  - fix Local privilege escalation via PHP-FPM
    CVE-2021-21703


author: David King <dking@redhat.com> - 2.9.7-10
changelog:
  - Fix CVE-2021-3516 (#1956976)
  - Fix CVE-2021-3517 (#1957001)
  - Fix CVE-2021-3518 (#1957028)
  - Fix CVE-2021-3537 (#1957284)


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.23-13
changelog:
  - Bump version to 1.4.3.23-13
  - Resolves: Bug 2056488 - Paged search lookthroughlimit counter doesnt take read ahead into account
  - Resolves: Bug 2047166 - Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing
  - Resolves: Bug 2056481 - double-free of the virtual attribute context in persistent search


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.23-14
changelog:
  - Bump version to 1.4.3.23-14
  - Resolves: Bug 2059893 - Paged search lookthroughlimit counter doesnt take read ahead into account
  - Resolves: Bug 2060106 - Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing
  - Resolves: Bug 2060110 - double-free of the virtual attribute context in persistent search


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - Related: #2001445


author: Paul Howarth <paul@city-fan.org> - 3:1.302173-1
changelog:
  - Update to 1.302173
    - Add extra debugging for "Not all files from hub '...' have been collected!"


author: Paul Howarth <paul@city-fan.org> - 3:1.302175-1
changelog:
  - Update to 1.302175
    - Fix typos in POD
    - Fix incorrect Test2::Hub documentation
    - Fix test that needed . in @INC on Windows
    - Fix Breakage test to show more info


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43.3
changelog:
  - Resolves: #2065247 - CVE-2022-22720 httpd:2.4/httpd: HTTP request smuggling
    vulnerability in Apache HTTP Server 2.4.52 and earlier


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.2-1.20200527git7325acb477
changelog:
  - Update to v0.7.2 stable snapshot, fixes rhbz#1809676
  - exclude i686 build
  - Following stable-0.7.0 branch for TPM 2 related fixes: RSA decryption,
    PSS salt length, symmetric decryption (padding)
  - Under certain circumstances an RSA decryption could cause a buffer overflow causing
    termination of the program (swtpm)
  - Following stable-0.7.0 branch for TPM 2 related fixes; v0.7.1 + gcc related patch
  - elliptic curve fixes
  - MANUFACTURER changed from "IBM " to "IBM"
  - gcc 10 related fix
  - Following stable-0.7.0 branch for TPM 1.2 related bugfix


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.3-1.20200818git1d392d466a
changelog:
  - Update to v0.7.3 stable, fixes rhbz#1868447
  - (includes "tpm2: fix PCRBelongsTCBGroup for PCClient")


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-5.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Fixes: rhbz#1976816


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-6.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999307


author: Jindrich Novy <jnovy@redhat.com> - 1.4.4-1
changelog:
  - update to https://github.com/containers/crun/releases/tag/1.4.4
  - Resolves: #2067577
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/c5d8129)
  - fixes CVE-2022-27649
  - Resolves: #2067511


author: Patsy Griffin <patsy@redhat.com> - 2022a-1
changelog:
  - Rebase to tzdata-2022a
    - Palestine springs forward on 2022-03-27, not -03-26.
    - zdump -v now outputs better failure information
    - fixes for code that reads corrupted TZif data


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16.5
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c


author: Tomas Korbar <tkorbar@redhat.com> - 2:8.0.1763-16.8
changelog:
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  - Resolves: rhbz#2049403


author: Tomas Korbar <tkorbar@redhat.com> - 2:8.0.1763-16.9
changelog:
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  - Improve fix
  - Resolves: rhbz#2049403


author: Tomas Korbar <tkorbar@redhat.com> - 2:8.0.1763-16.11
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - Fix specfile problems
  - Resolves: rhbz#2048525


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-1
changelog:
  - Bump version to 1.4.3.28-1
  - Resolves: Bug 2016014 - rebase RHEL 8.6 with 389-ds-base-1.4.3
  - Resolves: Bug 1990002 - monitor displays wrong date for connection
  - Resolves: Bug 1950335 - upgrade password hash on bind also causes passwordExpirationtime to be updated
  - Resolves: Bug 1916292 - Indexing a single backend actually processes all configured backends
  - Resolves: Bug 1780842 - [RFE] set db home directory to /dev/shm by default
  - Resolves: Bug 2000975 - Retro Changelog does not trim changes


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-2
changelog:
  - Bump version to 1.4.3.28-2
  - Resolves: Bug 2024695 - DB corruption "_entryrdn_insert_key - Same DN (dn: nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,<SUFFIX>) is already in the entryrdn file"
  - Resolves: Bug 1859210 - systemd-tmpfiles warnings
  - Resolves: Bug 1913199 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
  - Resolves: Bug 1974236 - automatique disable of virtual attribute checking
  - Resolves: Bug 1976882 - logconv.pl -j: Use of uninitialized value $first in numeric gt (>)
  - Resolves: Bug 1981281 - ipa user-add fails with "gecos: value invalid per syntax: Invalid syntax"
  - Resolves: Bug 2015998 - Log the Auto Member invalid regex rules in the LDAP errors log


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-3
changelog:
  - Bump version to 1.4.3.28-3
  - Resolves: Bug 2030367 - EMBARGOED CVE-2021-4091 389-ds:1.4/389-ds-base: double-free of the virtual attribute context in persistent search
  - Resolves: Bug 2033398 - PBKDF2 hashing does not work in FIPS mode


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-4
changelog:
  - Bump version to 1.4.3.28-4
  - Resolves: Bug 2045223 - ipa-restore command is failing when restore after uninstalling the server


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-5
changelog:
  - Bump version to 1.4.3.28-5
  - Resolves: Bug 2045223 - ipa-restore command is failing when restore after uninstalling the server (aprt 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-6
changelog:
  - Bump version to 1.4.3.28-6
  - Resolves: Bug 2047171 - Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.5.10-4
changelog:
  - Fix incorrect handling of malformed authority component in request URIs
  - Resolves: CVE-2020-13956


author: Jindrich Novy <jnovy@redhat.com> - 2:1-4
changelog:
  - consume seccomp.json from the oldest vendored version of c/common,
    not main branch
  - Related: #2021990


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-164.2
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045062).


author: Jindrich Novy <jnovy@redhat.com> - 2:2.170.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.170.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.171.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.171.0
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 2:2.172.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.0
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 2:2.172.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.1
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/fc81803)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/116e75f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/9c9a9f3)
  - Related: #2001445


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.6-7
changelog:
  - Hardening for CVE-2020-25717
  - Harden processing of trusted domains' users in S4U operations
  - Resolves: RHBZ#2021443


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.8-3
changelog:
  - Config plugin: return EmptyModlist when no change is applied.
    Resolves: RHBZ#2031825
  - Custodia: use a stronger encryption algo when exporting keys.
    Resolves: RHBZ#2032806
  - ipa-kdb: do not remove keys for hardened auth-enabled users.
    Resolves: RHBZ#2033342
  - ipa-pki-proxy.conf: provide access to /kra/admin/kra/getStatus
    Resolves: RHBZ#2049167
  - Backport latest test fxes in python3 ipatests.
    Resolves: RHBZ#2048509
  - Removed unused patch files that were part of 4.9.8 rebase.


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.8-4
changelog:
  - Don't always override the port in import_included_profiles
    Fixes: RHBZ#2022483
  - Remove ipa-join errors from behind the debug option
    Fixes: RHBZ#2048558
  - Enable the ccache sweep timer during installation
    Fixes: RHBZ#2051575


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.8-5
changelog:
  - ipatests: remove additional check for failed units.
    Resolves: RHBZ#2053024
  - ipa-cldap: fix memory leak.
    Resolves: RHBZ#2032738


author: Jon Maloy <jmaloy@redhat.com> - 21.1-7.el8_5.4
changelog:
  - ci-Add-gdisk-and-openssl-as-deps-to-fix-UEFI-Azure-init.patch [bz#2040690]
  - ci-Datasource-for-VMware-953.patch [bz#2040704]
  - ci-Change-netifaces-dependency-to-0.10.4-965.patch [bz#2040704]
  - ci-Update-dscheck_VMware-s-rpctool-check-970.patch [bz#2040704]
  - ci-Revert-unnecesary-lcase-in-ds-identify-978.patch [bz#2040704]
  - ci-Add-netifaces-package-as-a-Requires-in-cloud-init.sp.patch [bz#2040704]
  - Resolves: bz#2040690
    ([RHEL8] [Azure] cloud-init fails to configure the system [rhel-8.5.0.z])
  - Resolves: bz#2040704
    ([cloud-init][RHEL8] Support for cloud-init datasource 'cloud-init-vmware-guestinfo' [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-7.el8_5.5
changelog:
  - ci-Fix-IPv6-netmask-format-for-sysconfig-1215.patch [bz#2060026]
  - Resolves: bz#2060026
    (cloud-init writes route6-$DEVICE config with a HEX netmask. ip route does not like : Error: inet6 prefix is expected rather than "fd00:fd00:fd00::/ffff:ffff:ffff:ffff::". [rhel-8.5.0.z])


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-73.rc95
changelog:
  - fix podman run --pid=host command causes OCI permission error
  - rc95 fixes CVE-2021-30465
  - Related: #2001445


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-3
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-4
changelog:
  - Use downstream garbd-wrapper and garbd.service to ensure compatibility
  - Add upstream versions of garbd-wrapper (called garbd-systemd) and garbd.service
    in case user want's to use them


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/5a54f81)
  - Resolves: #2066493


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/bb1e6e6)
  - Related: #2059296


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/3d24a66)
  - Related: #2059296


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.44.0-4
changelog:
  - Autodetect backing format for qemu-img create -b
  - Move appliance to separate subpackage
  - Read rpm database through librpm
    resolves: rhbz#2013916, rhbz#1989520, rhbz#1836094


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.3-1
changelog:
  - Rebase to JSS 4.9.3
  - Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM [rhel-8]


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/9a4764a)
  - fixes CVE-2022-27649
  - Resolves: #2067545


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.1-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/867c1bc)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/83a66a7)
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.24.2-2
changelog:
  - Add patch to fix bash symtax for gating tests
  - Upstream PR: https://github.com/containers/buildah/pull/3792
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.2-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/7b559a3)
  - Related: #2059296


author: Jindrich Novy <jnovy@redhat.com> - 2:2.172.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.172.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.1
  - Related: #2001445


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-1.1
changelog:
  - Resolves: #2047648 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request
    Smuggling Vulnerability


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-19
changelog:
  - do not specify infra_image in containers.conf
  - needed to resolve gating test failures
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-22
changelog:
  - build rust packages with RUSTFLAGS set to make ExecShield happy
  - bump release tag by 3 for easier cherry-picking from rhel8 stream
  - Related: #2001445


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2027632, RHBZ#2028131
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-73.rc95
changelog:
  - fix podman run --pid=host command causes OCI permission error
  - rc95 fixes CVE-2021-30465
  - Related: #2070961


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2001445


author: Paul Howarth <paul@city-fan.org> - 2.092-1
changelog:
  - Update to 2.092
    - t/oooprereq.t: Fix list of dumped packages
    - t/oooprereq.t: Dump version data


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7c6701d)
  - fixes CVE-2022-27651
  - Resolves: #2067539


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Pranita Ghole<pghole@redhat.com> - 0.13.0-0
changelog:
  - Resolves: rhbz#2028556 - RHST should use new Red Hat Secure FTP instead of dropbox for attachments
  - Resolves: rhbz#2028553 - Add support for handling JSON response from API's
  - Resolves: rhbz#2028540 - Add support to upload to and download from S3


author: Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042522


author: Tomas Halman <thalman@redhat.com> - 2.3.7-9
changelog:
  - Resolves: rhbz#2001853 - CVE-2021-39191 open redirect by supplying a crafted URL
                             in the target_link_uri parameter


author: Tomas Halman <thalman@redhat.com> - 2.3.7-10
changelog:
  - Resolves: rhbz#1987216 - CVE-2021-32791 hardcoded static IV and AAD with a
                             reused key in AES GCM encryption [rhel-8] (edit)


author: Paul Howarth <paul@city-fan.org> - 1:0.237-1
changelog:
  - Update to 0.237
    - Don't load vars.pm (Perl RT#132077)
  - Drop legacy Group: tag
  - Drop buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Pranita Ghole<pghole@redhat.com> - 0.13.0-0
changelog:
  - Resolves: rhbz#2028550 - RHST should use new Red Hat Secure FTP instead of dropbox for attachments
  - Resolves: rhbz#2028546 - Add support for handling JSON response from API's
  - Resolves: rhbz#2028543 - Add support to upload to and download from S3


author: Jindrich Novy <jnovy@redhat.com> - 1.23.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/87a0565)
  - Related: #2001445


author: Marek Polacek <polacek@redhat.com> 11.2.1-6
changelog:
  - update from releases/gcc-11-branch (#1996862)
    - PRs target/100208, target/100316, target/102761
  - build target shared libraries with -Wl,-z,relro,-z,now
  - add mwaitintrin.h on x86 (#2013860)
  - improve generated code with extern thread_local constinit vars
    with trivial dtors
  - add support for C++20 #__VA_OPT__
  - apply DTS-specific testsuite patches (#1996085)


author: Marek Polacek <polacek@redhat.com> 11.2.1-7
changelog:
  - update from releases/gcc-11-branch (#1996862)
    - PRs ada/100486, c++/70796, c++/92746, c++/93286, c++/94490, c++/102642,
  	c++/102786, debug/101378, debug/103046, debug/103315, fortran/87711,
  	fortran/87851, fortran/97896, fortran/99061, fortran/99348,
  	fortran/102521, fortran/102685, fortran/102715, fortran/102745,
  	fortran/102816, fortran/102817, fortran/102917, fortran/103137,
  	fortran/103138, fortran/103392, gcov-profile/100520, ipa/102714,
  	ipa/102762, ipa/103052, ipa/103246, ipa/103267, libstdc++/96416,
  	libstdc++/98421, libstdc++/100117, libstdc++/100153, libstdc++/100748,
  	libstdc++/101571, libstdc++/101608, libstdc++/102894,
  	libstdc++/103022, libstdc++/103086, libstdc++/103133,
  	libstdc++/103240, libstdc++/103381, middle-end/64888,
  	middle-end/101480, middle-end/102431, middle-end/102518,
  	middle-end/103059, middle-end/103181, middle-end/103248,
  	middle-end/103384, preprocessor/103130, rtl-optimization/102356,
  	rtl-optimization/102842, target/101985, target/102976, target/102991,
  	target/103205, target/103274, target/103275, testsuite/102690,
  	tree-optimization/100393, tree-optimization/102139,
  	tree-optimization/102505, tree-optimization/102572,
  	tree-optimization/102788, tree-optimization/102789,
  	tree-optimization/102798, tree-optimization/102970,
  	tree-optimization/103192, tree-optimization/103204,
  	tree-optimization/103237, tree-optimization/103255,
  	tree-optimization/103435
  - fix up #__VA_OPT__ handling (PR preprocessor/103415)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-2
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-3
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2021263


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-4
changelog:
  - Refactor build functions so we can build just HotSpot without any attempt at installation.
  - Introduce architecture restriction logic for the gdb test. (RH2041970)
  - Pass compiler flags to the ADLC build (JDK-8281098)
  - Adjust JDK8199936/PR3533 -mstackrealign patch to instead pass -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
  - Sync minor placement differences with Fedora & RHEL 9
  - Resolves: rhbz#2022815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-5
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-6
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052828


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.322.b06-8
changelog:
  - alternatives creation moved to posttrans
  - Thus fixing the old reisntall issue:
  - https://bugzilla.redhat.com/show_bug.cgi?id=1200302
  - https://bugzilla.redhat.com/show_bug.cgi?id=1976053
  - Resolves: rhbz#2008192


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.322.b06-11
changelog:
  - Storing and restoring alterntives during update manually
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008192


author: Nathan Scott <nathans@redhat.com> - 5.3.3-1
changelog:
  - Add new pmdads389(1) metrics for replication (BZ 1966122)
  - Add label support to pmdahacluster(1) metrics (BZ 1972277)
  - Improve pmieconf rules for saturated processors (BZ 1994680)
  - Auto-upgrade pmcd.conf for python2 to python3 (BZ 1988403)
  - Document unloading pmdakvm(1) for kernel module (BZ 1977740)
  - Add option to pmdalinux(1) for slabinfo metrics (BZ 1962902)
  - Fix for OpenMetrics scripting generating AVCs (BZ 1985818)
  - Resolve some pcp-testsuite failures (BZ 1980459, 1981686)
  - Rebase to a more recent upstream version of PCP (BZ 1991763)


author: Nathan Scott <nathans@redhat.com> - 5.3.4-1
changelog:
  - Add pcp-atop(1) support for 'curscal' values (BZ 1984271)
  - Fix pcp-atop(1) reporting perfevent 'ipc' values (BZ 1986264)
  - Fix pmlogger(1) exiting on receipt of SIGALRM (BZ 2004771)
  - Fix values of some hacluster metrics on s390x (BZ 2008298)
  - Add new pmdads389(1) metrics for replication (BZ 1966122)
  - Rebase to a more recent upstream version of PCP (BZ 1991763)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-1
changelog:
  - Extend pmlogger(1) man page --interval option (BZ 2018083)
  - Disable Avahi service advertisement by default (BZ 1899625)
  - Use separate localhost and farm service cgroups (BZ 1991896)
  - Update and extend the Nvidia GPU metric coverage (BZ 1690590)
  - Assessment API and pmdamssql(1) share credentials (BZ 1951342)
  - Improve remote pmlogger over slow network connections (BZ 1973833)
  - Implement pcp-atop(1) support for Nvidia GPU reports (BZ 1984273)
  - Drop DMA[32] zones when the zone is not in node 0 (BZ 1985519)
  - Support kernel changes to /proc/zoneinfo metrics (BZ 1985523)
  - Ensure pmlogconf persists configuration changes (BZ 2017632)
  - Auto-reconnect lost redis connection in pmproxy (BZ 1989287)
  - Rebase to a more recent upstream version of PCP (BZ 1991763)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-3
changelog:
  - Resolve failure in the Nvidia metrics agent (BZ 2029301)
  - PMDA indom cache loading performance improvements (BZ 2030121)
  - Consistent user experience for new farm services (BZ 2027753)
  - Resilience improvements for the pmproxy service (BZ 2030140)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-4
changelog:
  - pmdabcc: resolve compilation issues of some bcc PMDA modules on
    aarch64, ppc64le and s390x (BZ 2003956)
  - Further improve pmlogger service startup latency (BZ 1973833)
  - Additional improvements to farm systemd services (BZ 2027753)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-8
changelog:
  - Fix pcp-zeroconf logger interval override regression (BZ 1991763)
  - Remove warnings from spec setup of PCP systemd units (BZ 2048024)


author: Ray Strode <rstrode@redhat.com> - 0.9.4-11.git1688935
changelog:
  - Fix typo in --with-runtimedir argument to actually stop using
    /var/run and instead use /run instead
    Resolves: #2056473


author: Nick Clifton <nickc@redhat.com> - 2.35-9
changelog:
  - Add ability to control the display of unicode characters.  (#2009178)
  - Backport some more speed up patches.  (#1978174)
  - Remove a quadratic performance penalty processing files.  (#1978174)
  - Extend vulnerability fix again.  (#1925779)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-8
changelog:
  - change usbguard icon injection
  - fix DSP module definition in spec file
  Resolves: rhbz#2014441
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Matej Tyc <matyc@redhat.com> - 0.1.58-1
changelog:
  - Rebase to a new upstream release. (RHBZ#2014485)
  - Add a VM wait handling to fix issues with tests.


author: Watson Sato <wsato@redhat.com> - 0.1.60-2
changelog:
  - Update RHEL8 STIG profile to V1R5 (RHBZ#2049555)
  - Align audit rules for OSPP profile (RHBZ#2000264)
  - Fix rule selection in ANSSI Enhanced profile (RHBZ#2053587)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-3
changelog:
  - Update sudoers rules in RHEL8 STIG V1R5 (RHBZ#2049555)
  - Add missing SRG references in RHEL8 STIG V1R5 rules (RHBZ#2049555)
  - Update chronyd_or_ntpd_set_maxpoll to disregard server and poll directives (RHBZ#2026301)
  - Fix GRUB2 rule template to configure the module correctly on RHEL8 (RHBZ#2030966)
  - Update GRUB2 rule descriptions (RHBZ#2014485)
  - Make package_rear_installed not applicable on AARCH64 (RHBZ#2014485)


author: Watson Sato <wsato@redhat.com> - 0.1.60-4
changelog:
  - Fix Ansible service disabled tasks (RHBZ#2014485)
  - Set rule package_krb5-workstation_removed as not applicable on RHV (RHBZ#2055149)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-5
changelog:
  - Remove tmux process runinng check in configure_bashrc_exec_tmux (RHBZ#2055860)
  - Fix issue with getting STIG items in create_scap_delta_tailoring.py (RHBZ#2014485)
  - Update rule enable_fips_mode to check only for technical state (RHBZ#2014485)


author: Link Dupont <link@redhat.com> - 3.1.7-1
changelog:
  - New upstream version (Resolves RHBZ#2013800)
  - Disable client metrics collection
  - Create fallback.json dynamically at build time


author: Gaël Chamoulaud <gchamoul@redhat.com> - 3.1.7-2
changelog:
  - Rename "http://cloud.redhat.com" to "https://console.redhat.com" (RHBZ#2052875)
  - Clean superfluous %clean section - rpmlint error


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-4
changelog:
  - Added vncsession-restore script for SELinux policy migration
    Fix SELinux context for root user
    Resolves: bz#2021892


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-6
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2023378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-7
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2051590


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-8
changelog:
  - alternatives creation moved to posttrans
  - Thus fixing the old reisntall issue:
  - https://bugzilla.redhat.com/show_bug.cgi?id=1200302
  - https://bugzilla.redhat.com/show_bug.cgi?id=1976053
  - Resolves: rhbz#2008200


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-10
changelog:
  - Storing and restoring alterntives during update manually
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008200


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-12
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2051605


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:17.0.2.0.8-13
changelog:
  - Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy
    secmod.db file as part of nss
  - Resolves: rhbz#2023536


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-15
changelog:
  - Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode
  - Resolves: rhbz#2052070


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2008517


author: Ray Strode <rstrode@redhat.com> - 0.6.55-4
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations
    Resolves: #1919300


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-4
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2021559


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-5
changelog:
  - Refactor build functions so we can build just HotSpot without any attempt at installation.
  - Sync gdb test with java-1.8.0-openjdk.
  - Improve architecture restrictions for the gdb test.
  - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
  - Related: rhbz#2052809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-6
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052816


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1
changelog:
  - Update to jdk-11.0.14.1+1
  - Update release notes to 11.0.14.1+1
  - Require tzdata 2021e as of JDK-8275766.
  - Resolves: rhbz#2052809
  - Resolves: rhbz#1966234


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-6
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052827


author: Benjamin Berg <bberg@redhat.com> - 3.28.2-29
changelog:
  - Backport SAE/WPA3/OWE support
    Resolves: #1915411
    Resolves: #2023156
  - Add patch to fix wifi performance issue
    Resolves: #1938323


author: Benjamin Berg <bberg@redhat.com> - 3.28.2-30
changelog:
  - Fix connection list AP selection and SSID display for OWE
    Resolves: #2023156
  - Fix saving passwords for non-wifi connections
    Resolves: #1938944


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-2
changelog:
  - CVE fix for: CVE-2021-4008 (#2038066), CVE-2021-4009 (#2038068),
    CVE-2021-4010 (#2038071), CVE-2021-4011 (#2038073)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-1.el8
changelog:
  - Rebase to latest upstream release [bz#2018386]
  - Resolves: bz#2018386
    ([rebase] update edk2 to nov '21 release (edk2-stable202111xx))


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-2
changelog:
  - edk2-OvmfPkg-AmdSev-SecretPei-Mark-SEV-launch-secret-area.patch [bz#2041754]
  - Resolves: bz#2041754
    (Mark SEV launch secret area as reserved)


author: Brian C. Lane <bcl@redhat.com> 28.14.63-1
changelog:
  - Handle all possible dnf group_install errors (bcl)
    Related: rhbz#1947958
  - runtime-install: Install nvme-cli tool (bcl)
    Related: rhbz#1903339


author: Brian C. Lane <bcl@redhat.com> 28.14.64-1
changelog:
  - mkksiso: Check the length of the filenames (bcl)
    Related: rhbz#2028048
  - mkksiso: Check the iso's arch against the host's (bcl)
    Related: rhbz#2028048
  - mkksiso: Add missing implantisomd5 tool requirements (bcl)
    Related: rhbz#2028048
  - mkksiso: Raise error if no volume id is found (bcl)
    Related: rhbz#2028048
  - mount: Add aarch64 and s390x support to IsoMountopoint (bcl)
    Resolves: rhbz#2028089
  - mkksiso: Skip mkefiboot for non-UEFI isos (bcl)
    Resolves: rhbz#2028097
  - mkksiso: Add -joliet-long (bcl)
    Resolves: rhbz#2028044
  - mkksiso: Return 1 on errors (bcl)
    Resolves: rhbz#2028048
  - Increase boot.iso rootfs to 4GiB (bcl)
    Resolves: rhbz#2028059
  - Fix specfile to match the one from dist-git (bcl)
    Related: rhbz#2001942


author: Brian C. Lane <bcl@redhat.com> 28.14.67-1
changelog:
  - mkksiso: Fix the order of the ppc mkisofs command (bcl)
    Related: rhbz#2049205
  - mkksiso: mkfsiso argument order matters (bcl)
    Resolves: rhbz#2049205
  - mkksiso: Improve debug message about unsupported arch (bcl)
    Related: rhbz#2049190
  - mkksiso: Add kickstart to s390x cdboot.prm (bcl)
    Resolves: rhbz#2049190


author: Martin Pitt <mpitt@redhat.com> - 255-1
changelog:
  - Machines: Parse supported disk bus types from domcapabities (rhbz#1862779)
  - Machines: Stop exposing unattended installation option for ISO installation
    media (rhbz#1868594)


author: Katerina Koukiou <kkoukiou@redhat.com> - 257-1
changelog:
  - Machines: Now officially supported on Arch Linux (https://archlinux.org/)
  - Machines: Support selecting between consoles of the same type


author: Matej Marusak <mmarusak@redhat.com> - 261-1
changelog:
  - storage: Unmounting or deleting a busy filesystem is now supported
  - Tests improvements and stabilization
  - Machines: Delete disks only after VM is successfully undefined and destroyed (rhbz#2031678)
  - Machines: Do not change "startVm" value when selecting Unattended installation (rhbz#2033603)


author: Martin Pitt <mpitt@redhat.com> - 263-1
changelog:
  - Overview: Show scheduled shutdowns
  - Networking: Add firewall service description
  - Shell: Fix browser history


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-79
changelog:
  - fence_amt_ws: fix "or" causing dead code
    Resolves: rhbz#2010710
  - fence_gce: add proxy support
    Resolves: rhbz#1969953


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-188
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045063).


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-1
changelog:
  - Allow per-host fence delays for a single fence device
  - Use OCF 1.1 enum type in cluster option metadata for better validation
  - crm-resource --force-* now works with LSB resources
  - Allow spaces in pcmk_host_map
  - ACL group names are no longer restricted to a unique XML id
  - Rebase on upstream 2.1.2
  - Ensure upgrades get compatible Corosync libraries
  - Resolves: rhbz1082146
  - Resolves: rhbz1281463
  - Resolves: rhbz1346014
  - Resolves: rhbz1376538
  - Resolves: rhbz1384420
  - Resolves: rhbz2011973
  - Resolves: rhbz2027006


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-2
changelog:
  - Correctly get metadata for systemd agent names that end in '@'
  - Use correct OCF 1.1 syntax in ocf:pacemaker:Stateful meta-data
  - Fix regression in displayed times in crm_mon's fence history
  - Resolves: rhbz2003151
  - Resolves: rhbz2027370
  - Resolves: rhbz2032027


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-3
changelog:
  - Improve display of failed actions
  - Handle certain probe failures as stopped instead of failed
  - Update pcmk_delay_base description in option meta-data
  - Avoid crash when using clone notifications
  - Retry Corosync shutdown tracking if first attempt fails
  - Resolves: rhbz1470834
  - Resolves: rhbz1506372
  - Resolves: rhbz2027370
  - Resolves: rhbz2039675
  - Resolves: rhbz2042550


author: Davide Caratti <dcaratti@redhat.com> - 2.9-16
changelog:
  - disable 'badfuncs' rpminspect test
  - change default value of CONFIG_TLS_DEFAULT_CIPHERS to allow using OpenSSL
    to compute 3DES


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-6
changelog:
  - Resolves: rhbz#1980800 allow convert to csv to write each sheet to
    separate file
  - Resolves: rhbz#1992695 two style tags where there should be one


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-7
changelog:
  - Resolves: rhbz#2013858 CVE-2021-25633
  - Resolves: rhbz#2014215 CVE-2021-25634
  - Resolves: rhbz#2014209 CVE-2021-25635


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-9
changelog:
  - Related: rhbz#2029810 set NoDisplay=true for .desktop on s390x/aarch64
  - Related: rhbz#2029810 don't Require any vclplug for s390x/aarch64


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.1-1
changelog:
  - Payload should wait for all storage related threads to finish (mkolman)
    Resolves: rhbz#2007615
  - Remove misleading warning about inst.ks.device replacing ksdevice (rvykydal)
    Resolves: rhbz#2002722


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.2-1
changelog:
  - Make network spoke GUI more robust in cases of missing NM Client. (rvykydal)
    Resolves: rhbz#2003115
  - Do not crash on missing NM Client on --vnc installations (rvykydal)
    Related: rhbz#2003115
  - In installer environment set static, not transient hostname (rvykydal)
    Resolves: rhbz#1975349
  - Add product config for AlmaLinux (andrew.lukoshko)
    Resolves: rhbz#2003692
  - Fix creation of user account with empty password (mkolman)
    Resolves: rhbz#1687315


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.3-1
changelog:
  - Fix application of network --mtu kickstart option in Anaconda (rvykydal)
    Resolves: rhbz#2018301
  - Configure the multilib policy of the target system (vponcova)
    Resolves: rhbz#1571727
  - network: apply kickstart network --nodefroute also from stage2 (rvykydal)
    Resolves: rhbz#1990145


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.4-1
changelog:
  - Wait for all background threads to finish before filling installation task
    queue (mkolman)
    Resolves: rhbz#1824422


author: Martin Kolman <mkolman@redhat.com> - 33.16.6.5-1
changelog:
  - Fix the status of the root configuration screen (vponcova)
    Related: rhbz#1981807
  - Fix the condition for entering the root configuration (vponcova)
    Related: rhbz#1981807
  - Fix the condition for completing the root configuration (vponcova)
    Resolves: rhbz#1981807


author: Vendula Poncova <vponcova@redhat.com> - 33.16.6.6-1
changelog:
  - Bump subscription-manager version (mkolman)
    Related: rhbz#1968574
  - Improve UX in Simple Content Access mode (mkolman)
    Resolves: rhbz#1968574
  - Add IsSimpleContentAccessEnabled property (mkolman)
    Related: rhbz#1968574
  - Add support for SCA mode detection from registration data (mkolman)
    Related: rhbz#1968574


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.7-1
changelog:
  - ovirt: move /var/tmp and /var/crash to own partition (sbonazzo)
    Resolves: rhbz#2057475
  - Tier 0 Localization
    Resolves: rhbz#2016918


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-4
changelog:
  - CVE fix for: CVE-2021-4008 (#2030162), CVE-2021-4009 (#2030172),
    CVE-2021-4010 (#2030175), CVE-2021-4011 (#2030181)


author: Mark Wielaard <mjw@redhat.com> - 3.18.1-5
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch
  - Add valgrind-3.18.1-condvar.patch
  - Add valgrind-3.18.1-demangle-namespace.patch


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-1
changelog:
  - Revert "Replace pydbus with dasbus"
  - Fix typos in --help, man pages and developer's guide (#2028226)
  - Do not use Python slip package
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Fix plugin exception reporting
  - export alert dbus signal
  - Make sure local_policy_package is not None
  - sealert: add "Last Seen" column to alert list


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-41
changelog:
  - 2006987 - Unauthenticated users can't move print jobs in Web UI
  - 2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited
  - 1726383 - "lpadmin -p <queue> -o cupsSNMPSupplies:false" doesn't work
  - 1982891 - Printing of banner before PCL file only prints banner
  - 2006591 - Trying to restart and hold a job doesn't work
  - 1811716 - lpr to non-existent printer reports incorrect error


author: Wen Liang <wenliang@redhat.com> - 1:1.36.0-0.3
changelog:
  - Upgrade to 1.35.3 release (development)
  - device: fix update of the ip-iface property (rh #2027490)
  - platform: add bpf filter to ignore routes from routing daemons (rh #1861527)


author: Wen Liang <wenliang@redhat.com> - 1:1.36.0-0.4
changelog:
  - Upgrade to 1.35.4 release (development)
  - ipv4ll: fix assert on external LL address removal (rh #2028404)
  - openvswitch: add DPDK n_rxq configuration option (rh #2001563)
  - device: ignore ndisc signal if device has no ifindex (rh #2013266)
  - bluetooth: fix invalid assertion in NMBluezManager:dispose() (rh #2028427)
  - supplicant: enable SAE-H2E (rh #2019396)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.6
changelog:
  - Upgrade to 1.35.6 release (development)
  - Move ifup/ifdown scripts to new NetworkManager-initscripts-updown package (rh #2022418)
  - wwan: fix assertion failure in modem/ppp code (rh #2028385)
  - core: fix performance regression with 500vlans test (rh #2028849)
  - core: drop defective BPF filter for netlink sockets that caused hangs (rh #2037411)
  - initrd: add support for rd.znet_ifnames (rh #1980387)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.7
changelog:
  - Upgrade to 1.35.7 release (development)
  - core: fix crash related to DHCPv6 leases (rh #2028849)
  - wifi: fix stale ActiveAccessPoint in D-Bus (rh #1983747)
  - libnm: fix dangling pointer in NMObject (rh #2039331)


