# changelog

author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.3-1
changelog:
  - Check source type directly, not via DBus (mkolman)
    Resolves: rhbz#1941578
  - Remove autostep functionality (vslavik)
    Resolves: rhbz#1976913
  - Make it possible to skip install time Insights errors (mkolman)
    Resolves: rhbz#1931069
  - Fix CDN button visibility (mkolman)
    Resolves: rhbz#1903178
  - network: do not bind virtual devices to mac (rvykydal)
    Resolves: rhbz#1963834
  - Add a log message for successful installation (vslavik)
    Resolves: rhbz#1949487


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.4-1
changelog:
  - Disable anaconda-core's requirement on subscription-manager on CentOS (carl)
    Resolves: rhbz#1984958
  - Show suggestions for an error caused by inconsistent sector sizes (vponcova)
    Resolves: rhbz#1935722
  - Use a custom stylesheet to define CentOS-specific stylesheet data (carl)
    Related: rhbz#1974149
  - Use RHEL help content for RHV/Ovirt (mkolman)
    Resolves: rhbz#1915910
  - Move post installation scripts to the end of queue (lveyde)
    Resolves: rhbz#1970879
  - Do not generate dracut arguments multiple times for some storage devices
    (rvykydal)
    Related: rhbz#1937208
  - Make failure in generating of dracut arguments for iSCSI device non-fatal.
    (rvykydal)
    Resolves: rhbz#1937208


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.1-1
changelog:
  - Payload should wait for all storage related threads to finish (mkolman)
    Resolves: rhbz#2007615
  - Remove misleading warning about inst.ks.device replacing ksdevice (rvykydal)
    Resolves: rhbz#2002722


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.2-1
changelog:
  - Make network spoke GUI more robust in cases of missing NM Client. (rvykydal)
    Resolves: rhbz#2003115
  - Do not crash on missing NM Client on --vnc installations (rvykydal)
    Related: rhbz#2003115
  - In installer environment set static, not transient hostname (rvykydal)
    Resolves: rhbz#1975349
  - Add product config for AlmaLinux (andrew.lukoshko)
    Resolves: rhbz#2003692
  - Fix creation of user account with empty password (mkolman)
    Resolves: rhbz#1687315


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.3-1
changelog:
  - Fix application of network --mtu kickstart option in Anaconda (rvykydal)
    Resolves: rhbz#2018301
  - Configure the multilib policy of the target system (vponcova)
    Resolves: rhbz#1571727
  - network: apply kickstart network --nodefroute also from stage2 (rvykydal)
    Resolves: rhbz#1990145


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.4-1
changelog:
  - Wait for all background threads to finish before filling installation task
    queue (mkolman)
    Resolves: rhbz#1824422


author: Martin Kolman <mkolman@redhat.com> - 33.16.6.5-1
changelog:
  - Fix the status of the root configuration screen (vponcova)
    Related: rhbz#1981807
  - Fix the condition for entering the root configuration (vponcova)
    Related: rhbz#1981807
  - Fix the condition for completing the root configuration (vponcova)
    Resolves: rhbz#1981807


author: Vendula Poncova <vponcova@redhat.com> - 33.16.6.6-1
changelog:
  - Bump subscription-manager version (mkolman)
    Related: rhbz#1968574
  - Improve UX in Simple Content Access mode (mkolman)
    Resolves: rhbz#1968574
  - Add IsSimpleContentAccessEnabled property (mkolman)
    Related: rhbz#1968574
  - Add support for SCA mode detection from registration data (mkolman)
    Related: rhbz#1968574


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.7-1
changelog:
  - ovirt: move /var/tmp and /var/crash to own partition (sbonazzo)
    Resolves: rhbz#2057475
  - Tier 0 Localization
    Resolves: rhbz#2016918


author: Pino Toscano <ptoscano@redhat.com> - 1.10.1-6
changelog:
  - Semanage: new lens (RHBZ#1652840)
  - Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
    (RHBZ#1653768)


author: Pino Toscano <ptoscano@redhat.com> - 1.12.0-5
changelog:
  - Fix completion with special characters in augtool. (RHBZ#1232224)
  - Krb5: improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1798486)
  - Systemd: improve parsing of quoted variables of Environment (RHBZ#1798922)


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.2-4
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Jiri Kucera <jkucera@redhat.com> - 1.13.0-1
changelog:
  - Backport patch to fix CompressedRowSparseMatrixTest.AppendRows test failure
    (see https://github.com/ceres-solver/ceres-solver/issues/383)
    Resolves: #1609969


author: Matej Marusak <mmarusak@redhat.com> - 261-1
changelog:
  - storage: Unmounting or deleting a busy filesystem is now supported
  - Tests improvements and stabilization
  - Machines: Delete disks only after VM is successfully undefined and destroyed (rhbz#2031678)
  - Machines: Do not change "startVm" value when selecting Unattended installation (rhbz#2033603)


author: Martin Pitt <mpitt@redhat.com> - 263-1
changelog:
  - Overview: Show scheduled shutdowns
  - Networking: Add firewall service description
  - Shell: Fix browser history


author: Martin Pitt <mpitt@redhat.com> - 269-1
changelog:
  - Show base-10 units by default (rhbz#1970119)
  - Apps: Fix i18n (rhbz#2018389)
  - Software Updates: Install kpatches only (rhbz#2039989)
  - Machines: Fix deleting net interfaces with non-unique MAC address (rhbz#1867478)
  - Machines: Create disks with random/customizable serial number (rhbz#2036330)
  - Machines: Fix network interface source icon (rhbz#2063680)


author: Martin Pitt <mpitt@redhat.com> - 273-1
changelog:
  - Software Updates: Optionally reboot after updating
   - Machines: Show toast notication if VM's storage deletion fails (rhbz#2105984)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-18
changelog:
  - http: send payload when (proxy) authentication is done (#1918692)
  - curl: Inferior OCSP verification (CVE-2020-8286)
  - libcurl: FTP wildcard stack overflow (CVE-2020-8285)
  - curl: trusting FTP PASV responses (CVE-2020-8284)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-19
changelog:
  - make `curl --head file://` work as expected (#1947493)
  - prevent automatic referer from leaking credentials (CVE-2021-22876)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-21
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix TELNET stack contents disclosure (CVE-2021-22898)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
  - disable metalink support to fix the following vulnerabilities
      CVE-2021-22923 - metalink download sends credentials
      CVE-2021-22922 - wrong content via metalink not discarded


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-22
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-23
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-24
changelog:
  - fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
  - fix invalid type in printf() argument detected by Coverity


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-25
changelog:
  - setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-22
changelog:
  - Use hangup signal instead of termination signal to
    kill sesssion monitoring script to appeach tcsh.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-23
changelog:
  - Address race for very short running sessions in SSH
    session monitoring script.
    Related: #2089362


author: Omair Majid <omajid@redhat.com> - 6.0.100-1
changelog:
  - Fix build against clang 13
  - Resolves: RHBZ#2003061
  - Resolves: RHBZ#2015536
  - Resolves: RHBZ#2014666


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-2.el8
changelog:
  - edk2-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch [bz#1844682]
  - edk2-OvmfPkg-GenericQemuLoadImageLib-log-Not-Found-at-INF.patch [bz#1844682]
  - edk2-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch [bz#1844682]
  - Resolves: bz#1844682
    (silent build of edk2-aarch64 logs DEBUG_ERROR messages that don't actually report serious errors)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-3.el8
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-pause-in-WaitForSemaphore-.patch [bz#1861718]
  - Resolves: bz#1861718
    (Very slow boot when overcommitting CPU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-4.el8
changelog:
  - edk2-OvmfPkg-SmmControl2Dxe-negotiate-ICH9_LPC_SMI_F_CPU_.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-befo.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-afte.patch [bz#1849177]
  - edk2-CryptoPkg-OpensslLib-Upgrade-OpenSSL-to-1.1.1g.patch [bz#1893806]
  - edk2-redhat-bump-OpenSSL-dist-git-submodule-to-1.1.1g-RHE.patch [bz#1893806]
  - Resolves: bz#1849177
    (OVMF: negotiate "SMI on VCPU hotplug" with QEMU)
  - Resolves: bz#1893806
    (attempt advancing RHEL8 edk2's OpenSSL submodule to RHEL8 OpenSSL 1.1.1g (or later))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-5.el8
changelog:
  - edk2-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch [bz#1892318]
  - edk2-redhat-add-OVMF-binary-that-will-support-SEV-ES.patch [bz#1956837]
  - Resolves: bz#1892318
    (edk2: possible heap corruption with LzmaUefiDecompressGetInfo [rhel-8])
  - Resolves: bz#1956837
    (Additional build of edk2 without SMM (dual build / sub-package) for SEV-ES)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-1
changelog:
  - Rebase to edk2-stable202105 [bz#1938238]
  - Resolves: bz#1938238
    ((edk2-rebase-rhel-8.5) - rebase edk2 to edk2-stable202105 for RHEL-8.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-2
changelog:
  - edk2-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch [bz#1956408]
  - Resolves: bz#1956408
    (edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe [rhel-8.5.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-3
changelog:
  - edk2-MdeModulePkg-PartitionDxe-Ignore-PMBR-BootIndicator-.patch [bz#1988762]
  - Resolves: bz#1988762
    (edk2 does not ignore PMBR protective record BootIndicator as required by UEFI spec)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-1.el8
changelog:
  - Rebase to latest upstream release [bz#2018386]
  - Resolves: bz#2018386
    ([rebase] update edk2 to nov '21 release (edk2-stable202111xx))


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-2
changelog:
  - edk2-OvmfPkg-AmdSev-SecretPei-Mark-SEV-launch-secret-area.patch [bz#2112307]
  - Resolves: bz#2112307
    (Mark SEV launch secret area as reserved)


author: Camilla Conte <cconte@redhat.com> - 20220126gitbb1bba3d77-3
changelog:
  - Bumping OpenSSL version [bz# 2074834]
  - Resolves: bz# 2074834
    (edk2: sync openssl sources with rhel openssl rpm)


author: Tomas Orsava <torsava@redhat.com> - 4.1.2-2
changelog:
  - Switch hardcoded python3 shebangs into the %{__python3} macro
  - Add missing BuildRequires on python3-devel so that %{__python3} macro is
    defined


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-79
changelog:
  - fence_amt_ws: fix "or" causing dead code
    Resolves: rhbz#2010710
  - fence_gce: add proxy support
    Resolves: rhbz#1969953


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - Rebase package to include support for latest OEM hardware and to
    support deploying UEFI SecureBoot dbx updates.
  - Resolves: #1870811


author: Richard Hughes <richard@hughsie.com> 1.5.5-2
changelog:
  - Do not invalidate all remote timestamps during package install to fix rpm -V.
  - Backport some important high priority fixes from upstream.
  - Resolves: #1926382


author: Richard Hughes <richard@hughsie.com> 1.5.9-3
changelog:
  - Rebase to include the SBAT metadata section to allow fixing BootHole
  - Resolves: rhbz#1933012
  - Resolves: rhbz#1932953
  - Resolves: rhbz#1932909
  - Resolves: rhbz#1932882
  - Resolves: rhbz#1932579
  - Resolves: rhbz#1932553
  - Resolves: rhbz#1932423


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport upstream changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1969472
  - Resolves: rhbz#1976408


author: Richard Hughes <richard@hughsie.com> 1.7.1-2
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Resolves: rhbz#2029333


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Resolves: rhbz#2038258
  - Resolves: rhbz#2037294


author: Richard Hughes <richard@hughsie.com> - 1.0-1
changelog:
  - New upstream release
  - This fixes the security bug known as CVE-2018-5345
  - Add new API for fwupd
  - Do not encode timezone in generated files
  - Fix countless memory leaks when parsing corrupt files
  - Fix the calculation of the checksum on big endian machines
  - Switch to the Meson buildsystem


author: Nick Clifton <nickc@redhat.com> - 9.21-1
changelog:
  - Initial check-in for scl-gcc-toolset-10 branch.  (#1817171)
  - Fix stack clash protection problem. (#1803173)


author: Nick Clifton <nickc@redhat.com> - 9.29-1
changelog:
  - Fix AArch64 checks in annobin plugin.  (#1873416)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Marek Polacek <polacek@redhat.com> 10.2.1-2
changelog:
  - update from Fedora gcc 10.2.1-2
  - emit debug info for C/C++ external function declarations used in the TU
    (PR debug/96383)
  - discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
  - strip also -flto=auto from optflags


author: Marek Polacek <polacek@redhat.com> 10.2.1-8
changelog:
  - update from Fedora gcc 10.2.1-8 (#1878887)
  - emit DW_AT_declaration on declaration-only DIEs (#1897272, PR debug/97060)
  - add BuildRequires: make and Requires: make, the latter for -flto reasons


author: Marek Polacek <polacek@redhat.com> 10.3.1-1
changelog:
  - update from Fedora gcc 10.3.1-1 (#1929382)
  - drop gcc10-pr97060.patch
  - use --enable-cet
  - ship gcc-accel-nvptx-none-lto-dump
  - backport PR96939 fixes


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Martin Osvald <mosvald@redhat.com> - 9.25-2
changelog:
  - Resolves: #1652937 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c
  - Resolves: #1642586 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1642580 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1642941 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1656336 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)
  - Resolves: #1660571 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660830 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661280 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)
  - Resolves: #1668891 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators (700317)


author: Martin Osvald <mosvald@redhat.com> - 9.25-3
changelog:
  - Resolves: #1692798 - CVE-2019-3839 ghostscript: missing attack vector
    protections for CVE-2019-6116
  - Resolves: #1678170 - CVE-2019-3835 ghostscript: superexec operator
    is available (700585)
  - Resolves: #1691414 - CVE-2019-3838 ghostscript: forceput in DefineResource
    is still accessible (700576)
  - fix included for ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata
  - fix for pdf2dsc regression added to allow fix for CVE-2019-3839


author: Martin Osvald <mosvald@redhat.com> - 9.25-5
changelog:
  - Resolves: #1744011 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744015 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744006 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744231 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: Richard Lescak <rlescak@redhat.com> - 9.27-3
changelog:
  - fixed drifting text to the right when printing
  - added Requirement for jbig2dec
  - added patch for CVE-2020-16301
  - Resolves: rhbz#2097515, rhbz#2097448


author: Björn Esser <fedora@besser82.io> - 0.3.3-12
changelog:
  - Rebuilt for /lib64/libglog.so: undefined reference to
    'gflags::FlagRegisterer::FlagRegisterer'-madness


author: Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57
changelog:
  - fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
    bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
    bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
    bz#1945143 bz#1946171 bz#1957191 bz#1957641


author: Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60
changelog:
  - fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
    bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205


author: Robbie Harwood <rharwood@redhat.com> - 2.06-127
changelog:
  - ppc64le: CAS improvements, prefix detection, and vTPM support
  - Resolves: #2076795
  - Resolves: #2026568
  - Resolves: #2051331


author: Robbie Harwood <rharwood@redhat.com> - 2.06-137
changelog:
  - CVE fixes for 2022-06-07
  - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
  - CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
  - Resolves: #2070687


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-38
changelog:
  - grubby-bls: don't print rpm-sort error messages
    Resolves: rhbz#1731924
  - grubby-bls: remove -o option and support -c for ppc64le grub config
    Resolves: rhbz#1758598
  - grubby-bls: fix logic to check if the kernelopts var is defined in a BLS
    Resolves: rhbz#1726514
  - grubby-bls: don't update grubenv when generating grub.cfg for ppc64le
    Related: rhbz#1726514


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-39
changelog:
  - grubby-bls: strip only /boot from paths
    Resolves: rhbz#1738238
  - Make grubby to also update GRUB_CMDLINE_LINUX in /etc/default/grub
    Resolves: rhbz#1152027
  - grubby-bls: fix corner case when a kernel param value contains a '='
    Resolves: rhbz#1787584
  - grubby-bls: update man page to match options in current wrapper script
    Resolves: rhbz#1812065
  - grubby-bls: always escape the delimiter character used in sed commands
    Related: rhbz#1787584
  - grubby-bls: add a --no-etc-grub-update option
    Related: rhbz#1152027


author: David King <dking@redhat.com> - 3.22.30-9
changelog:
  - Fix treeview a11y refcounting (#2032438)
  - Be quiet on exit under X11 (#1887266)
  - Avoid cellarea resize crash (#2032437)


author: Jan Macku <jamacku@redhat.com> - 10.00.8-1
changelog:
  - rwtab: Add support for chrony
  - ifup-eth: Switch to bc utility, which supports floating point computations.
  - Replace grep -EL with subshell since -L changed behaviour


author: Jan Macku <jamacku@redhat.com> - 10.00.10-1
changelog:
  - Allow updating rfkill switch status while in readonly root mode
  - service: Prevent variables from globbing
  - Allow updating mlocate.db while in readonly root mode


author: Jan Macku <jamacku@redhat.com> - 10.00.16-1
changelog:
  - rename_device: also support dracut-style kernel cmdline configuration
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race


author: Jan Macku <jamacku@redhat.com> - 10.00.17-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ci: introduce GA ci from master to rhel8-branch
  - ci: Setup packit for RHEL8 branch
  - ci: Get rid of old ci files (travis and zanata)


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.8-8
changelog:
  - Backport latest test fixes in python3-ipatests
    Resolves: RHBZ#2060841
  - extdom: user getorigby{user|group}name if available
    Resolves: RHBZ#2062379
  - Set the mode on ipaupgrade.log during RPM post snipppet
    Resolves: RHBZ#2061957
  - test_krbtpolicy: skip SPAKE-related tests in FIPS mode
    Resolves: RHBZ#1909630


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.10-1
changelog:
  - Rebase to upstream release 4.9.10
    Remove upstream patches 0002 to 0016 that are part of version 4.9.10
    Remove patches 1101 that is part of version 4.9.10
    Rename patch 0001 to 1002 as it will be used in future RHEL 8 releases
    Add patches 0001 and 0002 to fix build on RHEL 8.7
    Resolves: RHBZ#2079466
    Resolves: RHBZ#2063155
    Resolves: RHBZ#1958777
    Resolves: RHBZ#2068088
    Resolves: RHBZ#2004646
    Resolves: RHBZ#782917
    Resolves: RHBZ#2059396
    Resolves: RHBZ#2092015


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.10-2
changelog:
  - Preserve user: fix the confusing summary
    Resolves: RHBZ#2022028
  - Only calculate LDAP password grace when the password is expired
    Related: RHBZ#782917


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.10-6
changelog:
  - webui: Allow grace login limit
    Resolves: RHBZ#2109243
  - check_repl_update: in progress is a boolean
    Resolves: RHBZ#2117303
  - Disabling gracelimit does not prevent LDAP binds
    Resolves: RHBZ#2109236
  - Set passwordgracelimit to match global policy on group pw policies
    Resolves: RHBZ#2115475


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.10-8
changelog:
  - Defer creating the final krb5.conf on clients
    Resolves: RHBZ#2150246
  - Vault: fix interoperability issues with older RHEL systems
    Resolves: RHBZ#2148255


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-5
changelog:
  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633617


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-7
changelog:
  - Resolves: rhbz#1634268 - ECP signature check fails with
                             LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when
                             assertion signed instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-8
changelog:
  - Resolves: rhbz#1730018 - lasso includes "Destination" attribute in SAML
                             AuthnRequest populated with SP
                             AssertionConsumerServiceURL when ECP workflow
                             is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-9
changelog:
  - Resolves: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (coming
                             from lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-10
changelog:
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-11
changelog:
  - Bump release to force the package through OSCI as the previous
    build reached CI just in time for an outage
  - Related: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (comingfrom lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-12
changelog:
  - Fix a dead code issue in the signature wrapping patch
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Julien Rische <jrische@redhat.com> - 1.18.2-21
changelog:
  - Backport fix of memory use after free during libkrad cleanup
  - Backport support for larger RADIUS attributes in libkrad
  - Resolves: rhbz#2103125


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.10-3
changelog:
  PMTUd: Fix MTU calculation when using crypto
    Resolves: rhbz#1736872
    host: Fix defrag buffer reclaim logic that could cause delivery
          of corrupted data
    ResolveS: rhbz#1761711


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-12
changelog:
  - Use cryptsetup to check LUKS2 label
    Resolves: rhbz#1778689
  - Fix expected cache pool name with newest LVM
    Related: rhbz#1778689


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: David Tardon <dtardon@redhat.com> - 0.3.11-3
changelog:
  - Resolves: rhbz#1461763 CVE-2017-9433 Out-of-bounds write in the
    MsWrd1Parser::readFootnoteCorrespondence function


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-6
changelog:
  - Resolves: rhbz#1980800 allow convert to csv to write each sheet to
    separate file
  - Resolves: rhbz#1992695 two style tags where there should be one


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-7
changelog:
  - Resolves: rhbz#2013858 CVE-2021-25633
  - Resolves: rhbz#2014215 CVE-2021-25634
  - Resolves: rhbz#2014209 CVE-2021-25635


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-9
changelog:
  - Related: rhbz#2029810 set NoDisplay=true for .desktop on s390x/aarch64
  - Related: rhbz#2029810 don't Require any vclplug for s390x/aarch64


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Ales Matej <amatej@redhat.org> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - selected bug fixes:
    * fix updating of too many packages in focusbest mode
    * fix handling of disabled installed packages in distupgrade
    * fix repository priority handling for multiversion packages
    * better support of inverval deps in pool_match_dep()
    * support src rpms that have non-empty provides
    * fix favorq leaking between solver runs if the solver is reused
    * fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason
    * be more correct with multiversion packages that obsolete their
      own name
    * allow building with swig-4.0.0
    * lock jobs now take precedence over dup and forcebest jobs
  - new features
    * new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag 
    * bindings: add get_disabled_list() and set_disabled_list()
    * bindings: add whatcontainsdep()
    * bindings: make the selection filters return the self object
    * MSVC compilation support


author: Ales Matej <amatej@redhat.org> - 0.7.11-1
changelog:
  - Update to 0.7.11
  - selected bug fixes:
    * support arch<->noarch package changes when creating patch
      conflicts from the updateinfo data
    * also support other rpm database types
    * fixed solv_zchunk decoding error if large chunks are used
    * treat retracted pathes as irrelevant
    * made add_update_target work with multiversion installs
  - new features
    * support for SOLVER_BLACKLIST jobs that block the installation of matched
      packages unless they are directly selected by an SOLVER_INSTALL job
    * libsolv now also parses the patch status in the updateinfo parser
    * new solvable_matchessolvable() function
    * support conda constrains dependencies
    * new rpm_stat_database() function
    * new rpm_hash_database_state() function


author: Nicola Sella <nsella@redhat.com> - 0.7.16-1
changelog:
  - Update to 0.7.16
  - selected bug fixes:
    * make testcase_mangle_repo_names deal correctly with freed repos
    [bnc#1177238]
    * fix add_complex_recommends() selecting conflicted packages in
      rare cases leading to crashes
    * improve choicerule generation so that package updates are
      prefered in more cases
    * fix deduceq2addedmap clearing bits outside of the map
    * conda: feature depriorization and fix startswith implementation
    * Fix solvable swapping messing up idarrays
    * fix ruleinfo of complex dependencies returning the wrong origin
    * fix solv_zchunk decoding error if large chunks are used
      [bnc#1159314]
  - new features
    * new testcase_mangle_repo_names() function
    * new solv_fmemopen() function
    * Enable zstd compression support for sle15 and sle15-sp2
    * Support blacklisted packages in solver_findproblemrule()
      [bnc#1172135]
    * Support rules with multiple negative literals in choice rule
      generation
    * build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
      multiple rpm database backends
    * added two new function to make libzypp independent of the rpm
      database format
    * support conda constrains dependencies


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.17-1
changelog:
  - Update to 0.7.17
  - selected bug fixes:
    * repo_write: fix handling of nested flexarray
    * improve choicerule generation a bit more to cover more cases
    * harden testcase parser against repos being added too late
    * support python-3.10
    * check /var/lib/rpm macro in rpmdb code
  - new features:
    * handle default/visible/langonly attributes in comps parser
    * support multiple collections in updateinfo parser
    * add '-D' option in rpmdb2solv to set the dbpath


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix error handling in solv_xfopen_fd()
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: David Tardon <dtardon@redhat.com> - 0.0.3-3
changelog:
  - Resolves: rhbz#1458800 CVE-2017-9432 Stack-buffer overflow in the
    StarWriterStruct::DatabaseName::read


author: Jarod Wilson <jarod@redhat.com> - 8.6.10-0.1
changelog:
  - Rebase to upstream v8.6.10 pre-release, use 0.x release number scheme
    as means to differentiate pre-release from release


author: Lyude Paul <lyude@redhat.com> - 8.4.0-2.20181118git1830dcb
changelog:
  - Start using proper git version strings for rawhide
  - Enabling building of wayland and freetype demos


author: Honggang Li <honli@redhat.com> - 5.6.2-1
changelog:
  - Update OSU benchmarks to upstream release 5.6.2
  - Update IMB benchmarks to upstream release v2019.6
  - Resolves: rhbz#1817837


author: Honggang Li <honli@redhat.com> - 5.7-2
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960078


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2008517


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Michael Simacek <msimacek@redhat.com> - 2.13.02-1
changelog:
  - Update to upstream version 2.13.02
  - Resolves: CVE-2017-17810, CVE-2017-17811, CVE-2017-17812, CVE-2017-17813,
    CVE-2017-17814, CVE-2017-17815, CVE-2017-17816, CVE-2017-17817,
    CVE-2017-17818, CVE-2017-17819, CVE-2017-17820


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.18.2-4
changelog:
  - remove support for no longer supported Fedora versions (<=25)
  - fix: add %{_libdir}/cmake/OpenAL directory to devel
  - fix: s/_datarootdir/_datadir/ as this package does not uses datarootdir
    but datadir
  - fix: add %{_datadir}/openal to main package as well and to %exclude
    %{_datadir}/openal/{alsoftrc.sample,presets/presets.txt} as those files
    are not needed
  - removed Group fields
    (https://fedoraproject.org/wiki/Packaging:Guidelines#Tags_and_Sections)
  - add use more macros (%autosetup, %make_build, %make_install)


author: Hans de Goede <hdegoede@redhat.com> - 1.18.2-5
changelog:
  - Allow pulseaudio to move openal-soft output streams (rhbz#1544381)
  - Fix release -4 not building (rhbz#1544012)
  - Drop unnecessary qt-devel BuildRequires (we also BuildRequire qt5-devel)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.0-15
changelog:
  - Removed dependency on net-tools
    Resolves: #1496138
  - Removed init script, Group tag and macro from changelog in spec file
  - Slightly modified openssl-1.1 fix to be able build the package
    with OpenSSL version lower than 1.1


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-1
changelog:
  - Update to openwsman-2.6.5
  - Simplify python binding build and drop python2 subpackage
  - Fix malformed HTTP 200 status line


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-3
changelog:
  - Fix wrong SSL_CTX_set_cipher_list() retval check
  - Explicitly disable build of java bindings (build fails if java-devel is installed)


author: Ray Strode <rstrode@redhat.com> - 0.9.4-11.git1688935
changelog:
  - Fix typo in --with-runtimedir argument to actually stop using
    /var/run and instead use /run instead
    Resolves: #2056473


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.3.1-10
changelog:
  - Release bump and rebuild for relengs to be able to ship postfix-pcre,
    postfix-cdb, postfix-sqlite
    Resolves: rhbz#1745321


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.8-2
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1977732


author: Wim Taymans <wtaymans@redhat.com> - 11.1-23
changelog:
  - Add xauthority parameter to X11 modules
  - Fix compilation against newer alsa-lib
  - Resolves: rhbz#1723065


author: Wim Taymans <wtaymans@redhat.com> - 14.0-1
changelog:
  - Update to 14.0
  - Add pulseaudio-daemon' Provides + Conflicts to support
    swapping with PipeWire
  - Resolves: rhbz#1906322


author: Miro Hrončok <mhroncok@redhat.com> - 0.13-1
changelog:
  - Updated to 0.13
  - Added python3 and python2 subpackages
  - Add --with tests
  - Modernize spec
  - Remove merged patch
  - Update upstream URL


author: Lumír Balhar <lbalhar@redhat.com> - 0.14-3
changelog:
  - Backport patch from upstream/rhel7 which allows pifconfig to show
    multiple IPv4 addresses for each interface
  - Move patches to dist-git
  - Resolves: rhbz#1652174


author: Tomas Orsava <torsava@redhat.com> - 2.7.4-3
changelog:
  - Revert switching Python 3 subpackages to the python3X- prefix
  - Switch only the requires for python3-devel/debug to the python36-prefix:
    the rest of the packages in the python36 collection will have the python3
    prefix to be unified with the Python 3 packages for Platform-Python


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.13.14-3
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Miro Hrončok <mhroncok@redhat.com> - 0.15.41-3
changelog:
  - Subpackage python2-ruamel-yaml has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Victor Stinner <vstinner@redhat.com> - 3.6.8-39
changelog:
  - Fix reentrant call to threading.enumerate() (rhbz#1959459)
  - Don't exit Python with abort() when a thread exit and there is no available
    file descriptor to load dynamically the libgcc_s.so.1 library (rhbz#1972293)


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-41
changelog:
  - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
  Resolves: rhbz#1995234


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-43
changelog:
  - Change shouldRollover() methods of logging.handlers to only rollover regular files
  Resolves: rhbz#2009200


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-44
changelog:
  - Use the monotonic clock for theading.Condition
  - Use the monotonic clock for the global interpreter lock
  Resolves: rhbz#2003758


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-45
changelog:
  - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
  Resolves: rhbz#2036020


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-2
changelog:
  - fix cmakes location
  - remove -DENABLE_PKG_CONFIG=OFF (it was neither defined nor used)
  - remove confusing comment
  - WITH_GDAL=OFF (gdal dependency has been already removed)
    Related: #1694647


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-5
changelog:
  - Move libopencv_{calib3d,cvv,hfs}.so.* to their proper packages
  - Fix issues found by rpmdiff
    Related: #1694647


author: Jan Grulich <jgrulich@redhat.com> - 5.12.5-5
changelog:
  - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814739
    Resolves: bz#1814683

  - Fix: XML entity expansion vulnerability
    Resolves: bz#1822193


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-6
changelog:
  - match qdevice-sync_timeout against wd-timeout
  - sync startup/shutdown via pacemakerd-api

    Resolves: rhbz#1703128
    Resolves: rhbz#1743726


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-7
changelog:
  - conflict with pacemaker-libs < 2.0.4-5 instead of requiring
    a minimum pacemaker version

    Resolves: rhbz#1861713


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Javier Martinez Canillas <javierm@redhat.com> - 15-3
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1704854
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717063


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Backport this to EL 8 so we can build-dep on the right version.
    Related: CVE-2020-14372 (and others)


author: Javier Martinez Canillas <javierm@redhat.com> - 15-3
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715878
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717064


author: Peter Jones <pjones@redhat.com> - 15-4
changelog:
  - Rebuild for bug fixes and new signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-5
changelog:
  - Once more with the MokListRT config table patch added.
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Implement Lenny's workaround
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-8
changelog:
  - Fix a load-address-dependent forever loop.
    Resolves: rhbz#1861977
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311
    Related: CVE-2020-15705
    Related: CVE-2020-15706
    Related: CVE-2020-15707


author: Stan Cox <scox@redhat.com> - 4.7-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052604
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Rob Crittenden <rcritten@redhat.com> - 1.51.0-7
changelog:
  - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827)
    (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602)
  - Prevent integer overflow on m_groupSize in doProlog
    (CVE-2021-46143) (#2058560)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-4
changelog:
  - CVE fix for: CVE-2021-4008 (#2030162), CVE-2021-4009 (#2030172),
    CVE-2021-4010 (#2030175), CVE-2021-4011 (#2030181)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-9
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2108156, rhbz#2108161


