# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-6
changelog:
  - Bump version to 1.3.9.1-6
  - Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-7
changelog:
  - Bump version to 1.3.9.1-7
  - Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-8
changelog:
  - Bump version to 1.3.9.1-8
  - Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
  - Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
  - Resolves: Bug 1713361 - Update defaults.inf
  - Resolves: Bug 1708215 - maxlogsperdir accepting negative values
  - Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-9
changelog:
  - Bump version to 1.3.9.1-9
  - Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
  - Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-10
changelog:
  - Bump version to 1.3.9.1-10
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-1
changelog:
  - Bump version to 1.3.10.1-1
  - Resolves: Bug 1639342 - Replace error by warning in the state machine defined in repl5_inc_run
  - Resolves: Bug 1691931 - memory leak in automember plugin
  - Resolves: Bug 1662461 - Log the actual base DN when the search fails with "invalid attribute request"
  - Resolves: Bug 1732053 - etime can contain invalid nanosecond value
  - Resolves: Bug 1546739 - consistency in the replication error codes while setting nsds5replicaid=65535


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-2
changelog:
  - Bump version to 1.3.10.1-2
  - Resolves: Bug 1748199 - EMBARGOED CVE-2019-14824 389-ds-base: 389-ds and IDM: allows authenticated unprivileged user to retrieve content of userPassword field for any user 
  - Resolves: Bug 1610234 - nsslapd-defaultnamingcontext does not change when the assigned suffix got deleted
  - Resolves: Bug 1723545 - Directory Server 10 not RFC 4511 compliant
  - Resolves: Bug 1724914 - LDAP server returning controltype in different sequence
  - Resolves: Bug 1739182 - CleanAllRUV task limit not enforced
  - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache
  - Resolves: Bug 1685059 - After running cl-dump dbdir/cldb/*ldif.done are not deleted


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-3
changelog:
  - Bump version to 1.3.10.1-3
  - Resolves: Bug 1756182 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
  - Resolves: Bug 1749236 - etime displayed has an order of magnitude 10 times smaller than it should be
  - Resolves: Bug 1758109 - AddressSanitizer: heap-use-after-free in import_free_job
  - Resolves: Bug 1676948 - After audit log file is rotated, DS version string is logged after each update
  - Resolves: Bug 1749595 - Extremely slow LDIF import with ldif2db


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-4
changelog:
  - Bump version to 1.3.10.1-4
  - Resolves: Bug 1765106 - ipa-server-install is failing with ipapython.admintool: ERROR failed to create DS instance Command


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5
changelog:
  - Bump version to 1.3.10.1-5
  - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6
changelog:
  - Bump version to 1.3.10.1-6
  - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1803052 - Memory leak in ACI using IP subject
  - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
  - Resolves: Bug 1809160 - Entry cache contention during base search


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7
changelog:
  - Bump version to 1.3.10.1-7
  - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-8
changelog:
  - Bump version to 1.3.10.1-8
  - Resolves: Bug 1809160 - Entry cache contention during base search (Fix crash - part 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1
changelog:
  - Bump version to  1.3.10.2-1
  - Resolves: Bug 1724761 - Entry cache contention during base search
  - Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
  - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
  - Resolves: Bug 1762901 - cenotaph errors on modrdn operations
  - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
  - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
  - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
  - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
  - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
  - Resolves: Bug 1796558 - Memory leak in ACI using IP subject
  - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2
changelog:
  - Bump version to  1.3.10.2-2
  - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
  - Resolves: Bug 1801327 - intermittent SSL hang with rhds
  - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
  - Resolves: Bug 1827284 - Memory leak in indirect COS


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3
changelog:
  - Bump version to 1.3.10.2-3
  - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
  - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5
changelog:
  - Bump version to 1.3.10.2-5
  - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6
changelog:
  - Bump version to 1.3.10.2-6
  - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7
changelog:
  - Bump version to 1.3.10.2-7
  - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
  - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8
changelog:
  - Bump version to 1.3.10.2-8
  - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1902042 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10
changelog:
  - Bump version to 1.3.10.2-10
  - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
  - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
  - Resolves: Bug 1881968 - Replication Lag under high load


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11
changelog:
  - Bump version to 1.3.10.2-11
  - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
  - Resolves: Bug 1931182 - information disclosure during the binding of a DN


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13
changelog:
  - Bump version to 1.3.10.2-13
  - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
  - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
  - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
  - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14
changelog:
  - Bump version to 1.3.10.2-14
  - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
  - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-1
changelog:
  * Bump version to 1.3.9.1-1
  - Resolves: Bug 1438144 - [RFE] Include autounmembering feature in IPA
  - Resolves: Bug 1645359 - Rebase 389-ds-base in RHEL 7.7 to 1.3.9
  - Resolves: Bug 1561769 - [RFE] revise the "transient error" message in a replication agreement's last update status
  - Resolves: Bug 1563999 - Is it possible for Directory server to reject the current password only?
  - Resolves: Bug 1597202 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
  - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass
  - Resolves: Bug 1643587 - default of "nsslapd-errorlog-maxlogsperdir: 1" causing huge log files
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1653163 - certmap fails when Issuer DN has comma in name
  - Resolves: Bug 1602001 - cannot add cenotaph in read only consumer
  - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)
  - Resolves: Bug 1600631 - In repicated topology a single-valued attribute can diverge
  - Resolves: Bug 1626375 - on-line re-initialization hangs
  - Resolves: Bug 1627846 - Contention on virtual attribute lookup
  - Resolves: Bug 1642838 - after certain failed import operation, impossible to replay an import operation
  - Resolves: Bug 1647099 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified 
  - Resolves: Bug 1648922 - during MODRDN referential integrity can fail erronously while updating large groups
  - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy
  - Resolves: Bug 1663829 - import task should not be deleted after import finishes to be able to query the status.
  - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements
  - Resolves: Bug 1622049 - db2bak.pl does not work with LDAPS, but ok with STARTTLS
  - Resolves: Bug 1633488 - fixup-memberof.pl -D cn=<> -w - -b <> -P LDAP fails with ldap_start_tls error
  - Resolves: Bug 1451460 - error messages during ldif2db after enabling encryption on an attribute
  - Resolves: Bug 1627512 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-2
changelog:
  - Bump version to 1.3.9.1-2
  - Resolves: Bug 1417340 - entry cache is not cleaned up if an operation is aborted
  - Resolves: Bug 1603140 - Export produces a non-importable ldif file
  - Resolves: Bug 1518320 - ns-slapd: crash in entrycache_add_int
  - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
  - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-3
changelog:
  - Bump version to 1.3.9.1-3
  - Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
  - Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
  - Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
  - Resolves: Bug 1673472 - the warning about skew time could last forever.
  - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
  - Resolves: Bug 1482596 - referint update should discard any changes if mep update fails


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-4
changelog:
  - Bump version to 1.3.9.1-4
  - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
  - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
  - Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 & 3)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-5
changelog:
  - Bump version to 1.3.9.1-5
  - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
  - Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
  - Resolves: Bug 1615155 - extended search fails to match entries
  - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-11
changelog:
  - Bump version to 1.3.9.1-11
  - Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
  - Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
  - Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
  - Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
  - Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache


author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-10
changelog:
  - Added base IPv6 database to GeoIP package
  - Added GeoIP-data subpackage with all other databases (#1201857)


author: Michal Ruprich <mruprich@redhat.com> - 1.5.0-12
changelog:
  - Removed clean section
  - Resolves: #1589860 - Update GeoIP legacy databases
  - Resolves: #1409060 -  Missing symlink at the GeoIP-update package


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 32 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Jan Horak <jhorak@redhat.com> - 6.7.8.9-15
changelog:
  - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
    rhbz#1326834, rhbz#1334188, rhbz#1269553


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.3.20190408git43d9187c14
changelog:
  - infiniband: allow large MTU (rh #1534869) (rh #1653494)
  - sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)


author: Francesco Giudici <fgiudici@redhat.com> - 1:1.18.0-0.4.20190408git43d9187c14
changelog:
  - keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
  - dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.0-1
changelog:
  - Update to 1.18.0 release
  - cli: fix crash handling gsm secrets (rh #1698495)
  - rules: fix duplicate policy routing rules (rh #1652653)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-2
changelog:
  - cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
  - device: fix reapply of MTU (rh #1702657)
  - settings: fix failed assertion when adding connections (rh #1707261)
  - core: ensure software devices are managed when networking gets enabled (rh #1701585)
  - device: restore IPv6 configuration on link up (rh #1548237)
  - dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
  - core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
  - tc: add suppor for mired action an fq_codel qdisc (rh #1546802)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-3
changelog:
  - team: don't kill teamd for external devices (rh #1711952)
  - ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
  - po: update translations (rh #1689962)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-4
changelog:
  - cli: don't wait forever in the editor on update connection failure (rh #1702203)
  - team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.2.20190404git9a8fe5f339
changelog:
  - Update to a 1.18 snapshot:
  - clients: only ask secrets for settings that require them (rh #1506536)
  - checkpoint: remove a device from checkpoint if it disappears (rh #1578335)
  - lldp: support more VLAN TLVs (rh #1652211)
  - bridge: add VLAN filtering support (rh #1652910)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.4-1
changelog:
  - Update to 1.18.4 release
  - cli: fix bash completion for slave-types (rh #1654062)
  - core: improve handling of policy routing rules when restarting daemon (rh #1696881)
  - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
  - tui: only add bond options to profile that are supported by tui (rh #1715720)
  - cli: fix resetting default value for properties (rh #1715887)
  - core: fix detecting parent device by connection's UUID (rh #1716438)
  - core: fix setting IPv6 route options and destination (rh #1727193)
  - core: support more "arp_validate" bond options (rh #1730793)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2
changelog:
  - dhcp: include conditionals from existing dhclient configuration (rh #1758550)
  - core: fix sending ARP announcements (rh #1767681)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1
changelog:
  - Update to 1.18.6 release
  - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
  - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
  - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.6-2
changelog:
  - vpn: gracefully handle invalid routes from VPN plugins
  - workaround g_strtoll() failing with EAGAIN (rh #1797915)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.8-1
changelog:
  - Update to 1.18.8 relase
  - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
  - ifcfg-rh: handle 802-1x.pin properties.


author: Thomas Haller <thaller@redhat.com> - 1:1.18.8-2
changelog:
  - Backport OVS related fixes (rh #1871935)
  - ovs: support changing the MTU of ovs interfaces (rh #1820052)
  - ovs: fix race condition in setting MAC address (rh #1852106)


author: Nicolas Chauvet <kwizart@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1

  -* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.0-5
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: Boris Ranto <branto@redhat.com> - 2.0.19-12
changelog:
  - New release
  - Move OpenIPMI modprobe conf to /usr/lib/modprobe.d/ (#1195289)
  - Avoid warning on update/removal (#1256798)
  - Stop manually creating and shipping /var/run/OpenIPMI (#1296560)


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-14
changelog:
  - Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
    environment variable to enable it.
  - Resolves: rhbz#1245417


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-17
changelog:
  - Fix Some CVEs: CVE-2019-7572, CVE-2019-7573, CVE-2019-7574,
    CVE-2019-7575, CVE-2019-7576, CVE-2019-7577, CVE-2019-7578,
    CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638
  - Resolves: rhbz#1716201, rhbz#1716202, rhbz#1716206,
  - Resolves: rhbz#1716207, rhbz#1716208


author: Joerg Bruehe <joerg.bruehe@oracle.com>
changelog:
  - Let the installation use the new option "--random-passwords" of "mysql_install_db".
    (Bug# 12794345 Ensure root password)
  - Fix an inconsistency: "new install" vs "upgrade" are told from the (non)existence
    of "$mysql_datadir/mysql" (holding table "mysql.user" and other system stuff).


author: Joerg Bruehe <joerg.bruehe@oracle.com>
changelog:
  - Allow to override the default to use the bundled yaSSL by an option like
        --define="with_ssl /path/to/ssl"


author: dcthxdhuang <dcthxdhuang@tencent.com>
changelog:
  - Add txsql-5.6 cmake option. 
  - Remove mysql embedded module.
  - Modify the package name MySQL-server-5.6.28 change to TXSQL-server-5.6.
  - Add tlinux option flag and platform dependency.


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.14-1.el7
changelog:
  - Rebase to 2.2.14 [bz#1451172]
  - wla-Remove-FIPS-setting-from-the-default-config.patch [bz#1467553]
  - Resolves: bz#1451172
    ([WALA] Request to package WALA 2.2.14 into RHEL 7 Repo)
  - Resolves: bz#1467553
    ([WALA] Remove FIPS from default config in WALA-2.2.14)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.18-1.el7
changelog:
  - Rebase to 2.2.18 [bz#1491873]
  - Resolves: bz#1491873
    ([WALA]Request to package WALA 2.2.18 into RHEL 7 Repo)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.18-2.el7
changelog:
  - wa-Add-show-configuration-option.patch [bz#1508340]
  - Resolves: bz#1508340
    ([WALA] WALA usage prompt lack of " waagent -show-configuration")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.38-1.el7
changelog:
  - Rebase to 2.2.38 [bz#1721727]
  - Resolves: bz#1721727
    ([Azure]walinuxagent 2.2.38 packaging request)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.38-2.el7
changelog:
  - wla-Add-support-for-Gen2-VM-resource-disks-1654.patch [bz#1714167]
  - Resolves: bz#1714167
    ([Azure][WALA] Cannot find temporary disk device in Gen2 VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-1
changelog:
  - Rebase to 2.2.26 [bz#1794682]
  - Resolves: bz#1794682
    ([Azure][RHEL-7]Rebase WALinuxAgent to 2.2.46)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-2
changelog:
  - wla-Update-Provisioning-options-1853.patch [bz#1822883]
  - Resolves: bz#1822883
    ([Azure][RHEL-7]Some parameter changes are not in waagent.conf)


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-49
changelog:
  - Translation updates
  - Stop creating uReports for unpackaged executables
  - koops: add detailed taint flag description for kernel oopses
  - koops: fix kernel oops and fatal MCE recognition
  - python: provide more information about Python exceptions
  - vmcore: fix replication of vmcore files
  - Related: #1271213, #1460224, #1374648, #1361116, #1228344,
  - Related: #1395285, #1214730, #1446410, #1319828, #1501718


author: Matej Marusak <mmarusak@redhat.com> - 2.1.11-51
changelog:
  - a-a-s-p-data: fix segfault if GPGKeysDir isn't configured
  - spec: turn on --enable-native-unwinder aarch64
  - plugins: a-a-g-machine-id use dmidecode command
  - spec: use dmidecode instead of python-dmidecode
  - Related: #1566707, #1566707, #1260074, #1591141


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-53
changelog:
  - cli: load config file at the beginning
  - ccpp: fast dumping and abrt core limit
  - conf: increase MaxCrashReportsSize to 5GiB
  - vmcore: /var/tmp/abrt is no longer a dump location
  - koops: Filter kernel oopses based on logged hostname
  - daemon: Fix double closed fd race condition
  - Related: #1618818, #1647841, #1613236, #1613182, #1655241


author: CentOS Sources <bugs@centos.org> - 2.1.11-55.el7.centos
changelog:
  - Drop RHTS hint
  -  Change by David Mansfield <david@orthanc.cobite.com>
  -  Per http://bugs.centos.org/view.php?id=7192
  - Remove cli suggestion text patch
  - set URL to retrace server
  - update to not run sosreport
  -  Per http://bugs.centos.org/view.php?id=7913


author: Ray Strode <rstrode@redhat.com> - 0.6.45-2
changelog:
  - Don't tread explicitly requested users as cached
    Fixes UncacheUser operation.
    Resolves: 1446620
    Related: #1432602


author: Ray Strode <rstrode@redhat.com> - 0.6.45-6
changelog:
  - Don't return bogus password expiration policy when
    shadow file is unavailable
    Resolves: #1530659


author: Kamil Dudka <dkdudka@redhat.com> - 2.2.51-13
changelog:
  - avoid failure of %check when building as root (#1085389)
  - setfacl.1: document the meaning of '-' in perms (#1337039)


author: Sumit Bose <sbose@redhat.com> - 0.8.1-4
changelog:
  - adcli doesn't update kvno while joining system to AD domain (RODC) [#1471021]
  - adcli_tool_computer_delete description spelling [#1450179]
  - adcli man page should not only mention FILE type credential caches [#1423871]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-5
changelog:
  - enable "Trust this computer for delegation to any service (Kerberos only)" [#1538730]
  - realm join fails with Insufficient permissions [#1542354]
  - adcli update option cannot add principals for computer object [#1545568]
  - adcli refuses to add service principals [#1547013]
  - [RFE] Support adding SPN of a different host [#1547014]
  - adcli segfaults during AD join RHEL 7.5 [#1575554]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-6
changelog:
  - Couldn't set service principals on computer account [#1608212]
  - additional fix #1547014 and #1593240


author: Sumit Bose <sbose@redhat.com> - 0.8.1-7
changelog:
  - use autosetup macro to simplify patch handling
  - fixed rpmlint warnings in the spec file
  - join failed if hostname is not FQDN [#1649868]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-8
changelog:
  - Various updates for RHEL-7.7
  - many adcli-krb5-????? directories are created /tmp [#1588596]
  - adcli exports kerberos ticket with old kvno [#1642546]
  - [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
  - Improve handling of service principals [#1644311]
  - [RFE] adcli command with --unix-* options doesn't update
    values in UnixAttributes Tab for user [#1337489]
  - [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
  - [RFE] Need an option for adcli command which will show domain join status. [#1622583]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-9
changelog:
  - Fixes for RHEL-7.7 updates
  - additional patch for [RFE] adcli join should preserve SPN added by adcli
    preset-computer [#1630187]
  - new patches for many adcli-krb5-????? directories are created /tmp [#1588596]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-10
changelog:
  - adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
    Cannot allocate memory" [1665162]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-11
changelog:
  - Fixes and improvements for RHEL-7.8
  - Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
  - adcli update --add-samba-data does not work as expected [#1738573]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-14
changelog:
  - Fixes for RHEL-7.9
  - Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
  - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-15
changelog:
  - More fixes for RHEL-7.9
  - No longer able to delete computer from AD using adcli [#1840752]
  - adcli: presetting $computer in $domain domain failed: Cannot set computer
    password: Authentication error [#1762633]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-1
changelog:
  - Update to upstream release 0.8.1
  - Rebase adcli in RHEL-7.3 to version 0.8.0 [#1292530]
  - Support Host Keytab renewal [#1288485]
  - realmd not joining AD so ssh gssapi-with-mic works [#1061371]
  - technically wrong length checks in binary parsers  [#1027905]
  - avoid alloca in _adcli_ldap_have_in_mod [#1027889]
  - [RFE] adcli --stdin-password should be able to strip newline character from
    the input [#1134330]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-3
changelog:
  - fix crash when name is specified on the command line and detect names with
    lower case characters [#1359773]


author: Than Ngo <than@redhat.com> - 1.15-21
changelog:
  - Resolves: #1711051, CVE-2019-8383 denial of service
  - Resolves: #1710910, CVE-2019-8379 null pointer dereference


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-6
changelog:
  - warn if processing prelinked binary objects and the prelink binary
    is not available
    Resolves: rbhz#1004826


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-10
changelog:
  - Updated the default configuration file. New defaults contributed
    by Steve Grubb.
    Resolves: rhbz#1304334


author: Josef Ridky <jridky@redhat.com> - 3.3.3-18
changelog:
  - Resolves: #1286330 - set non-blocking connection
  - Resolves: #1299761 - fix amindex: invalid service
  - Resolves: #1306980 - fix problem with handling compressed files


author: Josef Ridky <jridky@redhat.com> - 3.3.3-21
changelog:
  - Resolves: #1417830 - check return value from setreuid method
  - Resolves: #1423040 - fix local authentication issue


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.148-1
changelog:
  - Change Skylake Spectre_V2 default to Retpolines (vponcova)
    Resolves: rhbz#1659626
  - nvdimm: update ks data for actions in UI (rvykydal)
    Resolves: rhbz#1620109
  - nvdimm: use pykickstart constant for setting reconfigure mode (rvykydal)
    Related: rhbz#1620109
  - Skip version when processing kernel boot args (jkonecny)
    Resolves: rhbz#1637112
  - Make save button insensitive in LUKS dialog with no input (mkolman)
    Resolves: rhbz#1489713


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.149-1
changelog:
  - Offer only supported sector sizes in NVDIMM reconfiguration dialog (rvykydal)
    Resolves: rhbz#1614049


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.153-1
changelog:
  - Fix tests and add new tests (jkonecny)
    Related: rhbz#1701032
  - Do not calculate hash for disabled repos (jkonecny)
    Related: rhbz#1701032
  - Test proxy only if set (jkonecny)
    Related: rhbz#1701032
  - Add certificate to the repo files (jkonecny)
    Resolves: rhbz#1701032
  - Use SSLOptions for RepoMDMetaHash object (jkonecny)
    Related: rhbz#1701032
  - Use SSLOptions for YUM calls (jkonecny)
    Related: rhbz#1701032
  - Use SSLOptions for Base repository (jkonecny)
    Related: rhbz#1701032
  - Use new ssl certificate KS option for .treeinfo (lars)
    Related: rhbz#1701032


author: CentOS Sources <bugs@centos.org> - 21.48.22.156-1.el7.centos
changelog:
  - Add CentOS install class as default
  - use the right path for the EULA string (issue 7165,  bstinson)
  - use efi_dir = centos
  - disable the mirrorlist options
  - make boot part fs default to xfs


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.158-1
changelog:
  - network: use DEVICETYPE for team when updating virtual slaves ifcfgs
    (rvykydal)
    Resolves: rhbz#1680606
  - dracut/parse-kickstart: Set DEVICETYPE instead of TYPE in a team master ifcfg file
    (ptalbert)
    Resolves: rhbz#1680606


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16
changelog:
  - the correct solution is remove smp_flags, they don't work properly on ppc with
    the option mpower7
  - Related: rhbz#1048745


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21
changelog:
  - correct the DST correction when using UTC time specification (#1328832)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23
changelog:
  - fix the ownership of the spool directory (#1414228)
  - document the -n option of atd (#739870)
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1:0.3.6-5
changelog:
  - Merge fix from upstream pull request #25 for CVE-2015-7747.
    Test conversion from e.g. 16-bit LE stereo to 8-bit LE mono
    no longer causes corruption.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1:0.3.6-7
changelog:
  - Merge upstream pull requests #42,#43,#44 from Agostino Sarubbo to fix
    security issues.  CVE-2017-6827, CVE-2017-6828,
    CVE-2017-6829, CVE-2017-6830, CVE-2017-6831,
    CVE-2017-6832, CVE-2017-6833, CVE-2017-6834, CVE-2017-6835,
    CVE-2017-6836, CVE-2017-6837, CVE-2017-6838, CVE-2017-6839


author: Wim Taymans <wtaymans@redhat.com> - 1:0.3.6-9
changelog:
  - Apply security patches. CVE-2018-17095, CVE-2018-13440
  - Resolves: rhbz#1600369, rhbz#1601014, rhbz#1637128


author: Steve Grubb <sgrubb@redhat.com> 2.7.8-1
changelog:
  resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
  resolves: #1448526 - aureport shows the wrong auid "-1"
  resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
  resolves: #1482121 - python audit crash dereferencing auparse_state_t le field


author: Steve Grubb <sgrubb@redhat.com> 2.8.1-1
changelog:
  resolves: #982154 - Can't find the "avc" event with the auvirt command
  resolves: #1101605 - Ipv6 seems no working
  resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
  resolves: #1455598 - Default port is wrong in audisp-remote.conf
  resolves: #1476406 - Audit package rebase


author: Steve Grubb <sgrubb@redhat.com> 2.8.4-1
changelog:
  resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
  resolves: #1573889 - auditd busy loop in rotate_logs() with num_logs < 2
  resolves: #1534748 - incorrect addr field when using IPv6 for remote logging
  resolves: #1515903 - ausearch-expression man page missing \timestamp_ex
  resolves: #1511606 - aureport AVC report header is incomplete
  resolves: #1504251 - make auditd dump internal state for log writing status


author: Steve Grubb <sgrubb@redhat.com> 2.8.5-1
changelog:
  resolves: #1651761 - Rebase audit package to 2.8.5 to pick up bug fixes
  resolves: #1462178 - audit rule arch changed from b32 to b64 on ppc64le
  resolves: #1614833 - audispd loops reloading config 
  resolves: #1622194 - audisp-remote memory leak when using krb5 
  resolves: #1625156 - audisp-remote wont connect if remote ending action not reconnect
  resolves: #1628626 - aureport -a --failed does not display user_avc events 
  resolves: #1648005 - tcp listener socket fails when ipv6.disable=1 boot command
  resolves: #1650670 - space left in auditd.conf expressed as a percentage 
  resolves: #1663285 - ausearch device/inode missing when using a single file 
  resolves: #1672287 - max_log_file_action "keep_logs" doesn't behave as described


author: Dominic Cleal <dcleal@redhat.com> - 1.4.0-1
changelog:
  - Rebase to Augeas 1.4.0
  - Revert some changes for better compatibility with 1.1.0-17:
    * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
    * Dnsmasq: revert splitting of address/server options
    * Dovecot: restore quotes within values
    * Jaas: revert semicolon and line break changes
    * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
    * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
    * Syslog: restore tree without protocol for UDP hosts
    * UpdateDB: keep Simplevars to load config by default


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-4
changelog:
  - Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
  - Skip testSaveNoPermission when running as root (RHBZ#1269817)
  - Chrony: allow signed numbers (RHBZ#1302017)
  - Krb5: support includedir (RHBZ#1406111)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-5
changelog:
  - Cgconfig: allow fperm & dperm in admin & task (RHBZ#1325741)
  - Grub: handle top-level "boot" directive (RHBZ#1484261)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-9
changelog:
  - Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
    (RHBZ#1653766)
  - Anaconda: new lens (RHBZ#1657189)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-10
changelog:
  - Krb5: support realms that start with numbers; add more pkinit_* options;
    improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1670420)
  - Grub: handle '+' in kernel command line options (RHBZ#1758357)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-9.el7_8.1
changelog:
  - Krb5: support realms that start with numbers; add more pkinit_* options;
    improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1799022)


author: Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17
changelog:
  - Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
  - Resolves: rhbz#1610692 silence console warnings from print dialog


author: Ian Kent <ikent@redhat.com> - 5.0.7-97
changelog:
  - bz1358887 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1358887


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1627502 - after upgrading to autofs-5.0.7-83.el7.x86_64 on RHEL 7 clients,
    amd maps /defaults key mount options are no longer working
    - fix amd parser opts option handling.
  - Resolves: rrhbz#1627502


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1630189 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  -Resolves: rhbz#1630189


author: Ian Kent <ikent@redhat.com> - 5.0.7-100
changelog:
  - bz1599516 - [autofs] The log no longer print PID of automount process
    - add NULL check in prepare_attempt_prefix().
    - update build info with systemd.
    - use flags for startup boolean options.
    - move close stdio descriptors to become_daemon().
    - add systemd service command line option.
  - Resolves: rhbz#1599516


author: Ian Kent <ikent@redhat.com> - 5.0.7-101
changelog:
  - bz1640448 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1640448


author: Ian Kent <ikent@redhat.com> - 5.0.7-102
changelog:
  - bz1644910 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1644910


author: Ian Kent <ikent@redhat.com> - 5.0.7-103
changelog:
  - bz1644933 - Segmentation fault in err_string_data_LHASH_COMP
    - openssl workaround.
  - Resolves: rhbz#1644933


author: Ian Kent <ikent@redhat.com> - 5.0.7-104
changelog:
  - bz1442063 - Parameter ghost not documented in the man pages
    - document ghost option in auto.master man page.
  - Resolves: rhbz#1442063


author: Ian Kent <ikent@redhat.com> - 5.0.7-105
changelog:
  - bz1680582 - Sanitize autofs logging
    - make expire remaining log level debug.
  - Resolves: rhbz#1680582


author: Ian Kent <ikent@redhat.com> - 5.0.7-106
changelog:
  - bz1685804 - autofs doesn't expand macros in amd map selectors
    - workaround getaddrinfo(3) ai_canonname bug.
    - improve hostname lookup error logging.
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1685804


author: Ian Kent <ikent@redhat.com> - 5.0.7-107
changelog:
  - bz1734057 - automount segfaults if a bad hosts entry is added
    in /etc/auto.master
    - fix reset flex scan buffer on init.
  - Resolves: rhbz#1734057


author: Ian Kent <ikent@redhat.com> - 5.0.7-108
changelog:
  - bz1728914 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map
    - remove unused function has_fstab_option().
    - remove unused function reverse_mnt_list().
    - remove a couple of old debug messages.
    - fix amd entry memory leak.
    - fix unlink_mount_tree() not umounting mounts.
    - add ignore mount option.
    - use ignore option for offset mounts as well.
    - add config option for "ignore" mount option
    - use bit flags for autofs mount types in mnt_list.
    - use mp instead of path in mnt_list entries.
    - always use PROC_MOUNTS to make mount lists.
    - add glibc getmntent_r().
    - use local getmntent_r in table_is_mounted().
    - refactor unlink_active_mounts() in direct.c.
    - don't use tree_is_mounted() for mounted checks.
    - use single unlink_umount_tree() for both direct and indirect mounts.
    - move unlink_mount_tree() to lib/mounts.c.
    - use local_getmntent_r() for unlink_mount_tree().
    - use local getmntent_r() in get_mnt_list().
    - use local getmntent_r() in tree_make_mnt_list().
  - Resolves: rhbz#1728914


author: Ian Kent <ikent@redhat.com> - 5.0.7-109
changelog:
  - bz1728914 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map
    - fix missing initialization of autofs_point flags.
  - Related: rhbz#1728914


author: Ian Kent <ikent@redhat.com> - 5.0.7-110
changelog:
  - bz1806514 - strictexpire option not set for offset mounts
    - also use strictexpire for offsets.
  - Resolves: rhbz#1806514


author: Ian Kent <ikent@redhat.com> - 5.0.7-111
changelog:
  - bz1806514 - strictexpire option not set for offset mounts
    - fix patch not applied.
  - Related: rhbz#1806514


author: Ian Kent <ikent@redhat.com> - 5.0.7-112
changelog:
  - bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
    - fix trailing dollar sun entry expansion.
  - Resolves: rhbz#1818664


author: Ian Kent <ikent@redhat.com> - 5.0.7-114
changelog:
  - bz1847762 - automount program crashes with "malloc(): invalid next size
    (unsorted)
    - initialize struct addrinfo for getaddrinfo() calls.
    - fix quoted string length calc in expandsunent().
    - fix autofs mount options construction.
  -Resolves: rhbz#1847762


author: Ian Kent <ikent@redhat.com> - 5.0.7-115
changelog:
  - bz1885511 - automount force unlink option (-F) does not work as expected
    on autofs-5.0.7-109.el7
    - fix direct mount unlink_mount_tree() path.
    - fix unlink mounts umount order.
  - bz1858586 - autofs share doesn't mount when using nobind over RDMA where
    nfs-server and nfs-client are the same systems
    - mount_nfs.c fix local rdma share not mounting.
  - Resolves: rhbz#1885511 rhbz#1858586


author: Ian Kent <ikent@redhat.com> - 5.0.7-116
changelog:
  - bz1885511 - automount force unlink option (-F) does not work as expected
    on autofs-5.0.7-109.el7
    - fix incorrect logical compare in unlink_mount_tree().
  - Related: rhbz#1885511


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-18
changelog:
  - create home directory for avahi-autoipd user (#1416287)
  - get rid of the dangling symlink to avahi-discover in debuginfo package (#1421229)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-5
changelog:
  - Append python-botocore and python-jmespath bundled directory to
    search path where needed

    Resolves: rhbz#1509434


author: Suchakra Sharma <suchakra@fedoraproject.org> - 1.2.0-1
changelog:
  - New upstream release
  - Popt patch for babeltrace.pc.in removed. Its fixed in Fedora now
  - Add new file (babeltrace-ctf.pc)


author: Ken Dreyer <kdreyer@redhat.com> - 1.2.4-3
changelog:
  - Add with_python3 macro to support EL7 (rhbz#1235466)
  - Define _pkgdocdir to support EL7 (rhbz#1235466)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.1-1
changelog:
  - Update to 2.1 (fixes #860510, #906469, #912113, #919246, #928253).
  - Don't ship completions included in util-linux 2.23-rc2 for F-19+.


author: Roman Rakus <rrakus@redhat.com> - 2.1-4
changelog:
  - Added conditionals to not add completions for some commands; the packages
    has their own completions
    Resolves: #1007839


author: Jerome Marchand <jmarchan@redhat.com> - 0.6.1-1
changelog:
  - Rebase on v0.6.1
  - Fix tcpsubnet
  - Reinstate llcstat tool
  - Remove inject tool
  - Add NSS support to sslsniff
  - Fixes miscellaneous error uncovered by covscan


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-1
changelog:
  - Rebase on bcc-0.10.0
  - Fix regression of vfscount
  - Drop tools that relies on features unavailable on RHEL 7


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2.4
changelog:
  - Limit number of queries triggered by a request (CVE-2020-8616)
  - Fix invalid tsig request (CVE-2020-8617)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1
changelog:
  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10
changelog:
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2
changelog:
  - Prevent deadlock on reload (#1781576)
  - Disable unit test timer_test on ppc64le because of its instability


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2
changelog:
  - Rebase features patches
  - Disable autodetected eddsa algorithm ED448
  - Add versioned depends to all library subpackages
  - Fix multilib conflict of devel packages


author: Tomas Krizek <tkrizek@redhat.com> - 11.1-1
changelog:
  - update to letest upstream version
  - resolves: #1393889 Rebase to bind-dyndb-ldap 11+
  - resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
  - resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error


author: Petr Menšík <pemensik@redhat.com> - 11.1-6
changelog:
  - Bump BIND version and fix library dependecies
  - Rebuild for bind 9.11.3. Minor tweaks to compile.
  - Support for bind 9.11.5 headers


author: Nick Clifton <nickc@redhat.com> 2.27-33.base
changelog:
  - Fix seg-fault parsing ELF files.  (#1578979)
  - Fix seg-fault parsing DWARF-2 information.  (#1579065)
  - Fix seg-fault parsing DWARF-2 information.  (#1579051)
  - Fix seg-fault parsing a PE format file.  (#1579019)


author: Nick Clifton <nickc@redhat.com> 2.27-34.base
changelog:
  - Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
  - Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
  - Fix seg-fault parsing corrupt ELF format files.  (#1579801)


author: Nick Clifton <nickc@redhat.com> 2.27-41.base.1
changelog:
  - Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)


author: Nick Clifton <nickc@redhat.com> 2.27-32.base
changelog:
  - Fix seg-fault parsing DWARF-1 information.  (#1569580)
  - Fix seg-fault parsing DWARF-2 information.  (#1569891)
  - Fix seg-fault parsing COFF files.  (#1571917)


author: Nick Clifton <nickc@redhat.com> 2.27-42.base
changelog:
  - Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)


author: Nick Clifton <nickc@redhat.com> - 2.27-43.base.1
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1804151)


author: Nick Clifton <nickc@redhat.com> 2.27-44.base
changelog:
  - Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)
  - Implement assembler workaround for Intel JCC microcode bug.  (#1778892)


author: David Howells <dhowells@redhat.com> - 2.25-3
changelog:
  - Fix up the target for SH64 and cease mixing 32-bit SH targets with SH64.
  - SH64: Work around flags not getting set on incremental link of .a into .o [binutils bz 17288].


author: David Howells <dhowells@redhat.com> - 2.25.1-1
changelog:
  - Sync with binutils-2.25.1-4.
  - Set --enable-targets if the target is powerpc* not just ppc*.
  - Provide LE ppc and ppc64 emulations [BZ 1255947].


author: David Howells <dhowells@redhat.com> - 2.26-5
changelog:
  - Sync with binutils-2.26-10.
  - c6x: Handle inconsistent .cfi_sections directives [binutils bz 19614].


author: Michal Sekletár <msekleta@redhat.com> - 0.7.3-2
changelog:
  - prevent infinite recursion in dmidecode.c::smbios_setslot (#1642706)
  - fix indentation in the man page (#1642706)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.3-1
changelog:
  - Don't crash if blockdev mpath plugin isn't available. (#1672971) (dlehman)
  - iscsi: Add default value to unused 'storage' argument in 'write' (vtrefny)
  - Add exported property to LVMVolumeGroupDevice (vtrefny)
  - Add VG data to static_data (vtrefny)
  - Do not try to get format free space for non-existing formats (vtrefny)
  - Do not raise exception if can't get PV free space (vtrefny)
  - Fix undefined attribute in LVM info cache (vtrefny)
  - Use raw_device to get thinpool device in LVMThinPFactory (#1490174) (vtrefny)
  - Do not crash if DM RAID activation fails (#1661712) (vtrefny)
  - Remove the unused sysroot property (vponcova)
  - Remove unused attributes from the Blivet class (vponcova)
  - Remove the unused gpt flag (vponcova)
  - Copy the iSCSI initiator name file to the installed system (vtrefny)
  - Use udev to determine if disk is a multipath member. (dlehman)
  - Require libfc instead of fcoe for offloaded FCoE. (#1575953) (dlehman)


author: Pavel Cahyna <pcahyna@redhat.com> - 3.1.3-2
changelog:
  - Initial import of python-blivet3 by David Lehman <dlehman@redhat.com>
    derived from python-blivet-3.1.2-1
  - clear the old python-blivet %changelog except the most recent entry.


author: David Lehman <dlehman@redhat.com> - 3.1.3-3
changelog:
  - spec file requires fixes from pcahyna
  - adjust to older pyudev API
  - adjust tags implementation to absence of enum in python-2.7
  - fix bare imports in example scripts
  - update factory example to match latest API


author: Eric Sandeen <sandeen@redhat.com> - 1.0.5-7
changelog:
  - Add upstream cpu scalability patches (#1032368)
  - Remove "-k" option from manpage (#1300354)
  - Fix potential deadlock when calling stop_tracers (#1263189)


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: Josef Ridky <jridky@redhat.com> - 0:1.8.18-3
changelog:
  - Fix issues with warning: dereferencing type-punned pointer 
    will break strict-aliasing rules from RPMDiff


author: Pavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10
changelog:
  - Protect against negative values to memmove that caused
    "ipmitool sol activate" to crash against an IBM DataPower appliance
    (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
    Cherry-picked from upstream PR#78.


author: Boris Ranto <branto@redhat.com> - 0:1.8.15-7
changelog:
  - New release (0:1.8.15-7)
  - ID:437 - sel: Fix "sel time set <time>"
  - ID 408 - fix sel list last X listing


author: Christian Kellner <ckellner@redhat.com> - 0.7-1
changelog:
  - bolt 0.7 release with pre-bootacl support.
    Resolves: #1629713
  - Patch to fix a format string bug in the 0.7
  - Drop restricting-capabilities.patch (included in 0.7)
  - Patch to not use unsuppported unit file settings.
    Resolves: #1631050


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav Škarvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - do not use arch-specific BuildRequires (#1268268)
  - support TLS libraries without SSLv3 (#1298227)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - Install unpatched gcc.jam (#1305019).
  - Build libboost_python and libboost_python3 such that they depend on
    their respective libpython (#1302120).
    (boost-1.53.0-python-libpython_dep.patch,
    boost-1.53.0-python-abi_letters.patch)
  - Fix Boost.Python test suite so that PyImport_AppendInittab is called
    before PyInitialize, which broke the test suite with Python 3.
    (boost-1.53.0-python-test-PyImport_AppendInittab.patch)
  - Patch gcc.jam to not add bogus rpaths.


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.2-11
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - temporary disable s390x arch due to #1773504 causing fuse-overlayfs
    failing to build - skopeo/contaners-common requires it


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-5
changelog:
  - fix "Podman support for FIPS Mode requires a bind mount inside the container"
  - Resolves: #1804186


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-7
changelog:
  - fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
  - Resolves: #1806936


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-8
changelog:
  - fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
  - Resolves: #1803583


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-9
changelog:
  - fix "CVE-2020-1702 buildah: containers/image: Container images read entire image manifest into memory"
  - Resolves: #1810612


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-10
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1817738


author: Kai Engert <kaie@redhat.com> - 2017.2.11-71
changelog:
  - Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
  - Use comments in extracted bundle files.
  - Change packaging script to support empty legacy bundles.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-72
changelog:
  - Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
    as a preparation to fix bugs in the interaction between p11-kit-trust and
    Mozilla applications, such as Firefox, Thunderbird etc.
  - For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
  - Require p11-kit 0.23.5
  - Added an utility to help with comparing output of the trust dump command.


author: Kai Engert <kaie@redhat.com> - 2017.2.16-71
changelog:
  - Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
    Mozilla removed code signing trust from all CAs (rhbz#1472933)


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76
changelog:
  - Update to CKBI 2.32 from NSS 3.44
  -   Removing:
  -   # Certificate "Visa eCommerce Root"
  -   # Certificate "AC Raiz Certicamara S.A."
  -   # Certificate "TC TrustCenter Class 3 CA II"
  -   # Certificate "ComSign CA"
  -   # Certificate "S-TRUST Universal Root CA"
  -   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
  -   # Certificate "Certplus Root CA G1"
  -   # Certificate "Certplus Root CA G2"
  -   # Certificate "OpenTrust Root CA G1"
  -   # Certificate "OpenTrust Root CA G2"
  -   # Certificate "OpenTrust Root CA G3"
  -  Adding:
  -   # Certificate "GlobalSign Root CA - R6"
  -   # Certificate "OISTE WISeKey Global Root GC CA"
  -   # Certificate "GTS Root R1"
  -   # Certificate "GTS Root R2"
  -   # Certificate "GTS Root R3"
  -   # Certificate "GTS Root R4"
  -   # Certificate "UCA Global G2 Root"
  -   # Certificate "UCA Extended Validation Root"
  -   # Certificate "Certigna Root CA"
  -   # Certificate "emSign Root CA - G1"
  -   # Certificate "emSign ECC Root CA - G3"
  -   # Certificate "emSign Root CA - C1"
  -   # Certificate "emSign ECC Root CA - C3"
  -   # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-70.0
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"
  - fix permissions on ghosted files.


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Trustis FPS Root CA"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-71
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-72
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Adding:
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-74
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Thomas Oulevey <thomas.oulevey@cern.ch> - 2-1
changelog:
  - disabled gpg check for -testing repos
  - enabled sources repositories
  - enabled debuginfo repositories


author: Boris Ranto <branto@redhat.com> - 1:10.2.5-1
changelog:
  - New version (1:10.2.5-1)
  - Makefile: Fix dencoder build
  - Add fake fcgiapp.h for rgw
  - common: Build more files of libcommon in client
  - libradosstripper: Build libradostripper for rados as noinst


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-2
changelog:
  - Resolves: #1345755 Support for specifying IPA lightweight CA
    - Add 'issuer' request option for specifying issuer
    - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
    - Comment/whitespace fixup
    - ipa-submit: Retry without "ca" on OptionError
    - getcert: fix a potential out-of-bounds
    - Document the -X option in the ipa-submit man page
  - Resolves: #1351052 certmonger build for RHEL 7.3 failure
    - Stop assuming RSA 512 works
    - Stop assuming RSA 512 works, part two
    - Fix a flakiness in the 028-dbus test


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-3
changelog:
  - Resolves: #1367683 getcert request command fails to use Sub CA using -X
    argument
    - Fix CA option name for ipa cert-request


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-4
changelog:
  - Use required DER encoding when setting CA basic constraint (#1551635)
  - NSS 3.34 more strictly enforces length checking when verifying signatures
    (#1551702)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-5
changelog:
  - Add Requires on psmsic for killall in post script (#1458890)
  - upstream project migrated from fedorahosted.org to pagure.io (#1501723)
  - Strip CR/LF from passwords read from a file (#1545935)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-8
changelog:
  - Disable iterate-10 test which fails intermitently (#1596161)
  - Add BuildRequires for running autoreconf


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-9
changelog:
  - Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
    variables to helpers. The root cause was a bug in IPA (#1596161)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-12
changelog:
  - Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
    man page (#1651368)
  - SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781)
  - SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
  - Document owner and permission parameters to getcert (#1549585)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-17
changelog:
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2015511)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix typos in test/dispol
  - Set flex as default lexer
  - Fix checkmodule output message
  - Build policy on systems not supporting DCCP protocol
  - Fail if module name different than output base filename


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-6
changelog:
  - Add ibendport ocontext handling
  - Add support for ibendportcon labels
  - Add ibpkey ocontext handling
  - Add support for ibpkeycon labels
  - Add binary module support for xperms


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.7.2-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config


author: Jan Macku <jamacku@redhat.com> - 1.7.5-1
changelog:
  - Fix issues with extra backslashes in path string - (#1485304)
  - Add documentation for --keep-missing option - (#1371146)


author: Pete Walter <pwalter@fedoraproject.org> - 8.2-2
changelog:
  - Package review fixes (#1343710)
  - Validate the desktop file
  - Don't own /etc/opt directory
  - Depend on mozilla-filesystem instead of co-owning mozilla directories
  - Depend on dbus and gnome-icon-theme/hicolor-icon-theme for directory
    ownership


author: Florian Müllner <fmuellner@redhat.com> - 10.1-4
changelog:
  - Adjust Fedora spec to build on RHEL:
    - build missing BuildRequire
    - use python2 instead of python3

    Related: #1643501


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-1
changelog:
  - update to 3.1 (#1387223 #1274250 #1350669 #1406445)
  - don't start chronyd without capability to set system clock (#1306046)
  - fix chrony-helper to escape names of systemd units (#1418968)
  - package chronyd sysconfig file (#1396840)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
changelog:
  - update to 3.2 (#1482565 #1462081 #1454765)
  - use ID from /etc/os-release to set pool.ntp.org vendor zone


author: Miroslav Lichvar <mlichvar@redhat.com> 3.4-1
changelog:
  - update to 3.4 (#1636117, #1565544, #1565548, #1596239, #1600882)
  - drop support for HW timestamping on kernels < 3.10.0-613


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821
    CVE-2015-1822 CVE-2015-1853)
  - extend chrony-helper to allow using servers from DNS SRV records (#1211600)
  - add servers from DHCP with iburst option by default (#1219492)
  - execute test suite


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-23
changelog:
  - Fix a bug tha caused cloud-init to fail as a result of trying
    to rename bonds.
    Resolves: rhbz#1512247


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-24
changelog:
  - Set DHCP_HOSTNAME on Azure to allow for the hostname to be
    published correctly when bouncing the network.
    Resolves: rhbz#1434109


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-2.el7
changelog:
  - ci-net-Wait-for-dhclient-to-daemonize-before-reading-le.patch [bz#1632967]
  - Resolves: bz#1632967
    ([Azure] cloud-init dhcp.py dhcp_discovery() race with dhclient with preprovisioned VM in Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-3.el7
changelog:
  - ci-cloud-init-per-don-t-use-dashes-in-sem-names.patch [bz#1664876]
  - ci-Enable-cloud-init-by-default-on-vmware.patch [bz#1623281]
  - Resolves: bz#1623281
    ([ESXi][RHEL7.6]Enable cloud-init by default on VMware)
  - Resolves: bz#1664876
    (cloud-init Storage-Management Functionality Is Erasing Filesystems)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-4.el7
changelog:
  - ci-azure-Filter-list-of-ssh-keys-pulled-from-fabric.patch [bz#1684040]
  - Resolves: bz#1684040
    (CVE-2019-0816 cloud-init: extra ssh keys added to authorized_keys [rhel-7.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-5.el7
changelog:
  - ci-include-NOZEROCONF-yes-in-etc-sysconfig-network.patch [bz#1653131]
  - Resolves: bz#1653131
    (cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-1.el7
changelog:
  - Rebase to 18.5 [bz#1687565]
  - Resolves: bz#1687565
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-2.el7
changelog:
  - ci-Azure-Ensure-platform-random_seed-is-always-serializ.patch [bz#1687565]
  - ci-DatasourceAzure-add-additional-logging-for-azure-dat.patch [bz#1687565]
  - ci-Azure-Changes-to-the-Hyper-V-KVP-Reporter.patch [bz#1687565]
  - ci-DataSourceAzure-Adjust-timeout-for-polling-IMDS.patch [bz#1687565]
  - ci-cc_mounts-check-if-mount-a-on-no-change-fstab-path.patch [bz#1687565]
  - Resolves: bz#1687565
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-3.el7
changelog:
  - ci-Revert-azure-ensure-that-networkmanager-hook-script-.patch [bz#1707725]
  - Resolves: bz#1707725
    ([WALA][cloud] cloud-init dhclient-hook script has some unexpected side-effects on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-4.el7
changelog:
  - ci-Azure-Return-static-fallback-address-as-if-failed-to.patch [bz#1726701]
  - Resolves: bz#1726701
    ([Azure] [RHEL 7.8] Cloud-init fixes to support fast provisioning for Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-5.el7
changelog:
  - ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1593010]
  - Resolves: bz#1593010
    ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7
changelog:
  - ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744526]
  - Resolves: bz#1744526
    ([cloud-init][OpenStack] cloud-init can't persist instance-data.json)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.1
changelog:
  - ci-azure-avoid.patch [bz#1810064]
  - Resolves: bz#1810064
    (cloud-init Azure byte swap (hyperV Gen2 Only) [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.2
changelog:
  - ci-cmd-main.py-Fix-missing-modules-init-key-in-modes-di.patch [bz#1802173]
  - Resolves: bz#1802173
    ([cloud-init][rhel-7.8.z]cloud-init cloud-final.service fail with KeyError: 'modules-init' after upgrade to version 18.2-1.el7_6.1 in RHV)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.3
changelog:
  - ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1801094]
  - ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1801094]
  - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1801094]
  - Resolves: bz#1801094
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.4
changelog:
  - ci-New-data-source-for-the-Exoscale.com-cloud-platform.patch [bz#1827207]
  - ci-Add-support-for-publishing-host-keys-to-GCE-guest-at.patch [bz#1827207]
  - ci-exoscale-fix-sysconfig-cloud_config_modules-override.patch [bz#1827207]
  - ci-exoscale-Increase-url_max_wait-to-120s.patch [bz#1827207]
  - ci-ec2-Add-support-for-AWS-IMDS-v2-session-oriented-55.patch [bz#1827207]
  - Resolves: bz#1827207
    (Support for AWS IMDS v2 (available in cloud-init 19.4) [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.5
changelog:
  - ci-url_helper-read_file_or_url-should-pass-headers-para.patch [bz#1832177]
  - Resolves: bz#1832177
    ([Azure] cloud-init provisioning failed in Azure [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7
changelog:
  - ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
  - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
  - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
  - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
  - ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
  - Resolves: bz#1549638
    ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
  - Resolves: bz#1574338
    (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
  - Resolves: bz#1748015
    ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
  - Resolves: bz#1812170
    (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
  - Resolves: bz#1812173
    (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7
changelog:
  - ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
  - Resolves: bz#1772505
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7
changelog:
  - ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
  - Resolves: bz#1772505
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7
changelog:
  - ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
  - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
  - Resolves: bz#1748015
    ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
  - Resolves: bz#1772505
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7
changelog:
  - ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
  - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
  - Resolves: bz#1748015
    ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
  - Resolves: bz#1821999
    ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7
changelog:
  - ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
  - Resolves: bz#1821999
    ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2
changelog:
  - ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
  - ci-Changing-notation-of-subp-call.patch [bz#1839619]
  - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
  - Resolves: bz#1839619
    ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
  - Resolves: bz#1871916
    ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3
changelog:
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
  - Resolves: bz#1861871
  - ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3
changelog:
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
  - Resolves: bz#1861871
    ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.4
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
  - Resolves: bz#1900807
    (Update existing user password RHEL7x)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7_9.5
changelog:
  - ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
  - Resolves: bz#1897616
    ([rhel-7]cloud-final.service fails if NetworkManager not installed.)


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.6
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2003231]
  - Resolves: bz#2003231
    (anything above 19.2 of cloud init it fails to assign default route and connect to the meta data service)


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-10.el7_6.3
changelog:
  - Fix component detection for MD RAID version 1.0 and 0.90.
  - Use sync io if async io_setup fails, or when use_aio=0 is set in config.
  - Fix dmstats report printing no output.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.184-2
changelog:
  - Add support for vgsplit with cached devices.
  - Fix conversion of cache pool to RAID1 (2.02.184).
  - Fix signal delivery checking race in libdaemon (lvmetad).
  - Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.185-1
changelog:
  - Fix change of monitoring in clustered volumes.
  - Improve -lXXX%VG modifier which improves cache segment estimation.
  - Add synchronization with udev before removing cached devices.
  - Fix missing growth of _pmspare volume when extending _tmeta volume.
  - Automatically grow thin metadata, when thin data gets too big.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.185-2
changelog:
  - Fix cluster conversions from linear to mirror.
  - Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
  - Prevent shared active mirror LVs with lvmlockd.
  - Parsing of cache status understand no_discard_passdown.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-1
changelog:
  - Improve removal of cached devices.
  - Synchronize with udev when dropping snapshot.
  - Add missing device synchronization point before removing pvmove node.
  - Correctly set read_ahead for LVs when pvmove is finished.
  - Fix metadata writes from corrupting with large physical block size.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-2
changelog:
  - Prevent creating VGs with PVs with different logical block sizes.
  - Pvmove runs in exlusively activating mode for exclusively active LVs.
  - Activate thin-pool layered volume as 'read-only' device.
  - Enhance validation for thin and cache pool conversion and swapping.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-3
changelog:
  - Fix lvmetad shutdown and avoid lenghty timeouts when rebooting system.
  - Change allow_mixed_block_sizes default to 1.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2
changelog:
  - Fix dmeventd crash with modified reserved_stack configuration option.
  - Fix lvm crashing when .cache file is changed by external tools.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5
changelog:
  - Fix fsadm failure due to accessing unbound variable.
  - Fix segfault in vgextend when a PV is missing in the processed VG.


author: Brian C. Lane <bcl@redhat.com> - 0.1.1-1
changelog:
  - fixes blueprints end-to-end test (jgiardin)
  - Hides Comment feature from Pending Changes modal (jgiardin)
  - Remove non-functional UI elements/components (jgiardin)
  - fixes line length in unit test (jgiardin)
  - update selector for Edit Blueprint button in test (jgiardin)
  - fixes empty state on blueprints page and tests (jgiardin)
  - fixes spacing errors (jgiardin)
  - fixes bad merges during rebase (jgiardin)
  - handles error case for fetching blueprints (jgiardin)
  - sets timeout on Loading state (jgiardin)
  - how did that 'n' get in there? (jgiardin)
  - fixes line length (jgiardin)
  - Disables actions (jgiardin)
  - Updates UI based on state, for loading and error (jgiardin)
  - Adds reducer for updating state when an error occurs (jgiardin)
  - updates state to hold values for fetch status (jgiardin)
  - components: Use consistent syntax for handlers (lars)
  - Fix two issues. (henrywangxf)
  - test/create.image: simplify shallow wrapper creation (lars)
  - CreateImage: don't call unset handlers (lars)
  - test/create.image: also conider handleStartCompose (lars)
  - correcting the initial state (jgiardin)
  - updates mockState in unit tests to match state updates for Filters (jgiardin)
  - Merge pull request #250 from larskarlitski/remove-mock-data (jgiardin)
  - Remove mock data (lars)
  - Add lorax-composer test and remove stand alone welder-web test. (henrywangxf)
  - Domain socket support in UI testing. (henrywangxf)
  - Update queue status text, Remove cancel button (jacobdkozol)
  - Added status icons for imageListView (jacobdkozol)
  - Add start compose functionality (jacobdkozol)
  - Fix blueprint page issue loading components (jacobdkozol)
  - Remove redux persist (jacobdkozol)
  - Remove unused code (lars)
  - Merge pull request #248 from jgiardino/filter (jgiardin)
  - Merge pull request #262 from andreasn/form-control-fx-style (jgiardin)
  - Fix style of pagination input under available components (anilsson)
  - fix issue when multiple filters are defined (jgiardin)
  - implements filtering and refactors toolbars (jgiardin)


author: Brian C. Lane <bcl@redhat.com> - 0.1.2-1
changelog:
  - New Version 0.1.2
  - Add the .spec files to .PHONY (bcl)
  - Add welder-web and cockpit-composer release instructions (bcl)
  - Add a 'tag' target to the Makefile (bcl)
  - Adjust image list layout to improve alignment (jgiardin)
  - Fix blueprint packages getting added to history (jacobdkozol)
  - Fixed bug where startComposeApi would not return start compose response (sfondell)
  - Run `make po-push` from travis on pushes to master. (dshea)
  - Add a po-push target to the Makefile. (dshea)
  - Don't call compose API on the blueprints page (lars)
  - Support downloading images (lars)
  - Fix fetchComposes() call (lars)
  - Update text string (jgiardin)
  - add bootstrap class for large modals (jgiardin)
  - Fix issues with translated strings and add one more for "Close" (jgiardin)
  - Make strings translatable (but includes build error) (jgiardin)
  - Update layout (jgiardin)
  - Don't show custom sources section if empty (jgiardin)
  - Add modal for listing sources (jgiardin)
  - Revert "Revert "Add python and gcc to the Dockerfiles."" (dshea)
  - Include translations in the dist tarball (dshea)
  - Remove the zanata-js crud from package-lock.json (dshea)
  - Fix how fetching blueprints/composes is triggered (jacobdkozol)
  - Update API calls error messages (jacobdkozol)
  - Fix polling issue. Add error action. (jacobdkozol)
  - Add loading images from prior sessions and sort by start time. (jacobdkozol)
  - Revert "Run `npm rebuild` after `npm install`." (lars)
  - Revert "Add python and gcc to the Dockerfiles." (lars)
  - Don't update translations on every build (lars)
  - Fix yamllint errors on .travis.yml (dshea)
  - Add new requirements to the travis environment (dshea)
  - Add a script for testing translations. (dshea)
  - Run `npm rebuild` after `npm install`. (dshea)
  - Make the editBlueprint selector more specific. (dshea)
  - Add python and gcc to the Dockerfiles. (dshea)
  - Add a i18n section to the README (dshea)
  - Create cockpit translation modules. (dshea)
  - Extract cockpit manifest strings for translation. (dshea)
  - Add translated messages. (dshea)
  - Add scripts for interacting with Zanata. (dshea)
  - Internationalize strings with react-intl. (dshea)
  - Fix PR#309 imported issue. The rpm package should be welder-web*.noarch.rpm, not welder-web*.x86_64.rpm (henrywangxf)
  - Build srpm together with rpm (atodorov)
  - Images list UI refinements (jgiardin)
  - cockpituous-release: Use upstream release-source (martinpitt)
  - core: Use escalated privileges to access Lorax API (stefw)
  - remove utils from Layout (jgiardin)
  - Remove unused Layout components (jgiardin)
  - Submit coverage report only if present (atodorov)
  - Use default composer dir without --group option (atodorov)
  - Fix created image not being added to state (jacobdkozol)
  - package.json: Remove bootstrap-select (lars)
  - package.json: Update stylelint (lars)
  - blueprints: Show actual error message (lars)
  - core: propagate errors from cockpitFetch() (lars)


author: Brian C. Lane <bcl@redhat.com> - 0.1.3-1
changelog:
  - New version 0.1.3
  - Update Create Image notifications (#328) (jgiardin)
  - Make strings translatable in Pending Changes dialog (#341) (jgiardin)
  - Makefile: don't run po-pull on dist (lars)
  - Add the .spec files to .PHONY (bcl)


author: Brian C. Lane <bcl@redhat.com> - 0.1.4-1
changelog:
  - New version 0.1.4
  - Adds queue status to an infotip in the Create Image modal (jgiardin)
  - Update Create Image modal to also commit unsaved changes (jgiardin)
  - Catching a couple of minor issues (jgiardin)
  - Update Create Image modal to include blueprint object instead of just name (jgiardin)
  - Update Create Image button selector in end-to-end test (jgiardin)
  - Display warning messages to the user in Create Image modal (jgiardin)
  - use updated property key from api for date created (jgiardin)
  - translations: Fail when zanata-js is not installed (lars)
  - README.md: Add missing `translations:` (lars)
  - translations: remove test target (lars)
  - po: Update from Fedora Zanata (lars)
  - translations: move po files and scripts to po/ (lars)
  - translations: Strip country code when loading react-intl's locale-data (mpitt)
  - remove redundant .then(data => data) (jgiardin)
  - Add ability to stop builds that are waiting or running (jgiardin)
  - Change text from "Delete Build" to "Delete Image" (jgiardin)
  - Update Delete Blueprint modal to match layout of Delete Build (jgiardin)
  - Fix miscellaneous propType warnings (jgiardin)
  - Include confirmation modal for deleting a finished build (jgiardin)
  - Swap order of date and type in the Image list item details (jgiardin)
  - Add Delete action for Finished composes (jgiardin)
  - Add ability to delete Failed builds (jgiardin)
  - test_blueprints: Make blueprint selection more robust (lars)
  - Use upstream patternfly-react's Tab component (lars)
  - Changes en-dash to dash and adds spaces (jgiardin)
  - Updates based on a11y review, also simplified i18n format (jgiardin)
  - minor tweaks to improve the screen reader experience (jgiardin)
  - Makes strings translatable in pagination for available components (jgiardin)
  - Update React and enzyme (lars)
  - package.json: Use ~ instead of ^ versions for dependencies (lars)
  - Drop unused dependencies (lars)
  - package.json: update dependencies (lars)
  - Remove package-lock.json (lars)


author: Martin Pitt <mpitt@redhat.com> - 0.4-1
changelog:
  - New version 0.4 (rhbz#1686151)
  - Provide visual indication when a blueprint component is a dependency
  - Enable Undo to retrieve changes after the Discard Changes action
  - Update how blueprint contents are depsolved when contents are added/removed
  - Display an error if a component is added that results in a depsolve failure
  - Show all versions available for a package
  - Provide ability to specify a wildcard version for a package
  - Include ability to specify a hostname for a blueprint
  - Include ability to add a user to a blueprint
  - Fix issue when blueprint contents include a package with more than one arch
  - Fix issue with loading contents in Export modal on Blueprints page
  - Add/edit/remove repository sources
  - Include ability to start lorax-composer


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - New upstream version
  - Do not unconditionally enable BPC on the color transform
  - Fix profile created time for non-UTC timezones
  - Record the gamma table in the session helper error message


author: Richard Hughes <richard@hughsie.com> 1.0.2-1
changelog:
  - New upstream version
  - Add cd_icc_save_data() so that we can easily set _ICC_PROFILE
  - Add CdIccStore to monitor directories of ICC profiles
  - Add SystemVendor and SystemModel properties to the main interface
  - Allow to specify a non-qualified path when using FindProfileByFilename
  - Allow using the key 'Filename' when using FindProfileByProperty
  - Always return the error if any sync method failed
  - Fix GObject introspection when getting lists
  - Fix GObject introspection when getting metadata


author: Richard Hughes <richard@hughsie.com> 1.0.4-1
changelog:
  - Rebase to a new upstream version to fix small security bug
  - Use %ghost in the to avoid removing databases on upgrades
  - Resolves: #1012832


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1668355


author: Jakub Jelinek <jakub@redhat.com> 3.2.3-70
changelog:
  - filter out -fstack-protector-strong, -grecord-gcc-switches and new
    i686, ppc and s390 tunings (#1048850)


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.6-1
changelog:
  - Update to upstream release 1.10.6.
  - Fix missing RPM provides.
  - Resolves: #1382800
  - Resolves: #1365792


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.7-1
changelog:
  - Update to upstream release 1.10.7.
  - Add Open MPI 3.0.0 subpackage (openmpi3).
  - Resolves: #1452826


author: Jarod Wilson <jarod@redhat.com> - 1.10.7-3
changelog:
  - Update openmpi3 sub-package to OpenMPI v3.1.3
  - Resolves: #1637247
  - Rebuild against latest opensm
  - Resolves: #1670688


author: Doug Ledford <dledford@redhat.com> - 3.3.5-2
changelog:
  - Drop libibmad as it didn't soname bump, and also remove the lower level
    opensm libs, libosm{comp,vendor} as they didn't soname bump either
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 3.3.5-3
changelog:
  - Change the file spec so we don't accidentally pick up the debug files in
    the base package on 32bit arches
  - Resolves: bz732495


author: Honggang Li <honli@redhat.com> - 3.3.15-3
changelog:
  - Package up libosmcomp.so.3* to fix dependency issue after rebase
    opensm to release 3.3.21
  - Resolves: bz1670692


author: <odubaj@redhat.com> - 2.3.4-2
changelog:
  - move soname back to *.so.2 (#1875355)
  - add *.so.1002 symlinks for backward compatibility (#1844443)


author: Brian C. Lane <bcl@redhat.com> 19.7.30-1
changelog:
  - Add test for starting compose with deleted blueprint (jikortus)
    Related: rhbz#1683442
  - lorax-composer: Return UnknownBlueprint errors when using deleted blueprints (bcl)
    Resolves: rhbz#1683442
  - lorax-composer: Delete workspace copy when deleting blueprint (bcl)
    Related: rhbz#1683442
  - Use existing storage account (jstodola)
    Related: rhbz#1673012
  - Record date/time of VM creation (jstodola)
    Related: rhbz#1673012
  - Update datastore for VMware testing (chrobert)
    Related: rhbz#1656105
  - Fixes for locked root account test (jikortus)
    Related: rhbz#1687595
  - Add checks for disabled root account (jikortus)
    Related: rhbz#1687595
  - 'compose info' is 'compose details' on RHEL-7 (jikortus)
    Related: rhbz#1687595
  - Update some grammer issues in the test Bash scripts (chrobert)
    Related: rhbz#1656105
  - Update datastore for VMware testing (chrobert)
    Related: rhbz#1656105


author: Brian C. Lane <bcl@redhat.com> 19.7.31-1
changelog:
  - Fixup print function usage with StringIO (bcl)
    Related: rhbz#1688335
  - lorax-composer: pass customization.kernel append to extra_boot_args (bcl)
    Resolves: rhbz#1688335
  - lorax-composer: Add the ability to append to the kernel command-line (bcl)
    Related: rhbz#1688335


author: Brian C. Lane <bcl@redhat.com> 19.7.32-1
changelog:
  - tests: Add a test for using [[customizations]] with [customizations.kernel] (bcl)
    Related: rhbz#1688335
  - lorax-composer: Fix customizations when creating a recipe (bcl)
    Related: rhbz#1688335


author: Brian C. Lane <bcl@redhat.com> 19.7.33-1
changelog:
  - Pass ssl certificate options to anaconda (lars)
    Resolves: rhbz#1701033
  - Change [[modules]] to [[packages]] in tests (atodorov)
    Related: rhbz#1698366
  - Add new test to verify compose paths exist (atodorov)
    Related: rhbz#1698366
  - Add new sanity tests for blueprints (atodorov)
    Related: rhbz#1698366


author: Brian C. Lane <bcl@redhat.com> 19.7.34-1
changelog:
  - [tests] Handle blueprints in setup_tests/teardown_tests correctly (atodorov)
    Related: rhbz#1698366
  - tests: Set BLUEPRINTS_DIR in all cases (lars)
    Related: rhbz#1698366
  - tests: Change the way how we remove pyOpenSSL (atodorov)
    Related: rhbz#1715003
  - Use a less strict regex for disabled root account check (jikortus)
    Related: rhbz#1687595
  - Add test for passing custom option on kernel command line (jikortus)
    Related: rhbz#1688335
  - Use verify_image function as a helper for generic tests (jikortus)
    Related: rhbz#1704209


author: Brian C. Lane <bcl@redhat.com> 19.7.35-1
changelog:
  - test_compose_tar: Fix docker test (lars)
    Related: rhbz#1720224
  - tests: kill the qemu process name used to start it (bcl)
    Related: rhbz#1710877
  - Update local copy of lorax to current rhel7-branch (bcl)
    Related: rhbz#1668520
    Related: rhbz#1715116
    Related: rhbz#1689314
  - Update the lorax templates to match what lorax provides (bcl)
    Related: rhbz#1689314
  - Enable networking in lorax-composer templates (bcl)
    Resolves: rhbz#1710877


author: Brian C. Lane <bcl@redhat.com> 19.7.36-1
changelog:
  - tests: restart composer after adding optional reporsitory (atodorov)
    Related: rhbz#1770193
  - tests: Keep beakerlib repo on the VM for tests which need it (atodorov)
    Related: rhbz#1770193
  - tests: unskip Qcow2 scenario (atodorov)
    Related: rhbz#1770193
  - tests: Ensure failure if beakerlib results file not found (atodorov)
    Related: rhbz#1770193
  - tests: Documentation updates (atodorov)
    Related: rhbz#1770193
  - tests: Use host repositories for make vm (atodorov)
    Related: rhbz#1770193
    Remove unused make targets (atodorov)
    Related: rhbz#1770193
  - DRY when setting up, running & parsing results for beakerlib tests (atodorov)
    Related: rhbz#1770193
  - tests: Fix check_root_account when used with tar liveimg test (bcl)
    Related: rhbz#1770193
  - tests: Use the same asserts as before (atodorov)
    Related: rhbz#1770193
  - tests: switch to using podman instead of docker (atodorov)
    Related: rhbz#1770193
  - tests: Remove nested vm from tar liveimg kickstart test (bcl)
    Related: rhbz#1770193
  - tests: Use --http0.9 for curl ssh test (bcl)
    Related: rhbz#1770193
  - test: Boot the live-iso faster, and login using ssh key (bcl)
    Related: rhbz#1770193
  - tests: Split testing the image into a separate script (bcl)
    Related: rhbz#1770193
  - test: Split up the test class to allow booting other images (bcl)
    Related: rhbz#1770193
  - [tests] Collect compose logs after each build (atodorov)
    Related: rhbz#1770193
  - [tests] Use a function to wait for compose to finish (jikortus)
    Related: rhbz#1770193
  - [tests] Use functions for starting and stopping lorax-composer (atodorov)
    Related: rhbz#1770193
  - Update for differences from py3 in the backported code (bcl)
    Related: rhbz#1718473
  - Remove repos.git related tests (bcl)
    Related: rhbz#1718473
  - composer-cli: Update diff support for customizations and repos.git (bcl)
    Related: rhbz#1718473
  - Add support for customizations and repos.git to /blueprints/diff/ (bcl)
    Related: rhbz#1718473
  - tests: Update custom-base with customizations (bcl)
    Related: rhbz#1718473
  - Change customizations.firewall to append items instead of replace (bcl)
    Related: rhbz#1718473
  - Update customizations.services documentation (bcl)
    Related: rhbz#1718473
  - lorax-composer: Add services support to blueprints (bcl)
    Related: rhbz#1718473
  - lorax-composer: Add firewall support to blueprints (bcl)
    Related: rhbz#1718473
  - lorax-composer: Add locale support to blueprints (bcl)
    Related: rhbz#1718473
  - Update docs for new timezone section (bcl)
    Related: rhbz#1718473
  - lorax-composer: Add timezone support to blueprint (bcl)
    Related: rhbz#1718473
  - Proposal for adding to the blueprint customizations (bcl)
    Related: rhbz#1718473
  - tests: Document Azure setup (atodorov)
  - tests: unskip Azure scenario (atodorov)
  - Support CI testing against a bots project PR (martin)
  - Makefile: Update bots target for moved GitHub project (sanne.raymaekers)
  - tests: Add kickstart tar installation test (jikortus)
    Related: rhbz#1733504
  - tests: Increase test VM memory to 3 GB (jikortus)
    Related: rhbz#1733504
  - tests: add option to disable kernel command line parameters check (jikortus)
    Related: rhbz#1733504
  - tests: Use a loop to wait for VM and sshd to start (bcl)
    Related: rhbz#1733504
  - tests: Drop sort from compose types test (bcl)
    Related: rhbz#1749802
  - New test: assert toml files in git workspace (atodorov)
    Related: rhbz#1749802
  - Change paths for '/api/status' calls and skip this test (atodorov)
    Related: rhbz#1698366
  - Ignore Cockpit CI files when linting (atodorov)
    Related: rhbz#1698366
  - Use optional repository in Live ISO test (atodorov)
    Related: rhbz#1698366
  - Install test dependencies inside virtualenv (atodorov)
    Related: rhbz#1698366
  - Install python2-pip in the test VM and disable EPEL repo (atodorov)
    Related: rhbz#1698366
  - Use qemu-kvm in tests instead of qemu-system (atodorov)
    Related: rhbz#1698366
  - Skip AWS, Azure, qcow2 and live-iso tests (atodorov)
    Related: rhbz#1698366
  - Don't hard-code the path to toml-compare (atodorov)
    Related: rhbz#1698366
  - Install or remove packages in the test environment (atodorov)
    Related: rhbz#1698366
  - Install additional repositories for testing (atodorov)
    Related: rhbz#1698366
  - Prevent ssh asking for password when testing on interactive terminal (atodorov)
    Related: rhbz#1704209
  - Fail if number of excuted tests != number of dicovered tests (atodorov)
    Related: rhbz#1698366
  - Fix typo from test backport (atodorov)
    Related: rhbz#1698366
  - Use passwd --status for locked root account check (jikortus)
    Related: rhbz#1687595
  - Backport changes for Cockpit CI (atodorov)
    Related: rhbz#1698366


author: Brian C. Lane <bcl@redhat.com> 19.7.37-1
changelog:
  - tests: If TEST_OS isn't specified then match the host OS (atodorov)
    Related: rhbz#1770193
  - Remove all repo files & install composer-cli from host repos (atodorov)
    Related: rhbz#1770193
  - Always remove lorax-composer & composer-cli RPMs before installing them (atodorov)
    Related: rhbz#1770193
  - Always remove existing VM image before building new one (atodorov)
    Related: rhbz#1770193
  - tests: enable compose_ext4 test to use CDN repos (atodorov)
    Related: rhbz#1698366


author: Brian C. Lane <bcl@redhat.com> 19.7.39-1
changelog:
  - test: Turn TestLiveIso back on (bcl)
    Related: rhbz#1770193
  - Makefile: archive should not run git tag (bcl)
    Related: rhbz#1770193
  - lorax-composer: Add liveuser on live-iso to wheel group (bcl)
    Related: rhbz#1770193
  - tests: Boot the test images with graphics=True (bcl)
    Related: rhbz#1770193
  - tests: Add serial console to images we boot in CI (bcl)
    Related: rhbz#1770193


author: Brian C. Lane <bcl@redhat.com> 19.7.40-1
changelog:
  - Add --no-system-repos to lorax-composer (bcl)
    Resolves: rhbz#1785388
  - tests: update skip message for TestApi (atodorov)
    Related: rhbz#1785159
  - tests: remove --test=2 from compose_sanity (jrusz)
    Related: rhbz#1789451
  - Add test for canceling a running compose (jrusz)
    Related: rhbz#1789451
  - Update datastore for VMware testing (chrobert)
    Related: rhbz#1785159
  - tests: pip install future (atodorov)
    Related: rhbz#1785159
  - lorax-composer: Estimate metadata size required by Anaconda (bcl)
    Resolves: rhbz#1761337
  - composer: Add the yum cache archive size to the size estimate (bcl)
    Related: rhbz#1761337


author: Brian C. Lane <bcl@redhat.com> 19.7.41-1
changelog:
  - [tests] Fix repos files handling in test_repos_sanity.sh (jikortus)
    Related: rhbz#1828808
  - [tests] update glusterfs version to 6 (jikortus)
    Related: rhbz#1828808
  - [tests] Use rel-eng/nightly repo in test_repos_sanity.sh and vm.install (jikortus)
    Related: rhbz#1828808
  - [tests] Update download server URLs in tests (jikortus)
    Related: rhbz#1828808
  - Add test for running composer with --no-system-repos option (jikortus)
    Related: rhbz#1785159
  - [tests] don't add only rel-eng optional repo for live-iso (jikortus)
    Resolves: rhbz#rhbz#1826029


author: Brian C. Lane <bcl@redhat.com> 19.7.42-1
changelog:
  - [tests] Remove vm-local-repos Makefile target (jikortus)
    Related: rhbz#1810711
  - [tests] Enable handling of rel-eng images (jikortus)
    Related: rhbz#1810711
  - tests: Unskip AWS test scenario (atodorov)
    Related: rhbz#1785159


author: Brian C. Lane <bcl@redhat.com> 19.7.43-1
changelog:
  - composer-cli: Change timeout to 5 minutes (bcl)
    Related: rhbz#1847490
  - composer-cli: Disable retry counter on connection timeout (bcl)
    Resolves: rhbz#1847490
  - test: Put VM image overlay into /var/tmp (martin) (martin)
    Related: rhbz#1825190


author: Paul Wouters <pwouters@redhat.com> - 1.4.2-8
changelog:
  - Resolves: rhbz#CVE-2015-6496
  - Fold in upstream patches since 1.4.2 release up to git 900d7e8
  - Fold in upstream patch set of 2015-08-18 for coverity issues


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack >= 1.0.6 as it is same .so version)


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-4
changelog:
  - Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different


author: Phil Sutter <psutter@redhat.com> - 1.4.4-5
changelog:
  - Add git commit info to IPv6 NAT support patch
  - Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
  - Backport: nfct: Drop dead code in nfct_timeout_parse_params()
  - Backport: src: Fix for implicit-fallthrough warnings


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.76-1
changelog:
  - Allow containers to use fuse file systems by default
  - Allow containers to sendto dgram socket of container runtimes
  - Needed to run container runtimes in notify socket unit files.


author: Dan Walsh <dwalsh@redhat.com> - 0.2.0-1
changelog:
  - Add License
  - Add compatibility mode flag to only do docker specific stuff if INPUTFILE
  not specified.
  - Minor Bug fixes for non docker use cases


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.9.0-1.rhel75.gite0997c3
changelog:
  - Resolves: #1475625
  - bump to v0.9.0
  - built commit e0997c3
  - include 'rhel75' string in release field to differentiate from rhel 7.4


author: Eli Uriegas <eli.uriegas@docker.com> - 1.2.2-3.3
changelog:
  - [runc -> 09c8266] nsenter: clone /proc/self/exe to avoid exposing
    host binary to container (CVE-2019-5736)


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.2.5-3.1
changelog:
  - containerd 1.2.5 release
  - update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30
  - build with Go 1.11.5


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.7.4-1
changelog:
  - Resolves: #1664009 - bump to v0.7.4
  - remove unused devel and unit-test* packages
  - update go build env


author: Jindrich Novy <jnovy@redhat.com> - 0.8.3-3
changelog:
  - fix "CVE-2020-10749 containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters"
  - Resolves: #1842334


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-7
changelog:
  - fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
  - Resolves: #1806944


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-6
changelog:
  + control-center-3.26.2-6
  - Fix Clone MAC not being saved in Ethernet device properties
  - Resolves: #1467295


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-8
changelog:
  + control-center-3.26.2-8
  - Fix Wi-Fi networks not getting updated
  - Show "Wi-Fi disabled" page when Wi-Fi is disabled
  - Resolves: #1545713


author: Jiri Vanek <jvanek@redhat.com> - 1.1-3
changelog:
  - commented requires on lua posix to stop blocking composes.
  - changed it to 644 to dont mislead by executable flags
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 1.1-5
changelog:
  - posttrans silenced, the error is appearing only in state, when there is nothing to copy
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 2.2-1
changelog:
  - added "jre/lib/security/blacklisted.certs" to cared files
  - moved to newest release 2.1
  - moved to new upstream at pagure.io
  - added new script of copy_jdk_configs_fixFiles.sh 
  - copy_jdk_configs.lua  aligned to it
  - Resolves: rhbz#1427463


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-18
changelog:
  - fix xfs build failure in chrooted environment (#1263341)
  - update filesystem lists for stat and tail from latest upstream
    (#1327881, #1280357) 
  - disable id/setgid.sh test(missing chroot feature), fix 
    cp-a-selinux test (#1266500,#1266501)
  - colorls.sh - change detection of interactive shell for ksh
    compatibility (#1321648)
  - fix date --date crash with empty or invalid TZ envvar (#1325786)
  - df -l: do not hang on a dead autofs mount point (#1309247)
  - sort -h: fix functionality of human readable numeric sort for other
    than first field (#1328360)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-19
changelog:
  - timeout: fix race possibly terminating wrong process (#1439465)
  - ls: allow interruption when reading slow directories (#1421802)
  - fold: preserve new-lines in mutlibyte text (#1418505)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-23
changelog:
  - update description of the -a/--all option in df.1 man page (#1553212)
  - sort -M: fix memory leak when using multibyte locale (#1540059)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-24
changelog:
  - doc: improve description of the --kibibytes option of ls (#1527391)
  - doc: fix typo in date example (#1620624)
  - stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
  - df: avoid stat() for dummy file systems with -l (#1668137)
  - df: prioritize mounts nearer the device root (#1042840)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-8
changelog:
  - Resolves: rhbz#1434528
  - Resolves: rhbz#1434529
  - Resolves: rhbz#1434534

  - cfg: Prevents use of uninitialized buffer (rhbz#1434528)
  - merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
  - man: Fix typos in man page (rhbz#1434529)
  - merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
  - Fix typo: Destorying -> Destroying (rhbz#1434529)
  - merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
  - init: Add doc URIs to the systemd service files (rhbz#1434529)
  - merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
  - man: Modify man-page according to command usage (rhbz#1434529)
  - merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
  - Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
  - merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
  - upstart: Add softdog module loading example (rhbz#1434529)
  - merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
  - Remove deprecated doxygen flags (rhbz#1434529)
  - merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
  - Remove redundant header file inclusion (rhbz#1434528)
  - merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
  - Qdevice: fix spell errors in qdevice (rhbz#1434529)
  - merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
  - doc: document watchdog_device parameter (rhbz#1434529)
  - merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
  - Logsys: Change logsys syslog_priority priority (rhbz#1434534)
  - merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
  - logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
  - merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9
changelog:
  - Resolves: rhbz#1445001

  - Main: Call mlockall after fork (rhbz#1445001)
  - merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
  - Disable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-10
changelog:
  - Resolves: rhbz#1439205
  - Resolves: rhbz#1461450
  - Resolves: rhbz#1469170
  - Resolves: rhbz#1476214

  - main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
  - merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
  - totem: Propagate totem initialization failure (rhbz#1461450)
  - merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
  - totemcrypto: Refactor symmetric key importing (rhbz#1461450)
  - merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
  - totemcrypto: Use different method to import key (rhbz#1461450)
  - merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
  - main: Add option to set priority (rhbz#1469170)
  - merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
  - main: Add support for libcgroup (rhbz#1476214)
  - merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
  - totemcrypto: Fix compiler warning (rhbz#1461450)
  - merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)


author: Jan Friesse <jfriesse@redhat.com> 2.4.3-2
changelog:
  - Resolves: rhbz#1536219

  - logging: Make blackbox configurable (rhbz#1536219)
  - merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
  - logging: Close before and open blackbox after fork (rhbz#1536219)
  - merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)


author: Jan Friesse <jfriesse@redhat.com> 2.4.3-5
changelog:
  - Resolves: rhbz#1376819
  - Resolves: rhbz#1634710

  - configure: add --with-initconfigdir option (rhbz#1376819)
  - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
  - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
  - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
  - totemcrypto: Fix importing of the private key (rhbz#1634710)
  - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
  - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
  - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-7
changelog:
  - Related: rhbz#1371880

  - Fix build on RHEL7.3 latest (rhbz#1371880)
  - merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
  - Enable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-1
changelog:
  - Resolves: rhbz#1732039
  - Resolves: rhbz#1153818
  - Resolves: rhbz#1647120

  - Rebase to Corosync 2.4.5


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-2
changelog:
  - Resolves: rhbz#1656492

  - totem: Increase ring_id seq after load (rhbz#1656492)
  - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)


author: Jan Friesse <jfriesse@redhat.com> - 2.4.5-3
changelog:
  - Resolves: rhbz#1737884
  - Resolves: rhbz#1737887

  - Do not set exec permission for service file
  - Fix CFLAGS definition


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-5
changelog:
  - Resolves: rhbz#1679792
  - Resolves: rhbz#1780134

  - votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
  - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
  - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
  - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
  - votequorum: set wfa status only on startup (rhbz#1679792)
  - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-6
changelog:
  - Resolves: rhbz#1835885

  - stats: Add basic schedule-miss stats to needle (rhbz#1835885)
  - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
  - main: Add schedmiss timestamp into message (rhbz#1835885)
  - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-7
changelog:
  - Related: rhbz#1835885

  - main: Make schedmiss in cmap and log equal (rhbz#1835885)
  - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1
changelog:
  - Resolves: rhbz#1896311
  - Resolves: rhbz#1897087

  - spausedd: Fix log_perror (rhbz#1896311)
  - spausedd: Add ability to move process into root cgroup (rhbz#1897087)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Marek Polacek <polacek@redhat.com> 4.8.5-28
changelog:
  - Minor testsuite fixes to clean up test results (#1469697)
  - retpoline support for spectre mitigation (#1535655)


author: Marek Polacek <polacek@redhat.com> 4.8.5-31
changelog:
  - backport s390 -mpic-data-is-text-relative feature (#1555397)
  - fix crash when write follows large read (#1463706)
  - fix emit_move_insn ICE (#1565536)
  - add missing rs6000-cpus.def (#1512202)


author: Marek Polacek <polacek@redhat.com> 4.8.5-34
changelog:
  - fix infinite looping in -fipa-cp-clone (#1546372)
  - don't look for vsld gcc.target/powerpc/pr72717.c


author: Marek Polacek <polacek@redhat.com> 4.8.5-38
changelog:
  - fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442)
  - allow libitm to use HTM (#1659698)
  - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891)
  - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814)
  - enable initializing statics with COMPOUND_LITERAL_EXPR in C99
    (#1672652, PR c/63567)
  - fix PIC_OFFSET_TABLE_REGNUM (#1614326)
  - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784)
  - fix ICE with alias template (#1648161, PR c++/53658)


author: Marek Polacek <polacek@redhat.com> 4.8.5-43
changelog:
  - fix wrong code emitted for movv1qi on s390x (#1784759)
  - fix wrong code with EH due to a bug in LRA (#1800526)


author: Dave Anderson <anderson@redhat.com> - 7.1.8-1
changelog:
  - Rebase to upstream version 7.1.8
    Resolves: rhbz#1393534
  - POWER9 - Power ISA 3.0 related support for crash utility
    Resolves: rhbz#1368711
  - crash package update - ppc64/ppc64le
    Resolves: rhbz#1384944
  - exception RIP: unknown or invalid address
    Resolves: rhbz#1350457
  - Crash does not always parse correctly the modules symbol tables
    Resolves: rhbz#1360415
  - ARM64: crash live system from: WARNING: cannot read linux_banner string
    Resolves: rhbz#1392007
  - kmem: invalid structure member offset: page_count
    Resolves: rhbz#1392011
  - Kernel address space randomization [KASLR] support 
    Resolves: rhbz#1392658
  - invalid structure size: tnt
    Resolves: rhbz#1420653


author: Dave Anderson <anderson@redhat.com> - 7.1.9-1
changelog:
  - Rebase to upstream version 7.1.9
    Resolves: rhbz#1393534
  - Fix gdb "set scope" option for KASLR kernels.
    Resolves: rhbz#1440725
  - Fix for the determination of the x86_64 "phys_base" value when it is
    not passed in the VMCOREINFO data of ELF vmcores
    Resolves: rhbz#1439170


author: Dave Anderson <anderson@redhat.com> - 7.1.9-2
changelog:
  - Rebase to github commits 87179026 to ad3b8476
    Resolves: rhbz#1393534
  - Prohibit native gdb disassemble command when KASLR
    Resolves: rhbz#1445649


author: Dave Anderson <anderson@redhat.com> - 7.2.0-1
changelog:
  - Rebase to upstream version 7.2.0
  - Rebase to github commits da9bd35a to e2efacdd
    Resolves: rhbz#1497316
  - ppc64le: fix for "WARNING: cannot access vmalloc'd module memory"
    Resolves: rhbz#1485391
  - Support for analyzing an SADUMP crash dump if KASLR is enabled
    Resolves: rhbz#1504467


author: Dave Anderson <anderson@redhat.com> - 7.2.0-3
changelog:
  - Rebase to github commits 494a796e to 63419fb9
    Resolves: rhbz#1497316
  - Fix IRQ stack transition failure due to kernel's removal of 64-byte gap
    Resolves: rhbz#1530887


author: Dave Anderson <anderson@redhat.com> - 7.2.0-5
changelog:
  - Additional support for analyzing an SADUMP dumpfile if KASLR
    and KPTI are both enabled
    Resolves: rhbz#1504467


author: Dave Anderson <anderson@redhat.com> - 7.2.3-1
changelog:
  - Rebase to upstream version 7.2.3
    Resolves: rhbz#1559460
  - eBPF support with new bpf command
    Resolves: rhbz#1559758


author: Dave Anderson <anderson@redhat.com> - 7.2.3-2
changelog:
  - Work around rhel-7.6 s390/s390x ptrace.h incompatiblity FTBFS issue
  - Rebase to github commit 46d21219
    Resolves: rhbz#1559460


author: Dave Anderson <anderson@redhat.com> - 7.2.3-5
changelog:
  - Rebase to github commits b9d76838 to c79a11fa
    Resolves: rhbz#1559460
  - Fix ppc64/ppc6le stacksize calculation
    Resolves: rhbz#1589685


author: Dave Anderson <anderson@redhat.com> - 7.2.3-7
changelog:
  - Support ppc64 increased VA range
  - Fix ppc64 "bt" command failure reporting invalid NIP value
    Resolves: rhbz#1617936


author: Dave Anderson <anderson@redhat.com> - 7.2.3-8
changelog:
  - Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
    Resolves: rhbz#1617936


author: Dave Anderson <anderson@redhat.com> - 7.2.3-16
changelog:
  - Resurrect "dev -p" option.
  - Fix "dev -[dD]" options to account for request_queue.in_flight[] removal.
    Resolves: rhbz#1662039
  - Command line input fixes
    Resolves: rhbz#1664061


author: Dave Anderson <anderson@redhat.com> - 7.2.6-1
changelog:
  - Rebase to latest upstream sources
    Resolves: rhbz#1686560 
  - Utilize the VMCOREINFO PT_NOTE in /proc/kcore header
    Resolves: rhbz#1627528
  - Support extraction of CONFIG_PROC_VMCORE_DEVICE_DUMP data from dumpfile header
    Resolves: rhbz#1702535


author: Dave Anderson <anderson@redhat.com> - 7.2.6-2
changelog:
  - Fix "p" command regression
    Resolves: rhbz#1718417  
  - Fix arm64 debug kernel read error message during initialization
    Resolves: rhbz#1718736


author: Dave Anderson <anderson@redhat.com> - 7.2.7-2
changelog:
  - Rebase to latest upstream sources
    Resolves: rhbz#1738619
  - Support for KASLR on s390x
    Resolves: rhbz# 1753172


author: Dave Anderson <anderson@redhat.com> - 7.2.7-3
changelog:
  - Rebase to github commit 6c1c8ac6
    Resolves: rhbz#1738619
  - Fix "log -a" option
    Resolves: rhbz#1785537
  - Fix for ELF kdump vmcores form s390x KASLR kernels
    Resolves: rhbz#1786996


author: Joshuahu <joshuahu@tencent.com> - 7.2.7-3.1
changelog:
  - add find var patch by hunterzhang
  - add eframe-verify-fix patch by samuelliao
  - modify lib/libiberty/src/configure to a+x
  - Fix 7.2.6 bt -a can show all problem


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.10.0-18
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16
changelog:
  - disable mail from anacron with empty MAILTO
  - crontab: do not block access with PAM when running as root
  - improve the crontab man page
  - do not hardcode system_u selinux user but use the user from
    the current context


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17
changelog:
  - make anacron not to contradict itself in syslog
    (job output does not have to be necessarily mailed)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - fix regression - spurious PAM log message from crontab (#1479064)
  - allow empty variables in crontabs (#1439217)


author: Marcel Plch <mplch@redhat.com> - 1.4.11-20
changelog:
  - Fix race condition when crontab is modified the same second
    before and after reading the crontab
  - Resolves: rhbz#1638691


author: Marcel Plch <mplch@redhat.com> - 1.4.11-22
changelog:
  - Backport upstream patch to fix cron failing on
    smart card authentication
  - Resolves: rhbz#1650314


author: Jan Staněk <jstanek@redhat.com> - 1.4.11-24
changelog:
  - Limit memory allocated for file descriptors
    Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
    Resolves: rhbz#2026289


author: Ondrej Kozina <okozina@redhat.com> - 1.6.7-1
changelog:
  - Update to cryptsetup 1.6.7.
  - patch: avoid use of kernel crypto API socket which is known
    to be broken in RHEL7.0 kernel (7.1+ is fine).
  - Resolves: #1206170


author: Ondrej Kozina <okozina@redhat.com> - 1.7.4-4
changelog:
  - patch: fix regression in blockwise functions
  - patch: avoid repeating error messages when device holders
    detected.
  - patch: add option to cryptsetup-reencrypt to print progress
    log sequentaly
  - patch: use --progress-frequency in reencryption dracut module
  - Resolves: #1480006 #1447632 #1479857


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-2
changelog:
  - patch: stop LUKS2 auto-recovery if device is no longer LUKS
    type
  - patch: update cryptsetup man page for --type option
  - patch: rephrase error message for invalid --type option in
    convert action
  - Resolves: #1599281 #1601477 #1601481


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-3
changelog:
  - Add expected permissions explicitly for locking directory.
  - Reinstate sed script removing library rpath from libtool
    script due to bug in upstream sources distribution.
  - Resolves: #1609847 #1610379


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-4
changelog:
  - patch: Fix broken LUKS2 api test.
  - patch: Allow cryptsetup to process all LUKS2 metadata variants
    according to LUKS2 specifiation.
  - Resolves: #1653388


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-5
changelog:
  - patch: calculate alignment offset correctly for LUKS2 devices.
  - patch: fix memory leak in LUKS2 validation.
  - Resolves: #1613953 #1693592


author: Isaac Boukris <iboukris@redhat.com> - 4.10.16-2
changelog:
  - resolves: #1828354 - add additioanl hostnames to the keytab
  - resolves: #1836427 - add dnshostname option net-ads-join


author: Andreas Schneider <asn@redhat.com> - 4.10.16-8
changelog:
  - resolves: #1878205 - Fix restarting winbind on package upgrade
  - resolves: #1892632 - Fix CVE-2020-14318
  - resolves: #1891687 - Fix CVE-2020-14323
  - resolves: #1879834 - Fix CVE-2020-1472
  - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
  - resolves: #1868917 - Fix %U substitution for 'valid users' option
  - resolves: #1853272 - Fix 'require_membership_of' documentation in
                         pam_winbind{.conf} manpage


author: Andreas Schneider <asn@redhat.com> - 4.10.16-14
changelog:
  - resolves: #1937867 - Fix possible core dump with printing support
  - resolves: #1930747 - Ensure that libwbclient has been updated before
                         restarting services


author: Andreas Schneider <asn@redhat.com> - 4.10.16-16
changelog:
  - resolves: #2019661 - Fix CVE-2016-2124
  - resolves: #2019673 - Fix CVE-2020-25717
  - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl


author: Andreas Schneider <asn@redhat.com> - 4.10.16-18
changelog:
  - resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
  - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
  - resolves: #2046148 - Fix CVE-2021-44142


author: Andreas Schneider <asn@redhat.com> - 4.10.15-1
changelog:
  - related: #1785121 - Rebase to version 4.10.15
  - resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
  - resolves: #1801496 - Add missing ctdb directories


author: Andreas Schneider <asn@redhat.com> - 4.10.4-6
changelog:
  - resolves: #1753254 - Fix trusted domain enumeration in windind caused
                         a Active Directory update


author: Isaac Boukris <iboukris@redhat.com> - 4.10.4-7
changelog:
  - resolves: #1657428 - Fix spnego downgrade
  - resolves: #1663064 - Fix net ads join in hardened environments


author: Andreas Schneider <asn@redhat.com> - 4.10.4-11
changelog:
  - resolves: #1797560 - Fix Kerberos authentication with trusted domains
  - resolves: #1797561 - Fix smbclient mkdir log spam
  - resolves: #1797562 - Fix client tools log spam about messaging


author: Andreas Schneider <asn@redhat.com> - 4.8.1-1
changelog:
  - related: #1558560 - Rebase to newer Samba version
  - resolves: #1567896 - Fix possible crash if secrets db is emtpy
  - resolves: #1570020 - Fix a crash in smbd when dfsgetinfo is called


author: Andreas Schneider <asn@redhat.com> - 4.8.1-3
changelog:
  - resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
  - resolves: #1525511 - Fix idmap_rid dependency on trusted domain list


author: Andreas Schneider <asn@redhat.com> - 4.8.3-1
changelog:
  - related: #1558560 - Rebase to Samba version 4.8.3
  - resolves: #1579398 - Add winbind localauth krb5 plugin


author: Andreas Schneider <asn@redhat.com> - 4.8.3-4
changelog:
  - resolves: #1614132 - Fix delete-on-close after smb2_find
  - resolves: #1614265 - Fix CVE-2018-1139
  - resolves: #1614269 - Fix CVE-2018-10858


author: Andreas Schneider <asn@redhat.com> - 4.9.1-1
changelog:
  - resolves: #1649434 - Update to version 4.9.1
  - resolves: #1648852 - Fix out of bound array access in ctdb
  - resolves: #1647960 - Fix segfault in the debug system with hardended build
  - resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
  - resolves: #1650452 - Add smbc_setOptionProtocols()
  - resolves: #1659513 - Fix testparm/pdbedit crash
  - resolves: #1529301 - Added new 'net ads spn' command
  - resolves: #1595277 - Fix manpage for 'net ads lookup'
  - resolves: #1600274 - Fix vfs_audit log which does not show full path names
  - resolves: #1623140 - Fix handling the 'disable netbios' option
  - resolves: #1624227 - Connect to spoolss with the correct version information
  - resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
  - resolves: #1579401 - Implement 'net ads leave --keep-account'
  - resolves: #1624227 - Fix spoolss client operations against newer Windows
                         versions
  - resolves: #1656405 - Fix looking up local system accounts


author: Andreas Schneider <asn@redhat.com> - 4.9.1-2
changelog:
  - resolves: #1674403 - Fix panic when setting 'force group' on a share with
                         an active connections
  - resolves: #1670720 - Fix installation of samba-python
  - resolves: #1669476 - Fix user lookup via UPN


author: Andreas Schneider <asn@redhat.com> - 4.9.1-3
changelog:
  - resolves: #1479451 - Fix 'net' command auth with Kerberos
  - resolves: #1686158 - Fix printing with CUPS
  - resolves: #1662408 - Fix username/password printing with CUPS


author: Andreas Schneider <asn@redhat.com> - 4.9.1-4
changelog:
  - resolves: #1690222 - Fix --max-protocol documentation of smbclient
  - resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
  - resolves: #1696524 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.9.1-8
changelog:
  - resolves: #1754838 - Fix username/password auth with smbspool
  - resolves: #1754835 - Fix builtin groups creation.


author: Andreas Schneider <asn@redhat.com> - 4.9.1-9
changelog:
  - resolves: #1759445 - Fix trusted domain enumeration in windind caused
                         a Active Directory update


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-32
changelog:
  - 1468747 - CUPS failover backend allows multiple jobs to get stuck in failed queue
  - 1469816 - Failover backend won't fail-over if the printer is disconnected


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-33
changelog:
  - 1466497 - Remove weak SSL/TLS ciphers from CUPS
  - 1434153 - CUPS print jobs show incorrect number under the "pages" column


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-39
changelog:
  - resolve covscan issue found in fix for 1570480
  - automake sometimes fails to generate correct macros - so force autoconf


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44
changelog:
  - 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
  - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
  - 1753809 - Settings in ~/.cups/client.conf aren't used


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46
changelog:
  - 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-18
changelog:
  - Fix segfault in texttopdf filter (bug #1194263).
  - Improve cups-browsed efficiency (bug #1191691).
  - Fetch printer descriptions with cups-browsed (bug #1223719).
  - Fix cups-browsed "_" handling for printer names (bug #1167408).


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-21
changelog:
  - Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
    CVE-2015-3258, CVE-2015-3279).


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-16
changelog:
  - Applied upstream patch to fix BrowseAllow parsing issue
    (CVE-2014-4338, bug #1091568).
  - Applied upstream patch for cups-browsed DoS via
    process_browse_data() out-of-bounds read (CVE-2014-4337,
    bug #1111510).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28
changelog:
  - 1816109 - Queues are not cleaned up after stopping cups-browsed
  - 1811190 - cups-browsed leaks memory


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-43
changelog:
  - curl --socks5-{basic,gssapi}: control socks5 auth (#1409208)
  - nss: fix a memory leak when CURLOPT_CRLFILE is used (#1427883)
  - nss: do not leak PKCS #11 slot while loading a key (#1444860)
  - nss: fix a possible use-after-free in SelectClientCert() (#1473158)


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-48
changelog:
  - fix RTSP bad headers buffer over-read (CVE-2018-1000301)
  - fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
  - fix LDAP NULL pointer dereference (CVE-2018-1000121)
  - fix RTSP RTP buffer over-read (CVE-2018-1000122)
  - http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
  - doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
  - update certificates in the test-suite because they expire soon (#1572723)


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-50
changelog:
  - remove dead code, detected by Coverity Analysis
  - remove unused variable, detected by GCC and Clang


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-52
changelog:
  - prevent curl --rate-limit from hanging on file URLs (#1281969)
  - fix NTLM password overflow via integer overflow (CVE-2018-14618)
  - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
  - backport options to force TLS 1.3 in curl and libcurl (#1672639)
  - prevent curl --rate-limit from crashing on https URLs (#1683292)


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Doug Ledford <dledford@redhat.com> - 2.0.32-1
changelog:
  - Update to latest upstream version (2.0.25 -> 2.0.32)
  - Remove 4 patches folded into upstream release
  - Rebuild against new libibverbs and librdmacm
  - Update exclusive arch to accommodate i686 arch
  - Related: bz724896, bz725016


author: Doug Ledford <dledford@redhat.com> - 2.0.34-1
changelog:
  - Update to latest upstream version
  - Rebuild against new libibverbs (FDR link speed capable and IBoE enabled)
  - Related: bz750609


author: Jay Fenlason <fenlason@redhat.com> - 2.0.39-1
changelog:
  - Upgrade to latest version
    Resolves: rhbz#985117
  - Fix a compile problem with NULL not being defined
    Resolves: rhbz#1029509


author: Doug Ledford <dledford@redhat.com> - 2.0.39-5
changelog:
  - Bump and rebuild after retagging the latest libibverbs and librdmacm
    into the build root
  - Related: bz1123996


author: Doug Ledford <dledford@redhat.com> - 2.1.5-1
changelog:
  - Update to latest upstream release
  - Include support for s390x
  - Include support for aarch64
  - Drop old fix for NULL not defined, upstream has it resolved
  - Resolves: bz1182180, bz1197216, bz1172462, bz1044727, bz1056487


author: Jeff Moyer <jmoyer@redhat.com> - 58.2-1
changelog:
  - rebase to v58.2
  - remove patches that were backported from later versions
  - we now support >4k faults, so remove rhel-only patches
  - add libpmem dependency, and gate it on x86_64
  - pull in static checker fix for uncheck sscanf result
  - fix up use of uninitialized variable
  - Related: bz#1457566 bz#1471807 bz#1456954


author: Jeff Moyer <jmoyer@redhat.com> - 60.3-2.1
changelog:
  - Remove the btt.rules udev rule file.  This was fixed in-kernel. (Jeff Moyer)
  - Related: bz#1585122


author: Jeff Moyer <jmoyer@redhat.com> - 62-1
changelog:
  - Rebase to v62 (Jeff Moyer)
    - a new monitor command / daemon
    - an ndctl udev rule for recording the unsafe shutdown count
    - smart error injection
    - create-namespace fix for fragmented namespaces
  - Resolves: bz#1610649 bz#1611833 bz#1456320


author: Jeff Moyer <jmoyer@redhat.com> - 64.1-1
changelog:
  - Rebase to v64.1 (Jeff Moyer)
    - add security commands
    - fix broken udev rule for dirty shutdown count
  - Resolves: bz#1634348 bz#1635441


author: Jeff Moyer <jmoyer@redhat.com> - 65.1.el7
changelog:
  - Rebase to v65
    - clear-errors: new command to clear errors on a namespace
    - monitor: remove the requirement of a default config
    - sanitize-dimm: allow a zero-key for secure-erase
    - sanitize-dimm: preserve keys after an overwrite
    - load-keys: fix for non-TPM keys
  - Fix test harness to run against the rhel7 test kernel modules
  - Related: rhbz#1722481


author: Jeff Moyer <jmoyer@redhat.com> - 65.2.el7
changelog:
  - Remove 'daxctl migrate-device-model' command.  We won't
    support hot-plugging device dax into the memory hierarchy
    on RHEL 7.
  - Resolves: rhbz#1734153


author: Jeff Moyer <jmoyer@redhat.com> - 65.3.el7
changelog:
  - modify nvdimm-security.conf touse '&&' instead of ';'
    Without this change, the module doesn't load
  - Resolves: rhbz#1725405


author: Jeff Moyer <jmoyer@redhat.com> - 1.5.1-1.el7
changelog:
  - rebase to pmdk 1.5.1
    - libpmemobj C++ bindings moved to separate package
    - pmempool convert is now a thin wrapper around pmdk-convert
    - add ownership information for libpmemobj headers directory
    - remove broken pmemcto library
  - Related: rhbz#1634347


author: Marek Kasik <mkasik@redhat.com> - 3.22.3-2
changelog:
  - Import dconf-editor package from Fedora 25
  - Add Conflicts tag
  - Version BuildRequires
  - Update License field
  - Resolves: #1388931


author: Songqiao Tao <joeytao@tencent.com> - 9.49.30-1.1
changelog:
  - Port to tlinux2.2, see http://tapd.oa.com/tlinux/prong/stories/view/1010024061056248337
  - prevent ctrl+alt+del to reboot the machine
  - set kernel.sysrq_use_leftctrl=1
  - Fix bug of waiting if-rename, Add dependency on rename_netif script


author: Lorin Liu<lorinliu@tencent.com> - 9.49.30-1.3
changelog:
  - reserve ports for tsc agent and sshd, see http://tapd.oa.com/tlinux/prong/stories/view/1010024061058446193


author: Lorin Liu<lorinliu@tencent.com> - 9.49.30-1.4
changelog:
  - remove argument kernel.printk, see http://tapd.oa.com/tlinux/prong/stories/view/1010024061058773559


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.38-1
changelog:
  - ifdown-eth: we need to flush global scope as well
  - killproc/status: add missing '-b <binary>' option
  - specfile: mark 'rwtab' and 'statetab' as config files
  - spec: we need newer lvm
  - rwtab: add /var/lib/systemd/timers
  - ifup-eth: remove quote marks
  - 9.70-sync: Move everything to github
  - 9.70-sync: rwtab updated
  - 9.70-sync: service file updated
  - 9.70-sync: syconfig.txt updated
  - 9.70-sync: systemd/rhel-import-state updated
  - 9.70-sync: sysconfig/network-scripts/* updated - part 2
  - 9.70-sync: sysconfig/network-scripts/* updated - part 1
  - 9.70-sync: rc.d/init.d/network updated
  - 9.70-sync: rc.d/init.d/netconsole updated
  - 9.70-sync: rc.d/init.d/functions updated
  - 9.70-sync: ipv6-6to4.howto example updated
  - 9.70-sync: examples/networking/ifcfg-bridge updated
  - network: load NetworkManager connection via dbus
  - network: check for running NetworkManager via dbus


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.39-1
changelog:
  - sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
  - DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
  - re-add missing $HOSTNAME initialization
  - ifup: add support for VLAN_EGRESS_PRIORITY_MAP
  - rhel-autorelabel: synchronize cached writes before reboot


author: Songqiao Tao <joeytao@tencent.com> - 9.49.39-2
changelog:
  - Port to tlinux2.x, see http://tapd.oa.com/tlinux/prong/stories/view/1010024061056248337
  - prevent ctrl+alt+del to reboot the machine
  - set kernel.sysrq_use_leftctrl=1
  - Fix bug of waiting if-rename, Add dependency on rename_netif script
  - network-functions: is_available_wait should wait even in the case that is_available returns 2
  - reserve ports for tsc agent and sshd, see http://tapd.oa.com/tlinux/prong/stories/view/1010024061058446193
  - change printk loglevel, see http://tapd.oa.com/tlinux/prong/stories/view/1010024061059375197
  - add new network segment 9.0.0.0 in setdefaultgw-tlinux


author: Songqiao Tao <joeytao@tencent.com> - 9.49.39-3
changelog:
  - enable ipv6 by default, set net.ipv6.conf.all.disable_ipv6=0
  - modify setdefaultgw-tlinux in case eth1 has no ip


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.40-1
changelog:
  - require 'redhat-release' instead of /etc/system-release & conflict with older versions
  - ifup-post: always update 'nameserver' & 'search' entries in /etc/resolv.conf
  - systemd/system: symlinks for initscripts' services removed
  - *.old extension added to list of ignored files
  - ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
  - init.d/functions: convert2sec() function added
  - init.d/functions: is_true() & is_false() extended by ON/OFF support
  - usleep(1) calls replaced with sleep(1) calls
  - network-scripts: DBus calls forwarded to /dev/null
  - network-scripts: firewall-cmd replaced with DBus calls
  - ARPUDATE option introduced


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.41-1
changelog:
  - ifdown-post: fix logical error in commit 5d61564
  - network-functions: use POSIX forwarding instead of bash-ism


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.42-1
changelog:
  - rhel-autorelabel: set UEFI boot order (BootNext) same as BootCurrent
  - network-functions: use tr to upper case strings rather than awk
  - sysconfig/readonly-root: Clarify the usage of readonly-root
  - network-functions: add error messages for bonding installation
  - sysctl.conf.s390: drop SHMALL and SHMMAX
  - network.service: 'reload' removed
  - rhel-readonly.service: target name for random seed fixed
  - init.d/functions: fix sourcing for ksh


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.45-1
changelog:
  - network: parsing of /proc/mounts returned (bug #1572659)
  - netconsole: LSB header added (bug #1508489)
  - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)


author: Jan Macku <jamacku@redhat.com> - 9.49.48-1
changelog:
  - network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
  - Configure autorelabel service to output to journal and to console if set (bug #1634661)
  - Fix changelog typo


author: Jan Macku <jamacku@redhat.com> - 9.49.49-1
changelog:
  - ifup-eth: Check that device name is set (bug #1741830)
  - Add option for IPv6 GRE tunnel (bug #1691552)


author: Songqiao Tao <joeytao@tencent.com> - 9.49.49-1.1
changelog:
  - add config-noreplace for /etc/sysconfig/network-scripts/setdefaultgw-tlinux
  - add tlinux patch to suit tencent
  - modify setdefaultgw-tlinux, delete routes 172 if only the eth1 exists


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-118
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * Improve error checking for mpathpersist
  - Resolves: bz #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-120
changelog:
  - Add 0237-RHBZ-1526876-show-sysfs-state.patch
    * Correctly get sysfs state for multipath -l output
  - Add 0238-RHBZ-1508483-mpathconf-info.patch
  - Add 0239-RHBZ-1544958-client-timeout.patch
    * increase maximum multipathd client reply timeout to 60 seconds
  - Add 0240-UPBZ-1568902-id_size.patch
    * increase maximum size of product and revision strings to deal with nvme
  - Add 0241-RHBZ-1554516-show-path-failures.patch
    * add a path failures multipathd path format wildcard
  - Add 0242-RHBZ-1541116-all-tg-pt.patch
    * add all_tg_pt configuration option to make mpathpersist send only
      one registration per host
  - Add 0243-RHBZ-1498724-save-persist-options.patch
    * allow ":aptpl" to be added to the reservation_key to fix multipathd
      aptpl persistent reservation handling
  - Add 0244-RHBZ-1562247-remove-rbd.patch
    * remove multipath support for rbd
  - Resolves: bz #1498724, #1508483, #1526876, #1541116, #1544958, #1554516
  - Resolves: bz #1562247, #1568902


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-121
changelog:
  - Add 0245-RHBZ-1584228-fix-readsector0_size.patch
    * correctly figure IO size
  - Add 0246-RHBZ-1593459-add-transport-blacklist.patch
    * and new blacklist option, "protocol"
  - Add 0247-RHBZ-1585824-mpathconf-allow-doc.patch
  - Resolves: bz #1584228, #1585824, #1593459


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-123
changelog:
  - Add 0249-RHBZ-1610263-mpathpersist-max-fds.patch
    * make mpathpersist honor max_fds multipath.conf parameter
  - Resolves: bz #1610263


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-124
changelog:
  - Add 0250-RHBZ-1610867-rescan-change.patch
    * Update multipath devices on change events.
  - Add 0251-RHBZ-1614011-discovery-timeout.patch
  - Add 0252-RHBZ-1623595-cmd-error-status.patch
  - Add 0253-RHBZ-1618549-mix-hw-handler.patch
    * Don't retain attached hw handler when different hw handlers are
      attached to different paths
  - Add 0254-RHBZ-1635819-fix-mpathpersist-crash.patch
  - Add 0255-RHBZ-1638651-marginal-path.patch
    * backport marginal_path options from upstream
  - Resolves: bz #1610867, #1614011, #1618549, #1623595, #1635819, #1638651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125
changelog:
  - Modify 0250-RHBZ-1610867-rescan-change.patch
    * Fix memory Leak
  - Modify 0255-RHBZ-1638651-marginal-path.patch
    * Fix NULL dereference
  - Refresh 0252-RHBZ-1623595-cmd-error-status.patch
  - Resolves: bz #1610867, #1638651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127
changelog:
  - Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
    * retry adding paths if they couldn't be opened initially
  - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
    * don't check if dm devices are multipath paths
  - Add 0258-RHBZ-1634183-ANA-prioritizer.patch
    * Add NVMe ANA path prioritizer
  - Resolves: bz #1634183, #1672175, #1679556


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128
changelog:
  - Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
    * minor change
  - Add 0259-RHBZ-1701604-fix-nr-active.patch
    * recalculate the number of active paths whenever a path is checked
  - Add 0260-RHBZ-1634183-prio-fixes.patch
  - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
    * ignore blacklisted paths in mpathpersist
  - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
    * allow forced reloads even if there are no reusable paths
  - Add 0263-RHBZ-1686708-nvme-hcil.patch
    * make nvme ids work like in upstream
  - Add 0264-RHBZ-1699441-de-series-config.patch
  - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129
changelog:
  - Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
    * only grab path information from necessary devices, and allow batch files.
  - Add 0266-RHBZ-1696817-fix-emc-checker.patch
    * fix detection of inactive snapshots
  - Add 0267-RHBZ-1661156-powermax-config.patch
  - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
    * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
  - Resolves: bz #1661156, #1696817, #1721855


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130
changelog:
  - Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
    * Fix issues in the mpathpersist speedup code
  - Resolves: bz #1721855


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131
changelog:
  - Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
    * The fix for 1721855 broke 1714506.
  - Resolves: bz #1714506


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132
changelog:
  - Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
    * Remove the 256 device limit, when searching loop devices with kpartx
  - Resolves: bz #1804420


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133
changelog:
  - Add 0270-RHBZ-1775481-segfault-fix.patch
    * Fix segfault related to missing dm device tables
  - 0271-RHBZ-1806197-mpathconf-typo.patch
  - Resolves: bz #1775481, #1806197


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searches.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Petr Menšík <pemensik@redhat.com> - 12:4.2.5-74
changelog:
  - Use bind-export-libs package instead of bind99
  - Use isc-config.sh to configure bind libs
  - Change requirement to bind-export-devel
  - Compile with recent bind includes, that does not include isc/util.h


author: Simone Caronni <negativo17@gmail.com> - 2.3-5.20170523git8c3065c
changelog:
  - Update to latest snapshot; lots of specific Red Hat/Fedora cleanups (obsolete
    Red Hat/Fedora code, Itanium support, /boot leftovers) and module autoload.


author: Simone Caronni <negativo17@gmail.com> - 2.5.0-1.20180124git215d01a
changelog:
  - Update to latest post 2.5.0 snapshot.
  - Trim changelog.
  - Remove support for CentOS/RHEL 6, as the last two versions were not compaible
    with it (bash too old, etc.).


author: Petr Oros <poros@redhat.com> - 1:2.12-9
changelog:
  - dmioem: Decode Acer-specific DMI type 170
  - dmioem: Decode HP-specific DMI types 212 and 219
  - dmioem: Decode HP-specific DMI type 233, and refactored 209 and 221 to use a common function
  - Resolves: #1232501


author: Lianbo Jiang <lijiang@redhat.com> - 1:3.2-4
changelog:
  - Fix System Slot Information for PCIe SSD
  - Resolves: rhbz#1793900
  - Sync with upstream(commit:62bce59fed1)
  - Resolves: rhbz#1767323


author: Christopher Snyder <csnyder@redhat.com> 1.24.6-1
changelog:
  - 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
  - 1591704: Handle disabled status when golden ticket is in play
    (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.7-1
changelog:
  - 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
    (jhnidek@redhat.com)
  - 1703768: Display 'Status Details' correctly in GUI; ENT-1305
    (jhnidek@redhat.com)
  - 1699345: Do not perform proxy check under some circumstances.
    (awood@redhat.com)
  - 1698645: Ensure we use local syspurpose when there are network issues
    (csnyder@redhat.com)
  - 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
  - 1697563: Suppress output when collecting profile (khowell@redhat.com)
  - 1696428: use enabled_metadata = 0 for disabled repositories
    (jhnidek@redhat.com)
  - 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
  - 1668152: Remove the Select SLA screen from initial-setup
    (nmoumoul@redhat.com)
  - 1660883: Better feedback for repo commands when not registered
    (wpoteat@redhat.com)
  - 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
  - 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
    (jhnidek@redhat.com)
  - 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
    (jhnidek@redhat.com)
  - 1621275: Less communication with candlepin server from sub-man plugin;
    ENT-923 (jhnidek@redhat.com)
  - 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
  - 1688221: Update translations (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.10-1
changelog:
  - 1688221: update translations (csnyder@redhat.com)
  - Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
    (csnyder@redhat.com)
  - Revert "1621275: Less communication with candlepin server from sub-man
    plugin; ENT-923" (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.11-1
changelog:
  - 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
  - 1704421: Install only one prod cert, when RPM is available in more repos.
    (jhnidek@redhat.com)
  - 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.19-1
changelog:
  - 1752059: corrected cron receving stdout mail for rhsmd run (crag@redhat.com)
  - 1733992: Update translations (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.25-1
changelog:
  - 1786236: Update repos quickly enough to allow yum install -y $package
    immediately in containers (csnyder@redhat.com)
  - 1788293: Update repos in postconfig_hook to see new repos immediately
    (csnyder@redhat.com)
  - 1788297: Duplicate messages are being reported by the yum plugin for
    subscription-manager (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.26-3
changelog:
  - 1828186: Make rhsmd cron read 'processTimeout' case-insensitive
    (csnyder@redhat.com)
  - 1827103: Added copytruncate option to logrotate conf file; ENT-2114
    (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.33-1
changelog:
  - 1796833: RHEL 7.9 Tier 0 Localization (wpoteat@redhat.com)
  - 1818932: Using 'Simple Content Access' for access mode
    (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.36-1
changelog:
  - 1831104: When in Simple Content Access mode, subscription-manager should not
    complain that subscriptions aren't attached (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.37-1
changelog:
  - 1830994: Fix warning messages in dnf/yum (jhnidek@redhat.com)
  - 1823523: Detect rhsm-icon running without psutil (csnyder@redhat.com)
  - 1771921: Package profiles sends too early when registering a client
    (wpoteat@redhat.com)
  - 1688702: Generate redhat.repo in off-line mode; ENT-2302 (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.38-1
changelog:
  - 1837244: Fix wrong version provided by subscription-manager version; ENT-2388
    (jhnidek@redhat.com)
  - 1834792: Try to terminate rhsmd after timeout; ENT-2368 (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.39-1
changelog:
  - 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
  - 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
  - 1796833: Fix a few broken fr translations (csnyder@redhat.com)
  - 1796833: Update translations (csnyder@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.41-1
changelog:
  - 1842474: Update local and cache file during sync(); ENT-2433
    (jhnidek@redhat.com)
  - 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.42-1
changelog:
  - 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
  - 1796833: Update translations (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.43-1
changelog:
  - 1826300: Ignore auto-attach, when SCA mode is used
    (jhnidek@redhat.com)
  - 1850919: False positive log "rhsmd process exceeded runtime and was killed."
    (wpoteat@redhat.com)
  - 1868936: Do not print traceback, when profile upload failed
    (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.46-1
changelog:
  - 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
  - 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.49-1
changelog:
  - 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
  - [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)


author: Petr Menšík <pemensik@redhat.com> - 2.76-2
changelog:
  - Fix a few coverity warnings
  - package is dual-licensed GPL v2 or v3
  - don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead


author: Petr Menšík <pemensik@redhat.com> - 2.76-5
changelog:
  - Fix CVE-2017-14491
  - Fix CVE-2017-14492
  - Fix CVE-2017-14493
  - Fix CVE-2017-14494
  - Fix CVE-2017-14496
  - Fix CVE-2017-14495
  - extra fixes


author: Petr Menšík <pemensik@redhat.com> - 2.76-16.1
changelog:
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)
  - Handle multiple identical DNS queries better (CVE-2020-25686)
  - Link against nettle for sha256 hash implementation


author: Petr Menšík <pemensik@redhat.com> - 2.76-1
changelog:
  - Rebase to 2.76 (#1375527)
  - Include also dhcp_release6 (#1375569)
  - Fix compilation warnings
  - Correct manual about interface aliases, warn if used without --bind*


author: Jindrich Novy <jnovy@redhat.com> - 2:1.13.1-155.gitcccb291
changelog:
  - use runc sources off 66aedde7 commit in docker-1.13.1-rhel branch (#1791870)
  - use docker sources off cccb291 commit in docker-1.13.1-rhel branch
  - do not use CollectMode systemd property in RHEL7


author: Jindrich Novy <jnovy@redhat.com> - 2:1.13.1-161.git64e9980
changelog:
  - make failure message for CVE-2020-1702 more obvious (#1804024)
  - drop patch for #1734482 as it breaks compilation


author: Jindrich Novy <jnovy@redhat.com> - 2:1.13.1-203.git0be3e21
changelog:
  - do not enable CollectMode support yet because it is not still present in
    7.6-ALT
  - Related: #1766665


author: Jindrich Novy <jnovy@redhat.com> - 2:1.13.1-205.git7d71120
changelog:
  - fix mounting volume with incorrect permission
  - fix dockerd leaking SELinux MCS labels
  - Resolves: #1734482
  - Resolves: #1896883


author: Jindrich Novy <jnovy@redhat.com> - 2:1.13.1-208.git7d71120
changelog:
  - propagate mounts to the host - fix regression introduced by fix of CVE-2021-30465
  - Resolves: #1966968


author: Jindrich Novy <jnovy@redhat.com> - 2:1.13.1-209.git7d71120
changelog:
  - update to runc-8891bca22c049cd2dcf13ba2438c0bac8d7f3343
  - update to containerd-46b69ea4c3d2d965e2116ef47e20e5584a3c2741
  - apply https://github.com/projectatomic/runc/pull/56
  - drop applied patches
  - Related: #2000782


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.13.1-89.git07f3374
changelog:
  - Resolves: #1661622 - fix docker-runc build
  - use an additional GO_LDFLAGS to keep flags separate from those for tini


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.13.1-94.gitb2f74b2
changelog:
  - Resolves: #1556901, #1678096 
  - built docker-runc @projectatomic/docker-1.13.1-rhel commit df5c38a


author: Lokesh Mandvekar <lsm5@redhat.com> - 2.4.0-1
changelog:
  - Resolves: rhbz#1328475 - rebase to v2.4.0
  - Resolves: rhbz#1328526 - obsoletes docker-registry <= 0.9.1-7


author: Lokesh Mandvekar <lsm5@redhat.com> - 2.4.1-1
changelog:
  - Resolves: #1338871 - rebase to v2.4.1
  - Resolves: #1338824 - s3 driver: Sorting completed parts by part number for
  a better accordance with S3 spec (upstream PR# 1670)


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.12.0-11
changelog:
  - Resolves: #1343139 - start containers when using user ns and selinux
  - Resolves: #1369237 - d-s-s should detect overlay2 driver
  - built docker-runc commit ee10b44
  - built d-s-s commit d642523


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.12.0-13
changelog:
  - Resolves: #1368267 - conflicts with oci-register-machine
  - From: Ed Santiago <santiago@redhat.com>


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.12.0-14
changelog:
  - Resolves: #1368267 - obsolete oci-register-machine
  - Previous builds had incomplete fixes for this bug
  - built docker-runc projectatomic/docker-1.12 commit f509e50


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.12.0-15
changelog:
  - Resolves: #1368267 - depend on oci-register-machine at runtime
  - oci-register-machine is disabled by default in
  /etc/oci-register-machine.conf


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.12.1-1
changelog:
  - Resolves: #1371266
  - bump docker to v1.12.1
  - built docker projectatomic/docker-1.12 commit f1040da


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-7
changelog:
  - prevent warning messages from %post section if selinux-policy is
    not installed (yet) (#1057522)
  - compile with xz compression support enabled (#1176214)
  - fix crash in sieve script compilation (#1177852)
  - wait with start after network-online target (#1209006)
  - build with tcp wrappers enabled (#1229164)
  - fixed userdb extra fields handling in passdb failure (#1234868)
  - fix valgrind option detection for make check (#1249625)
  - first valid regular user id is 1000 (#1280433)
  - fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
  - fixed header parsing when there were multiple same header names (#1224496)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-1
changelog:
  - dovecot updated to 2.2.36, pigeonhole to 0.4.24
  - fixed dsync not replicating sieve scripts (#1419426)
  - fix plugins incorrectly reporting epipe errors(#1489943)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630380)
  - update first/last_valid_gid range patch (#1630409)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3.1
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1751383)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-5
changelog:
  - fix CVE-2019-3814: improper certificate validation (#1674369)
  - fix CVE-2019-7524: buffer overflow in indexer-worker process resulting in privilege 
    escalation (#1700398)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-6
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741787)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7.1
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866752)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866757)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866764)


author: Than Ngo <than@redhat.com> - 1:1.8.4-3
changelog:
  - backport upstream patches to fix issues:
     * Generated XML is malformed
     * Missing space before optional option in method argument list
     * Closing ) of function in function documentation is in wrong color
     * Segmentation fault parsing a fortran file


author: Than Ngo <than@redhat.com> - 1:1.8.5-4
changelog:
  - Resolves: #1483569, incorrect processing of code blocks
  - Resolves: #1724173 - CVE-2016-10245, cross-site scripting


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-13
changelog:
  - Re-align with DPDK patches inside OVS FDP 18.08 (#1610407)
  - Backport "net/i40e: fix port segmentation fault when restart" (#1610481)


author: Timothy Redaelli <tredaelli@redhat.com> - 18.11-1
changelog:
  - Add conditionals to build on RHEL8 and Fedora
  - Updated to DPDK 18.11 (#1651337):
    - Updated configs
    - Added libmnl-devel BuildRequires for Mellanox


author: Lukas Nykryn <lnykryn@redhat.com> - 033-551
changelog:
  - Revert "add 90multipath-hostonly module"
  - Introduce tri-state hostonly mode
  Resolves: #1599592
  - Correct paths for firmware
  Resolves: #1608491
  - Record loaded kernel modules when hostonly mode is enabled
  Resolves: #1607744


author: Lukas Nykryn <lnykryn@redhat.com> - 033-560
changelog:
  - fips: removed false-positive 'FATAL: Module xxx not found' error message when kernel provides a generic algo for module
  - fips: ensure fs module for /boot is installed
  - iscsi: always popd, even if there is no iscsi device
  - Harden dracut against BASH_ENV environment variable
  - fips: check fips integrity just before mounting local filesystems in /sysroot


author: Lukas Nykryn <lnykryn@redhat.com> - 033-571
changelog:
  - Drop dependency on bridge-utils
  - dracut.sh: disable lsinitrd logging when quiet
  - netlib: fix botched backport


author: Josh Stone <jistone@redhat.com> 8.1.2-6
changelog:
  - rhbz1063447: squash testsuite g++ optimization
  - rhbz1030969: backported additional patch to silence new warnings


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-8
changelog:
  - e4defrag: backwards-allocated files should be defragmented (#1176785)
  - tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
  - mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
  - libext2fs: prevent buffer overflows (#1293677)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-10
changelog:
  - libext2fs: don't ignore fsync errors (#1405049)
  - Fix nroff macro issue in chattr man page (#1429213)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-11
changelog:
  - libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
  - tune2fs: edit dire warning about check intervals (#1433233)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-13
changelog:
  - e2fsck: warn if checkinterval and broken_system_clock both set (#1365594)
  - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-14
changelog:
  - Various fixes and improvements (#1682935)
  - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635)
  - don't ignore fsync errors in filefrag (#1451185)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-18
changelog:
  - fix out-of-bounds write on corrupted fs (#1797731)
  - fix out-of-bounds write on corrupted fs (#1768710)
  - fix e2fsprogs creating corrupted meta image (#1711880)
  - fix typo in ext4 man page (#1720130)
  - provide easy metod for creating compatible rhel6 fs (#1780277)
  - better handling of trivial dir link count problem (#1820048)


author: Peter Jones <pjones@redhat.com> - 36-6
changelog:
  - Fix device path generation for block devices on nonstandard device path
    roots.
    Related: rhbz#1558937
    Resolves: rhbz#1591853


author: Peter Jones <pjones@redhat.com> - 36-10
changelog:
  - Work around platform ACPI PCI(e) root drivers that don't fill in the
    "driver" symlink in sysfs.
    Resolves: rhbz#1614944


author: Peter Jones <pjones@redhat.com> - 36-11
changelog:
  - Fix device probing with no matching probes where HD() will work
    Resolves: rhbz#1613698
  - Detect partitiond md devices correctly
    Resolves: rhbz#1602414
    Resolves: rhbz#1613370


author: Peter Robinson <pbrobinson@fedoraproject.org> 4.0.1-1
changelog:
  - Ekiga 4.0.1 stable release - Changelog
    http://ftp.gnome.org/pub/gnome/sources/ekiga/4.0/ekiga-4.0.1.news


author: Mark Wielaard <mjw@redhat.com> - 0.170-1
changelog:
  - New upstream release. Remove upstreamed patches.
  - Sync provide_yama_scope with fedora.
  - Add elfutils-0.170-x86_64-backtrace-test-override.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@redhat.com> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - New upstream release (#1676504)
    CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
    CVE-2019-7664, CVE-2019-7665, CVE-2018-16062, CVE-2018-16402,
    CVE-2018-16403, CVE-2018-18310, CVE-2018-18521, CVE-2018-18520.


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.34.pre6
changelog:
  - update to latest upstream pre-release
  - drop unneeded patches
  - fix autoconf warnings
  - explicitly disable using OpenSSL and GnuTLS


author: Philip J Perry <phil@elrepo.org> - 7.0-1
changelog:
  - Rebuilt for rhel-7.0 release.
  - Changed requires to glibc to allow for kernel removal.
    [http://elrepo.org/bugs/view.php?id=463]


author: Jan Synáček <jsynacek@redhat.com> - 1:24.3-21
changelog:
  - fix libjpeg detection fails with gcc7 (#1487557)
  - fix Emacs GUI Toolbar icons missing (#1477745)
  - fix hardening: TLS certificate warnings should be hard errors (#1403643)


author: Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13
changelog:
  - fall back to Basic auth if Negotiate fails
    Resolves: #1490998
  - handle request-pull when multiple tags point to the same commit
    Resolves: #1192146


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
changelog:
  - Backport fix for CVE-2018-11235
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15
changelog:
  - move instaweb to separate git-instaweb subpackage.
  	Resolves: #1213059
  - move gnome-keyring to a separate git-gnome-keyring subpackage.
  	Resolves: #1284081


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16
changelog:
  - Remove EL-5 settings and old Fedora conditionals.
    Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
    2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
  - Fix builds using '--without docs'
  - Change git-instaweb default from lighttpd(not available in rhel7) to
    apache2.
  - Add requires for git-{instaweb,gnome-keyring} to pull them, when
    installing git-all.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17
changelog:
  - Correctly return an error from fsck on encountering a .gitmodules symlink.
    This was broken in the debian 2.1.x backport and found by covscan.
    Fix the test to catch this.
  - Correct a typo in changelog.


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19
changelog:
  - Fix httpd modules path to be independent from system architecture.
  Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
  Resolves: #1213059


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20
changelog:
  - Fix CVE-2018-17456: arbitrary code execution via .gitmodules
    Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21
changelog:
  - Fix CVE-2019-1387: remote code execution in recursive clones with nested
    submodules
    Resolves: CVE-2019-1387


author: Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23
changelog:
  - Prevent crafted URL containing new lines, empty host or lacks a scheme
    to cause credential leak.
    Resolves: CVE-2020-11008


author: Kevin Fenzi <kevin@scrye.com> - 7-11
changelog:
  - Add Conflicts on fedora-release to prevent people from installing on Fedora systems. Fixes bug #1497702


author: Jack Magne <jmagne@redhat.com> - 1.1.0-33
changelog:
  - Resolves: Bug #1163479 Errata 18562 TPS tests fails - esc rebuild failure because of xulrunner updates.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-34
changelog:
  - Resolves: Bug #1173774 - ESC Client does list 
  - the encryption and signing certs under the "Your Certificates" tab when an enrolled card is inserted.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-35
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client


author: Jack Magne <jmagne@redhat.com> - 1.1.0-36
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client
  - Minor additional fix.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-37
changelog:
  - Resolves: Bug #885898 - ESC incorrectly display Issuer information for a CAC smart card
  - Resolves: Bug 1070802 - missing -fstack-protector-strong


author: Jack Magne <jmagne@redhat.com> - 1.1.0-40
changelog:
  - Resolves: Bug #1466949, Relate: Bug #1523946 - [ppc64] ld switch to relro breaks GDB. This caused an rpmdiff failure.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-42
changelog:
  - Related: Bug# 1358500 - Segmentation fault happens when escd runs with a NULL display.
  - Resolve changelog entry error.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-43
changelog:
  - Resolves: Bug# 1688904 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations.


author: Ivan Vecera <ivecera@redhat.com> - 2:4.8-2
changelog:
  - Added support for configurable RSS hash function
  - Fixed SFF 8079 cable technology bit parsing
  - Added support for HWTSTAMP_FILTER_NTP_ALL


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-3
changelog:
  - Fix patch fixing crash in EvMediaPlayerKeys
  - Fix building of comics backend with libarchive 3.1.2
  - Resolves: #1567186


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-4
changelog:
  - Change requires as requested by RPMDiff
  - Check returned size for negative value (CovScan)
  - Resolves: #1567186


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-8
changelog:
  - Do not free EvDocumentInfo in ev_window_save_print_settings(),
  - it is freed in EvDocument's destructor
  - Resolves: #1541358


author: Milan Crha <mcrha@redhat.com> - 3.28.5-3
changelog:
  - Add patch for RH bug #1624834 (Quoting of plain text mail into HTML mode mangles deeper levels)
  - Add patch for RH bug #1624866 (Extra new line added in front of long URLs)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-4
changelog:
  - Add patch for RH bug #1634660 (Deselects task/memo list when started in Calendar view)
  - Disable and obsolete tests subpackage (RH bug #1638479)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-6
changelog:
  - Add patch for RH bug #1753122 (GalA11yETableItem: Incorrect implementation of AtkObjectClass::ref_child())


author: Milan Crha <mcrha@redhat.com> - 3.22.7-7
changelog:
  - Add patch for RH bug #1504071 (Prefer SSL over STARTTLS for mail when both are set in GOA)
  - Add patch for RH bug #1476329 (Deadlock on exit under e-categories.c:finalize_categories())


author: Milan Crha <mcrha@redhat.com> - 3.28.2-1
changelog:
  - Update to 3.28.2
  - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
  - Resolves: #1575495


author: Milan Crha <mcrha@redhat.com> - 3.28.5-4
changelog:
  - Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
  - Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)


author: Milan Crha <mcrha@redhat.com> - 3.12.10-5
changelog:
  - Add patch for RH bug #1366206 (Free/Busy Information returns wrong time)
  - Add patch for RH bug #1367455 (No contacts are displayed until search is started)


author: Milan Crha <mcrha@redhat.com> - 3.22.6-2
changelog:
  - Add patch for RH bug #1520936 (Unable to authenticate using Kerberos without krb5-auth-dialog package)


author: Nikola Forró <nforro@redhat.com> - 2.2.0-9
changelog:
  - Fix CVE-2017-18233
    resolves: #1574865
  - Fix CVE-2017-18234
    resolves: #1656011
  - Fix CVE-2017-18236
    resolves: #1574905
  - Fix CVE-2017-18238
    resolves: #1572270
  - Fix CVE-2018-7730
    resolves: #1572631


author: Jan Grulich <jgrulich@redhat.com> - 0.26-2
changelog:
  - Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
    Resolves: bz#1547207

    Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp
    Resolves: bz#1545232


author: Jan Grulich <jgrulich@redhat.com> - 0.26-3
changelog:
  - Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a
    remote attacker to cause a denial of service via a crafted tif file
    Resolves: bz#1548410


author: Jan Grulich <jgrulich@redhat.com> - 0.27.0-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990352


author: Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13
changelog:
  - Fix multiple CVEs
  - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-23852
  - Resolves: CVE-2021-45960
  - Resolves: CVE-2021-46143
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Michal Schmidt <mschmidt@redhat.com> - 1.1.0-0.2.rc1
changelog:
  - Packaging Guidelines conformance fixes and spec file cleanups
  - Fix libfabric dependency
  - Related: bz1235270


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.4-1
changelog:
  - Upstream removed the tarball for 1.12.2, which made Source0 invalid.
  - There is a new version (1.12.4), so update to the new version.


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.4-2
changelog:
  - Strip libfakeroot-*.so (RHBZ#596735).
  - Verified that libguestfs still builds and runs with this change (this
    represents a fairly aggressive test of fakeroot).


author: Dominik Mierzejewski <rpm@greysector.net> - 1.24-1
changelog:
  - update to 1.24 (#1750054)
  - update source URL
  - drop obsolete patches
  - point to working URLs
  - make testsuite more verbose for the future
  - Apply all patches from Debian package (should fix libuser build)
  - fix root privilege faking for copied files/dirs (bug 887001)
  - fix LD_LIBRARY_PATH for multilib environment (bug 1241527)
  - update License: tag
  - don't strip the libraries in install, just keep the executable bit
  - when converting from latin1 to utf8, don't use the converted file
    if the conversion failed: the pt manpage is already utf8
  - alternativize libfakeroot and faked as well (bug 817088)
  - include Portugese manpages
  - add missing BR: libcap-devel
  - autogenerate most of the file list


author: Chris Leech <cleech@redhat.com> - 1.0.30-4.git91c0c8c
changelog:
  - 1039779 replace README that contained mostly build instructions with
    README.redhat containing better distro-specific information


author: Chris Leech <cleech@redhat.com> - 1.0.31-1.git5dfd3e4
changelog:
  - 1274530 rebase to upstream 1.0.31+
  - no longer requires libhbaapi/libhbalinux
  - no longer attempts to connect to lldpad if DC_REQUIRED is configured off
    for all interfaces


author: Chris Leech <cleech@redhat.com> - 1.0.32-1
changelog:
  - 1384707 fcoeadm --target segfaults if non-FCoE FC targets are present
  - 1321611 fcoemon should only try to connect to lldpad when required


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-12
changelog:
  - fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
    Resolves: rhbz#1645170
  - fence_hpblade: fix log_expect syntax
    Resolves: rhbz#1650526
  - fence_vmware_soap: cleanup when receiving SIGTERM
    Resolves: rhbz#1350908


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-18
changelog:
  - fence_rhevm: add RHEV v4 API support and auto-detection
    Resolves: rhbz#1402862
  - fence_azure_arm: use skip_shutdown feature
    Resolves: rhbz#1700544


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-26
changelog:
  - fence_mpath: fix watchdog reboot not triggered when multipath
    disconnected
    Resolves: rhbz#1751702


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-30
changelog:
  - fencing: only use inetX_only parameters for SSH based agents and
    fence_zvmip
    Resolves: rhbz#1722004


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31
changelog:
  - fence_compute/fence_evacuate: fix region_name content type and
    project shortopt in usage text and project-domain shortopt
    Resolves: rhbz#1760203
  - fence_rhevm: add cookie support
    Resolves: rhbz#1763675
  - fencing: improve stdin quote parsing
    Resolves: rhbz#1769784


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34
changelog:
  - fence_aws: improve parameter logic to allow setting region parameter
    while using credentials from ~/.aws/config
    Resolves: rhbz#1673468
  -


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39
changelog:
  - fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
    and avoid failing when hitting it during the monitor-action
    Resolves: rhbz#1654058


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1
changelog:
  - fence_lpar: fix issue with long username, hostname, etc not
    working when the command run by the agent exceeds 80 characters
  - fence_evacuate: enable evacuation of instances using private flavors

    Resolves: rhbz#1860545
    Resolves: rhbz#1862024


author: Ryan McCabe <rmccabe@redhat.com> - 0.3.2-13
changelog:
  - fence_virtd: Make the libvirt backend survive libvirtd restarts
    Resolves: rhbz#1384181
  - fence_xvm/fence_virt: Add support for the validate-all status
    Resolves: rhbz#1447700


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-27
changelog:
  - fix CVE-2014-0207 - cdf_read_short_sector insufficient boundary check
  - fix CVE-2014-0237 - cdf_unpack_summary_info() excessive looping DoS
  - fix CVE-2014-0238 - CDF property info parsing nelements infinite loop
  - fix CVE-2014-3478 - mconvert incorrect handling of truncated pascal string
  - fix CVE-2014-3479 - fix extensive backtracking in regular expression
  - fix CVE-2014-3480 - cdf_count_chain insufficient boundary check
  - fix CVE-2014-3487 - cdf_read_property_info insufficient boundary check
  - fix CVE-2014-3538 - unrestricted regular expression matching
  - fix CVE-2014-3587 - fix cdf_read_property_info
  - fix CVE-2014-3710 - out-of-bounds read in elf note headers
  - fix CVE-2014-8116 - multiple denial of service issues (resource consumption)
  - fix CVE-2014-8117 - denial of service issue (resource consumption)
  - fix CVE-2014-9652 - out of bounds read in mconvert()
  - fix CVE-2014-9653 - malformed elf file causes access to uninitialized memory


author: Jan Kaluza <jkaluza@redhat.com> 5.11-32
changelog:
  - fix #1278737 - add support for Java 1.7 and 1.8
  - fix #1281723 - show full executable name for core
  - fix #1271636 - add support for detection of Python 2.7 byte-compiled files
  - fix #1278768 - comment out too-sensitive Pascal magic


author: Adam Williamson <awilliam@redhat.com> - 3.0-3
changelog:
  - Re-enable ceph deps on ppc64 (it's building again)
  - Disable RDMA support on 32-bit ARM (#1484155)


author: Nuonuo Li <nuonuoli@tencent.com> [2.3.1.123-1.tl1]
changelog:
  - Binary tools from dirver package customized for Tencent
  - Add fio-pci-check and fio-bugreport in basic package


author: Eric Garver <egarver@redhat.com> - 0.6.3-2
changelog:
  - backport recent upstream stable fixes
  - backport fix to enable IP forwarding only if toaddr specified


author: Eric Garver <egarver@redhat.com> - 0.6.3-3
changelog:
  - backport recent upstream stable fixes
  - backport fix --remove-rules deleting all direct rules
  - backport fix unable to delete rich rule forward-port
  - backport fix forward-port for external zone hijacking internal zone
  - backport fix testsuite iptables locking


author: Eric Garver <egarver@redhat.com> - 0.6.3-1
changelog:
  - rebase package to v0.6.3, include recent stable fixes
  - use QT4 patch for firewall-applet
  - remove cockpit service definition, cockpit package still ships their own
  - remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
  - remove nftables support


author: Akira TAGOH <tagoh@redhat.com> - 2.10.95-5
changelog:
  - Fix the race condition issue on updating cache (#1011510)
  - Fix crash issue in FcFontSort()
  - Fix an issue not copying all values from the font.


author: Akira TAGOH <tagoh@redhat.com> - 2.13.0-4.1
changelog:
  - Rebase to 2.13.0 (#1576501)
  - Rename fc-cache binary to fc-cache-{32,64} for multilib. (#1568968)
  - backport some fixes related to Flatpak.
  - Drop new syntax in config for compatibility.
  - Requires dejavu-sans-fonts instead of font(:lang=en) (#1484094)


author: Parag Nemade <pnemade AT redhat DOT com> - 20120731b-9
changelog:
  - Added cflags -Wstrict-aliasing
  - Fixed some compile-time errors from invalid Makefile rules
  - Fixed bogus date in changelog


author: Parag Nemade <pnemade AT redhat DOT com> - 20120731b-10
changelog:
  - Revert previously added -Wstrict-aliasing cflags
  - We actaully need -fno-strict-aliasing (rh#903288)
  - Remove %defattr() (rh#1003518)
  - fontforge.xml should not be executable (rh#1003518)


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.9-1
changelog:
  - Updated to upstream freeipmi-1.2.9
   - Fix threshold output corner case in ipmi-sensors.
   - Fix invalid declaration in libipmimonitoring header.
   - Fix older compiler build problems.
   -
   - Fix portability build bug on ARM systems.
   - Add 'internal IPMI error' troubleshooting to manpages.
   - Fix bmc-info corner case on Bull 510 systems.


author: Josef Ridky <jridky@redhat.com> - 1.5.7-1
changelog:
  - Rebase to the latest upstream release 1.5.7 (#1435848)
  - Fix manpage command examples (#1353981) in separate commit


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-1
changelog:
  - Upgrade to upstream v3.0.13 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
    Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                          compile time
    Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                          can't connect to mysql server
    Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-2
changelog:
  - Fix some issues found with static analyzers.
    Resolves: Bug#1432103 FreeRADIUS fails covscan checks
  - Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-3
changelog:
  - Explicitly disable rlm_cache_memcached to avoid error when the module's
    dependencies are installed, and it is built, but not packaged.
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  - Prevent segfaults by adding a missing handling of connection errors in
    rlm_ldap.
    Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
  - Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
    Resolves: Bug#1436619 radtest does not work with eap-md5


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-4
changelog:
  - Disable internal OpenSSL cache.
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass
  - Check sizeof(*packet), not sizeof(packet) in EAP-PWD
    Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
  - Parse port as well as address for dhcpclient destination
    Resolves: Bug#1457825 dhcpclient does no accept IP:PORT


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-5
changelog:
  - Refer to correct package version in configuration comments for Bug#1458746
    (CVE-2017-9148) fix.
    Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-6
changelog:
  - Avoid race condition when creating session cache file
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-7
changelog:
  - Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                          to improper output buffer size check in make_secret()
  - Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63
  - Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                          data2vp_wimax()
  - Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                          exhaustion with 'concat' attributes
  - Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                          dhcp_attr2vp()
  - Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                          fr_dhcp_decode_suboptions()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-8
changelog:
  - Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
  - Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                         data2vp_wimax()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-9
changelog:
  - Fix double free in rlm_sql acct_redundant
    Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                          unknown value" when using module sql rlm_sql


author: Alexander Scheel <ascheel@redhat.com> - 3.0.13-10
changelog:
  - Fixes two EAP-PWD security issues
    Resolves: bz#1699413 authentication bypass with an invalid curve attack


author: Alexander Scheel <ascheel@redhat.com> - 3.0.13-10
changelog:
  - Fixes two EAP-PWD security issues
    Resolves: bz#1699414 authentication bypass with an invalid curve attack
    Resolves: bz#1699419 fake authentication using reflection


author: Alexander Scheel <ascheel@redhat.com> - 3.0.13-11
changelog:
  - Fixes logrotate, EAP-PWD vulnerability
    Resolves: bz#1719368 privilege escalation due to insecure logrotate configuration
    Resolves: bz#1751796 eap-pwd: Information leak due to aborting when needing more than 10 iterations


author: Alexander Scheel <ascheel@redhat.com> - 3.0.13-15
changelog:
  - Fixes EAP-PWD: DoS issues due to multithreaded BN_CTX access
    Resolves: bz#1818808

    * Fri Feb 7 2020 Alexander Scheel <ascheel@redhat.com> - 3.0.13-14
  - Fixes receiving of multiple RADIUS packets under load
    Resolves: bz#1630684


author: Ondrej Holy <oholy@redhat.com> - 1.0.2-11
changelog:
  - Use boolean types defined stdbool.h (#1404575)
  - Prevent stucked keys on focus out and unmap events (#1415069)
  - Fix crashes when copying images (#1417536)
  - Enable TLS 1.1 connections and later (#1312967)


author: Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4
changelog:
  - CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
  - CVE-2020-11523: Fix integer overflow in region.c (#1837622)
  - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-11
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197740


author: Ernestas Kulik <ekulik@redhat.com> - 1.0-3
changelog:
  - Drop recordmydesktop sub-package (rhbz#1647170)
  - Load version 3.0 of Gtk namespace, silence a PyGObject warning (rhbz#1647170)


author: Jindrich Novy <jnovy@redhat.com> - 0.4.1-3
changelog:
  - temporarily remove s390x arch from supported arches due to
    missing renameat2 syscall
  - Related: #1721151


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-5
changelog:
  - upstream patch when applied to the 0.7.2 source code is applied to the wrong function,
    new patch fixes it
  - Resolves: #1805013


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-6
changelog:
  - fix "Pushing container image built with rootless podman fails with: "file integrity checksum failed""
  - Resolves: #1810498


author: Dave Dykstra <dwd@fedoraproject.org> - 3.4.2-4
changelog:
  - Bump release number in order to larger than a rebuild of fuse package
    done before separation pull request was merged.


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - Rebase to 1.0.1, specifically the wip/hughsie/rhel75 branch which adds
    back the automake build system and lowers the required versions of deps.
  - This also un-neuters fwupd so that most of the plugins are functional,
    for instance allowing updates of Thunderbolt controllers and Logitech
    Unifying devices. However, the LVFS is still disabled.
  - Resolves: #1313086


author: Peter Jones <pjones@redhat.com> - 9-6
changelog:
  - Rebuild to make some dependencies versioned, in order to make TPS's really
    broken builder setup work.
    Related: rhbz#1380825


author: Honza Horak <hhorak@redhat.com> - 2.0.35-19
changelog:
  - Spec file cleanup
  - Compile and run test suite during build
  - Using chrpath to get rid of --rpath in gd-progs


author: Filip Januš <fjanus@redhat.com> - 2.0.35-27
changelog:
  - Fix CVE-2016-5766
  - Resolves: #1356813
  - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.6.1-107.el7
changelog:
  - Fix backport of default signal handlers for spawned processes
    (RH BZ 1473411, found by Michal Kolar).


author: Keith Seitz <keiths@redhat.com> - 7.6.120.el7
changelog:
  - Don't classify struct members as filenames (numerous, RH BZ 1815690)
  - Fix commas in source paths bugs (Keith Seitz, RH BZ 1779246)


author: Ray Strode <rstrode@redhat.com> - 3.28.2-15
changelog:
  - sync AllowMultipleSessionsPerUser patch from 7.6 branch
    Resolves: #1664353
  - Create dconf dirs by default
    Resolves: #1664284


author: Nils Philippsen <nils@redhat.com> - 0.2.0-11
changelog:
  - replace lua-5.2 patch by upstream commit
  - fix buffer overflow in and add plausibility checks to ppm-load op
    (CVE-2012-4433)
  - fix multi-lib issue in generated documentation


author: Paul Howarth <paul@city-fan.org> - 2.2.2-1
changelog:
  - Update to 2.2.2
    - geoipupdate now calls fsync on the database directory after a rename to
      make it durable in the event of a crash
  - Update autotools patch


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Michal Ruprich <mruprich@redhat.com> - 20180605-1
changelog:
  - Resolves: #1643472 - Add geolite2 package
  - Lowering the NVR due to the package version in el8. Higher NVR could make problems during migration from el7 to el8


author: Andrew Price <anprice@redhat.com> - 3.1.10-3
changelog:
  - libgfs2: Issue one write per rgrp when creating them
  - mkfs.gfs2: Fix resource group alignment issue
  - mkfs.gfs2: Free unnecessary cached pages, disable readahead
    Resolves: rhbz#1440269


author: Andrew Price <anprice@redhat.com> - 3.1.10-5
changelog:
  - Update URL in spec file
    Resolves: rhbz#1501738
  - fsck.gfs2: Make -p, -n and -y conflicting options
    Resolves: rhbz#1507091


author: Andrew Price <anprice@redhat.com> - 3.1.10-9
changelog:
  - fsck.gfs2: Don't check fs formats we don't recognise
  - libgfs2: Fix pointer cast byte order issue
    Resolves: rhbz#1616389


author: Andrew Price <anprice@redhat.com> - 3.1.10-10
changelog:
  - libgfs2: Use sizeof for 'reserved' fields in ondisk.c
  - fsck.gfs2: Disambiguate 'check_data'
  - gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta
  - fsck.gfs2: Disambiguate check_metalist
  - fsck.gfs2: Fix segfault in build_and_check_metalist
  - fsck.gfs2: Retain context for indirect pointers in ->check_metalist
  - fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations
    Resolves: rhbz#1487726


author: Andrew Price <anprice@redhat.com> - 3.1.10-11
changelog:
  - gfs2_jadd: Handle out-of-space issues
  - gfs2_jadd: error handling overhaul
    Resolves: rhbz#1837640


author: Dridi <dridi.boukelmoune@gmail.com> - 0.3.4-1
changelog:
  - bumped to version 0.3.4
  - switched to hackage for the source tarball
  - tests are now driven by cabal
  - skip tests on ARM since TemplateHaskell fails


author: Jens Petersen <petersen@redhat.com> - 0.3.4-2
changelog:
  - disable tests on all archs (#1158522)
    - QuickCheck should really only be used for buildtime tests


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29
changelog:
  - Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
  - Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-31
changelog:
  - Added security fixes for:
    - CVE-2018-16509 (bug #1621158)
    - CVE-2018-15910 (bug #1621160)
    - CVE-2018-16542 (bug #1621382)


author: Martin Osvald <mosvald@redhat.com> - 9.07-32
changelog:
  - Remove as many non-standard operators as possible to make the codebase
    closer to upstream for later CVEs
  - Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
    checker (699659)
  - Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
    in temp file handling to disclose contents of files (699658) 
  - Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
    issues (699657)
  - Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
    type checking (699660)
  - Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
    CVE-2018-16509
  - Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
  - Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
    access in the aesdecode operator (699665)
  - Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
    privilege" checking when running out of stack during exception handling
  - Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c
  - Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
    pagedevice replacement (699664)
  - Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
    exception table
  - Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)
  - Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
    smooth shading object (Error: /rangecheck in --run--)
  - Resolves: #1661210 pdf2ps reports an error when reading from stdin
  - Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
    copydevice handling (699661)
  - Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)
  - Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators
  - Resolves: #1670443 - ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata


author: Martin Osvald <mosvald@redhat.com> - 9.25-1
changelog:
  - Rebase to latest upstream version (bug #1636115)
  - Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
    protections for CVE-2019-6116
  - Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
    is available (700585)
  - Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
    is still accessible (700576)
  - Resolves: #1670443 - ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata
  - fix for pdf2dsc regression added to allow fix for CVE-2019-3839


author: Martin Osvald <mosvald@redhat.com> - 9.25-2.2
changelog:
  - Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-25
changelog:
  - Added security fix for CVE-2017-7207 (bug #1434353)
  - Added explicit requirement for lcms2 version we are build with (bug #1436273)


author: Martin Osvald <mosvald@redhat.com> - 9.25-3
changelog:
  - Resolves: #1737339 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)
  - Resolves: #1744009 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744013 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744004 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744229 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: Carlos O'Donell <carlos@redhat.com> 2.17-256
changelog:
  - CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
  - Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-258
changelog:
  - Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
  - Additional robust mutex fixes (#1401665)


author: Patsy Franklin <pfrankli@redhat.com> - 2.17-260
changelog:
  - Update glibc-rh1560641.patch to initialize pad outside
    the conditional eliminating an uninitialized byte warning from
    valgrind. (#1560641)


author: Patsy Griffin <pfrankli@redhat.com> - 2.17-299
changelog:
  - Update glibc headers for Linux 4.0, 4.1 definitions and 
    Linux 4.2 netinet/in.h values. (#1579451)


author: Arjun Shankar <arjun@redhat.com> - 2.17-308
changelog:
  - CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
    LD_PREFER_MAP_32BIT_EXEC (#1775599)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-321
changelog:
  - CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
    sincosl, and tanl function. (#1812119)


author: Florian Weimer <fweimer@redhat.com> - 2.17-325
changelog:
  - Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
    conversion in strcasecmp, strncasecmp (#1993930)


author: Milind Changire <mchangir@redhat.com> - 3.12.2-41
changelog:
  - fixes bugs bz#1390151 bz#1410145 bz#1429190 bz#1510752 bz#1511779 
    bz#1570958 bz#1574490 bz#1595246 bz#1618669 bz#1661393 bz#1668989 bz#1669020


author: Rinku Kothiya <rkothiya@redhat.com> - 6.0-23
changelog:
  - fixes bugs bz#1344758 bz#1599802 bz#1685406 bz#1686800 bz#1724021 
    bz#1726058 bz#1727755 bz#1731513 bz#1741193 bz#1758923 bz#1761326 bz#1761486 
    bz#1762180 bz#1764095 bz#1766640


author: Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57
changelog:
  - fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
    bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
    bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
    bz#1945143 bz#1946171 bz#1957191 bz#1957641


author: Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60
changelog:
  - fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
    bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205


author: Jakub Filak <jfilak@redhat.com> 0.3.4-1
changelog:
  - Do not use deprecated GObject API
  - Make gnome-abrt compatible with Python GObject < 3.7.2
  - Do not fail if there is no Problem D-Bus service
  - Make all labels selectable
  - Run xdg-open for problem directory nonblocking
  - Fix translations (rhbz#1044241)
  - Make problem list resizable
  - Make info about Reported state of problem more clear
  - Remove message about missing Bugzilla ticket
  - Fix a bug in SIGCHLD handler causing 100% CPU usage
  - Show "yes" in Reported field only if no URL is available
  - Load only the most recent reported to value
  - Check if Application has valid name in filter fn
  - Fix issues found by new pylint
  - Related: #1044241
  - Resolves: #1044569


author: Jakub Filak <jfilak@redhat.com> - 0.3.4-3
changelog:
  - Select multiple records to delete in gnome-abrt
  - Do not crash when a FileIcon can't be loaded
  - Resolves: #1048120, #1054089


author: Jakub Filak <jfilak@redhat.com> - 0.3.4-7
changelog:
  - Translation updates
  - Do not crash in case of a DBus timeout
  - Do not crash when testing availability of XServer
  - Resolves: #1178712, #1175662


author: Ernestas Kulik <ekulik@redhat.com> - 0.3.4-9
changelog:
  - Add patch to work around https://bugzilla.redhat.com/show_bug.cgi?id=1679314
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Do-not-crash-when-a-FileIcon-cant-be-loaded.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0001-Do-not-crash-when-a-FileIcon-cant-be-loaded.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0002-Enable-multiple-problems-selection.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0002-Enable-multiple-problems-selection.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0003-Update-translations.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0003-Update-translations.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0004-Initialize-gnome_abrt-module-before-importing-its-su.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0004-Initialize-gnome_abrt-module-before-importing-its-su.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0005-Translation-updates.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0005-Translation-updates.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0006-Pull-the-newest-rhel7-translations.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0006-Pull-the-newest-rhel7-translations.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0007-Move-from-transifex-to-zanata.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0007-Move-from-transifex-to-zanata.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0008-Add-gettext-mappings-to-the-zanata-config.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0008-Add-gettext-mappings-to-the-zanata-config.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0009-translations-update-zanata-configuration.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0009-translations-update-zanata-configuration.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0010-Test-availability-of-XServer-in-C-wrappers.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0010-Test-availability-of-XServer-in-C-wrappers.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0011-Do-not-crash-in-case-of-a-DBus-timeout.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0011-Do-not-crash-in-case-of-a-DBus-timeout.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0012-Mark-Search-place-holder-text-for-translations.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0012-Mark-Search-place-holder-text-for-translations.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0013-Translation-updates.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0013-Translation-updates.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0014-Translation-updates.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0014-Translation-updates.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/0015-views-Allow-reporting-non-reportable-problems.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0015-views-Allow-reporting-non-reportable-problems.patch --author "rpm-build <rpm-build>"

  /usr/bin/cat /builddir/build/SOURCES/gnome-abrt-0.3.4_dont_suggest_reporting_to_bugzilla.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m gnome-abrt-0.3.4_dont_suggest_reporting_to_bugzilla.patch --author "rpm-build <rpm-build>"


author: Bastien Nocera <bnocera@redhat.com> - 1:3.28.1-1
changelog:
  + gnome-bluetooth-3.28.1-1
  - Work-around bluez bug that would leave adapters on Discoverable
    when exiting
  - Resolves: #1567381


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.5-1
changelog:
  - Update to 3.28.5
  - Fix the libgovirt requirement
  - Revert to using Python 2 and Tracker 1.0
  - Resolves: #1567399


author: Florian Müllner <fmuellner@redhat.com> - 3.28.1-3
changelog:
  - Fix a couple of regressions from the rebase:
    - add back classic overview style
    - update dash-to-dock to a compatible version
    Related: #1569717


author: Florian Müllner <fmuellner@redhat.com> - 3.28.1-7
changelog:
  - Add window-grouper extension
    Resolves: #1355845

  - Add disable-screenshield extension
    Resolves: #1643501


author: Florian Müllner <fmuellner@redhat.com> - 3.28.1-13
changelog:
  - Adjust dash-to-dock for classic backports
    Resolves: #1805920
  - Fix inconsistent state in window-list prefs dialog
    Resolves: #1613835
  - Add accessible name to status icons
    Resolves: #1600999


author: Florian Müllner <fmuellner@redhat.com> - 3.26.2-2
changelog:
  - Fix notification legibility in classic mode
    Resolves: #1507457
  - Fix stray icon shadows in classic mode
    Resolves: #1530654


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.2-7
changelog:
  - Add missing resource files (related: #1028079).
  - Don't ignore removal of src/resources.c (related: #1028079).


author: Richard Hughes <rhughes@redhat.com> - 3.8.2-3
changelog:
  - Do not build the clutter support to allow us to drop two deps
    now unsuitable for RHEL.
  - Resolves: #1025270


author: Debarshi Ray <rishi@fedoraproject.org> - 3.22.2-3
changelog:
  - Disable the print button in the selection toolbar when printing isn't
    supported
    Resolves: #1438362


author: Debarshi Ray <rishi@fedoraproject.org> - 3.22.2-6
changelog:
  - Adjust the LOKDocView detection to work with GJS 1.48.0
  - Suppress WARNINGs from GJS 1.50.0 by using var instead of let/const for
    exported symbols
    Resolves: #1517704


author: Debarshi Ray <rishi@fedoraproject.org> - 3.22.2-8
changelog:
  - Initialize the getting started PDF only when presenting a UI, and before any
    SPARQL has been submitted
  - Suppress WARNINGs from GJS 1.50.0 by using var instead of let/const for
    exported symbols
  - Use the standard dialect of String.prototype.replace
    Resolves: #1517770


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.1-1
changelog:
  - Update to 3.28.1
  - Rebased downstream patches
  - Revert to using Python 2 and Tracker 1.0
  - Resolves: #1568171


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.2-1
changelog:
  - Update to 3.28.2
  - Rebased downstream patches
  - Fix crash on right-click on local collection
    Resolves: #1611565


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.2-8
changelog:
  - Remove patch 'daemon: Exit gnome-keyring-daemon when the DBus connection
    closes' (related: rhbz#1030671).


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.5-3
changelog:
  - Don't remove Telepathy accounts or expire Kerberos credentials when stopping
    goa-daemon
  Resolves: #1267534


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.5-5
changelog:
  - Ensure that temporary accounts are really removed from the keyring and
    avoid a WARNING
  Resolves: #1261940


author: Richard Hughes <rhughes@redhat.com> - 3.14.3-3
changelog:
  - Re-apply the fix "Change the UI policy to show the comps tree" as it was
    lost in the rebase process.
  - Resolves: #1174550


author: Richard Hughes <rhughes@redhat.com> - 3.14.3-6
changelog:
  - Create a -common subpackage and make the "parent" package depend on all
    the split out applications. This fixes upgrades from old versions.
  - Resolves: #1290868


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-9
changelog:
  + gnome-settings-daemon-3.26.2-9
  - Revert automatic suspend after inactivity, it was rejected
  - Related: #1449171


author: Benjamin Berg <bberg@redhat.com> - 3.28.1-9
changelog:
  - Keep auto-logout working inside VMs
    Resolves: #1672998
  - Never log out automatically from greeter sessions
    Resolves: #1729296


author: Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-11
changelog:
  - Fix possible crash on gsd-media-keys startup
    Resolves: #1878167
  - Ignore permission issues during gsd-housekeeping file deletion
    Resolves: #1909954
  - Revert mapping of "XF86RFKill" key
    Resolves: #1888412


author: Ray Strode <rstrode@redhat.com> - 3.26.2-7
changelog:
  - Fix logic error in password expiration notification bubble
    Resolves: #1530659
    Related: 1314443


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.2-2
changelog:
  - Backport fix for client-side memory error (GNOME/gnome-terminal#1)
  - Bump BuildRequires versions
  - Drop the dark theme override
  - Rebase and restore the scroll speed patches
  - Rebase and restore the patch to allow old ISO 8895 charsets
  - Restore the GConf migration tool
  - Resolves: #1568632


author: Milan Crha <mcrha@redhat.com> - 3.28.1-6
changelog:
  - Resolves: #1460768 (Cannot hide desktop icons in classic mode)
  - Resolves: #1607839 (Invisible panel is made visible on click between Setting and Toggle button)


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.22-4
changelog:
  - allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
  - do not abort when missing hash algorithm in FIPS mode (#1078962)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9
changelog:
  - Amended fix for FIPS enforcement issue (#1163848)
  - Fixed issue with applications that close all file descriptors (#1165047)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11
changelog:
  - Applied fix for urandom FD in FIPS140 mode (#1165047)
  - Applied fix for FIPS140-2 related regression (#1110696)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13
changelog:
  - Corrected reseed and respect of max_number_of_bits_per_request in 
    FIPS140-2 mode. Also enhanced the initial tests. (#1228199)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1
changelog:
  - Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
  - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
  - When writing certificates to smart cards write the CKA_ISSUER and
    CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
  - Use the shared system certificate store (#1110750)
  - Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
    CVE-2015-7575)
  - Allow hashing data over 2^32 bytes (#1306953)
  - Ensure written PKCS#11 public keys are not marked as private (#1339453)
  - Ensure secure_getenv() is called on all uses of environment variables
    (#1344591).
  - Fix issues related to PKCS #11 private key listing on certain HSMs
    (#1351389)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7
changelog:
  - Address interoperability issue with 3.5.x (#1388932)
  - Reject CAs which are both trusted and blacklisted in trust module (#1375303)
  - Added new functions to set issuer and subject ID in certificates (#1378373)
  - Reject connections with less than 1024-bit DH parameters (#1335931)
  - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
  - Mention limitations of certtool in manpage (#1375463)
  - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
  - Do not link directly to trousers but instead use dlopen (#1379739)
  - Fix incorrect OCSP validation (#1377569)
  - Added support for pin-value in PKCS#11 URIs (#1379283)
  - Added the --id option to p11tool (#1399232)
  - Improved sanity checks in RSA key generation (#1444780)
  - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
    CVE-2017-7869


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9
changelog:
  - Address crash in OCSP status request extension, by eliminating the
    unneeded parsing (CVE-2017-7507, #1455828)


author: Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8
changelog:
  - Backported --sni-hostname option which allows overriding the hostname
    advertised to the peer (#1444792)
  - Improved counter-measures in TLS CBC record padding for lucky13 attack
    (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
  - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
    (CVE-2018-10846, #1589708)
  - Address p11tool issue in object deletion in batch mode (#1375307)
  - Backport PKCS#11 tests from master branch. Some tests were disabled due to
    unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
    generation without login, and certificates do not inherit ID from the private
    key)
  - p11tool explicitly marks certificates and public keys as NOT private objects
    and private keys as private objects
  - Enlarge buffer size to support resumption with large keys (#1542461)
  - Legacy HMAC-SHA384 cipher suites were disabled by default
  - Added DSA key generation to p11tool (#1464896)
  - Address session renegotiation issue using client certificate (#1434091)
  - Address issue when importing private keys into Atos HSM (#1460125)


author: Derek Parker <deparker@redhat.com> - 1.10.3-3
changelog:
  - Inlcude patch with build tag no_openssl to disable dynamic linking against openssl-devel at build time.
  - Resolves: BZ#1609889


author: Derek Parker <deparker@redhat.com> - 1.10.3-4
changelog:
  - Include patch with runtime check to not call into OpenSSL if system not in FIPS mode
  - Resolves: BZ#1609886


author: Derek Parker <deparker@redhat.com> - 1.10.3-5
changelog:
  - Remove OpenSSL FIPS patches in favor of using a tree which already contains them
  - Related: BZ#1636220


author: Derek Parker <deparker@redhat.com> - 1.12.6-2
changelog:
  - Relax strictness in FIPS mode. Allow keys larger than 2048, key size mod 512.
  - Resolves: rhbz#1734784


author: Derek Parker <deparker@redhat.com> - 1.12.12-1
changelog:
  - Rebase to 1.12.12
  - Revert to Sign/Verify operations not expected unhashed inputs
  - Remove previously added verbose output
  - Better expose openssl errors
  - Related: rhbz#1709604
  - Related: rhbz#1740474


author: Derek Parker <deparker@redhat.com> - 1.12.12-2
changelog:
  - Fix parity in stub boring.(Sign/Verify)RSAPKCS1v15 functions
  - Related: rhbz#1709604
  - Related: rhbz#1740474


author: Jiri Kucera <jkucera@redhat.com> - 1.20.7-6
changelog:
  - Remove old scriptlets
    Enable PIE and RELRO
    ./autogen.sh runs too early
    Resolves: #1092527, #1095444


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-13
changelog:
  - Fixed multilib conflicts
    Rewrote lefty IO lib to use getaddrinfo instead of gethostbyname
    (by lefty-getaddrinfo patch)
    Resolves: rhbz#881173


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-17
changelog:
  - Prevent possible buffer overflow in yyerror()
    Resolves: CVE-2014-1235
  - Fix possible buffer overflow problem in chkNum of scanner
    Resolves: CVE-2014-1236


author: Peter Jones <pjones@redhat.com> - 2.02-0.67
changelog:
  - Make the permissions on /boot/efi/... match the filesystem's requirements.
    Resolves: rhbz#1496952


author: Peter Jones <pjones@redhat.com> - 2.02-0.68
changelog:
  - More work on /boot/efi/... permissions
    Resolves: rhbz#1496952
  - Rework grubenv symlinks and handle them on upgrades
    Resolves: rhbz#1497918
  - Make grub2-setpassword -o work
    Resolves: rhbz#1512749


author: Peter Jones <pjones@redhat.com> - 2.02-0.71
changelog:
  - The change from 2.02-0.65.el7_4.2 never made it onto the main branch,
    so one more build to avoid the regression.
    Related: rhbz#1340893


author: Peter Jones <pjones@redhat.com> - 2.02-0.74
changelog:
  - Fix symlink issues with grubenv
    Resolves: rhbz#1602773
    Related: rhbz#1497918
  - Make the common subpackage only build on x86_64 to avoid timestamp
    mismatches.
    Related: rhbz#1602773
    Related: rhbz#1497918


author: CentOS Sources <bugs@centos.org> - 2.02-0.76.el7.centos
changelog:
  - Roll in CentOS Secureboot keys
  - Move the edidir to be CentOS, so people can co-install fedora, rhel and centos


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79
changelog:
  - Ignore the modification time when doing RPM verification of /boot/efi files
    Resolves: rhbz#1496952


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78
changelog:
  - Prevent errors from diskfilter scan of removable drives
    Resolves: rhbz#1446418
  - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
    Resolves: rhbz#1497918
  - Remove glibc32 and glibc-static(x86-32) BuildRequires
    Resolves: rhbz#1614259


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82
changelog:
  - Prepend prefix when HTTP path is relative
  - efi/http: Export {fw,http}_path variables to make them global
  - efi/http: Enclose literal IPv6 addresses in square brackets
  - efi/net: Allow to specify a port number in addresses
  - efi/ip4_config: Improve check to detect literal IPv6 addresses
  - efi/net: Print a debug message if parsing the address fails


author: Peter Jones <pjones@redhat.com> - 2.02-0.86
changelog:
  - Fix several CVEs:
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2
changelog:
  - Fix another batch of CVEs
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82
changelog:
  - Prepend prefix when HTTP path is relative
  - efi/http: Export {fw,http}_path variables to make them global
    Resolves: rhbz#1616395
  - efi/http: Enclose literal IPv6 addresses in square brackets
  - efi/net: Allow to specify a port number in addresses
  - efi/ip4_config: Improve check to detect literal IPv6 addresses
  - efi/net: Print a debug message if parsing the address fails
    Resolves: rhbz#1732765


author: Peter Jones <pjones@redhat.com> - 2.02-0.84
changelog:
  - Couple more late fixes.
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 2.02-0.85
changelog:
  - Couple more late fixes.
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311
    Resolves: CVE-2020-15705


author: Peter Jones <pjones@redhat.com> - 8.28-17
changelog:
  - Fix the ordering of creating the debug entries, so they don't get picked
    when we're choosing kernel command line defaults on upgrades.
    Related: rhbz#1212128


author: rmarshall@redhat.com - 8.28-18
changelog:
  - Patched new-kernel-pkg so that kernel installations when MAKEDEBUG is
    set would put the debugging entries after the non-debugging entries.
    Resolves: #1285601
  - Re-numbered the last set of patches to go with the flow. No actual
    changes to the patches; just a git mv to rename.
  - Re-organized and updated the grubby man page contents to include some
    features that were not documented as well as correct typos and
    re-write some entries for better clarity.
    Resolves: #1232168


author: rmarshall@redhat.com - 8.28-21
changelog:
  - Resolve issues with the recent grubby logic patches that
    appeared on the ppc platform. Fix a problem that occurred
    on systems where no kernel update had ever been installed.
    Resolves: rhbz#1285601
  - Specify the actual prune_debug file in sources.
    Resolves: rhbz#1285601


author: rmarshall@redhat.com - 8.28-23
changelog:
  - Fixes --info flag on s390/s390x.
    Related: rhbz#1285601
  - Fixes --set-default-index on s390/s390x.
    Related: rhbz#1285601
  - Allows prune_debug to run on s390/s390x.
    Resolves: rhbz#1285601


author: Peter Jones <pjones@redhat.com> - 8.28-24
changelog:
  - Ensure "grubby --default-title" takes the bootloader selection into
    account
    Resolves: rhbz#1340893


author: Peter Jones <pjones@redhat.com> - 8.28-25
changelog:
  - Ensure /etc/sysconfig/kernel has a stable mode, now that rpm handles ghost
    files differently.
    Resolves: rhbz#1584313


author: Javier Martinez Canillas <javierm@redhat.com> - 8.28-26
changelog:
  - Exclude building on i686
    Related: rhbz#1476273
  - Fix grubby removing wrong kernel command line parameter
    Resolves: rhbz#1476273
  - Improve man page for --info option (jstodola)
    Resolves: rhbz#1651673
  - Print default image even if isn't a suitable one
    Resolves: rhbz#1323842


author: Akira TAGOH <tagoh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release.
  - Using autotools isn't supported in upstream anymore. switching to cmake.
  - undefined reference issues seems gone now. (#813825)


author: Ondrej Holy <oholy@redhat.com> - 1.30.3-1
changelog:
  - Update to 1.30.3
  - Disable nfs support (#1387270)
  - Revert desktop database scriplets
  - Resolves: #1386993, #1399343, #1306146, #1259746, #1344317


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-2
changelog:
  - Prevent spawning new daemons if outgoing operation exists (#1632960)
  - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)


author: Petr Stodulka <pstodulk@redhat.com> - 1.5-8
changelog:
  - Gzip overwrite existing files when user choose "no" on yes/no question.
    It's due to wrong dupicit declaration of yesno() function in gzip.h
    which is compiled wrong with -O2 option.
    Resolves: rhbz#1201689


author: Jakub Martisko <jamartis@redhat.com> - 1.5-10
changelog:
  - doc change: missing grep options are now mentioned in the zgrep 
    man pages/help message
    Resolves: #1437002


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7
changelog:
  - Fix: "Argument list too long" when using virt-v2v on Windows guest
    with French copy of Citrix installed
    related: rhbz#1145056


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8
changelog:
  - Tolerate corruption in some hives
    resolves: rhbz#1423436
  - Switch to using git to manage patches.


author: Jiri Popelka <jpopelka@redhat.com> - 3.11-3
changelog:
  - remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
  - remove outdated de & pt man pages
  - /usr move: use _bindir macro


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.15.9-2
changelog:
  - 1069619 - Rebase to version 3.15.9 extension - solving bug 1346196 (/usr/lib/cups/filter/hpps uses python -B which is unknown), which is duplicate of bug 1202451


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.7.1-5
changelog:
  - Bump http-parser release number to avoid people pulling EPEL package instead
    of RHEL package
    Resolves: rhbz#1479471


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-6
changelog:
  - Resolves: rhbz#1666381 - CVE-2018-12121 http-parser: nodejs: Denial of
                             Service with large HTTP headers [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-7
changelog:
  - Resolves: rhbz#1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser
                             allowed for spaces inside Content-Length header
                             values [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-8
changelog:
  - Backport needed test fixes
  - Related: rhbz#1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser
                            allowed for spaces inside Content-Length header
                            values [rhel-7]


author: Sergio Correia <scorreia@redhat.com> - 2.7.1-8.1
changelog:
  - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
                             smuggling using malformed Transfer-Encoding header


author: CentOS Sources <bugs@centos.org> - 2.4.6-89.el7.centos.1
changelog:
  - Remove index.html, add centos-noindex.tar.gz
  - change vstring
  - change symlink for poweredby.png
  - update welcome.conf with proper aliases


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90
changelog:
  - Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
    in mod_auth_digest
  - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
    bypass due to race condition
  - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91
changelog:
  - Resolves: #1630886 - scriptlet can fail if hostname is not installed
  - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
    mod_authnz_ldap when using too small Accept-Language values
  - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
    failure in reading the HTTP request
  - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
    directive
  - Resolves: #1633152 - mod_session missing apr-util-openssl
  - Resolves: #1649470 - httpd response contains garbage in Content-Type header
  - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94
changelog:
  - Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
    newline in the file name
  - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
  - Resolves: #1724879 - httpd terminates all SSL connections using an abortive
    shutdown
  - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
  - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
    mod_cache_socache can allow a remote attacker to cause a denial of service
  - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
    mod_session can allow a remote user to modify session data for CGI applications


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97
changelog:
  - Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
    a client cert to backend server
  - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
  - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
    concurrency issues


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1
changelog:
  - Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
    request uri-path containing "unix:"


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3
changelog:
  - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
    when parsing multipart content


author: Luboš Uhliarik <luhliari@redhat.com>
changelog:
  - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
    malformed requests
  - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
    ap_escape_quotes() via malicious input
  - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5
changelog:
  - Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
    vulnerability in Apache HTTP Server 2.4.52 and earlier


author: Caolán McNamara <caolanm@redhat.com> - 1.3.2-6
changelog:
  - Resolves: rhbz#573516 have hunspell require hunspell-en to ensure
    at least one dictionary exists


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-8.5
changelog:
  - Updated pci, usb and vendor ids
    Resolves: #1386133 #1424763
  - Removed module nx_crypto from blacklist on PowerPCs
    Resolves: #1264326


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-8.9
changelog:
  - Updated pci, usb, vendor ids and hwdb files
    Resolves: #1560493
  - Blacklisted sha{256,512}-mb modules
    Resolves: #1562114


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-9.5
changelog:
  - Fix URL for downloading hwdb files
  - Updated pci, usb, vendor ids and hwdb files
    Resolves: #1721908


author: snwint@suse.de
changelog:
  - support Validity fingerprint sensor (bnc #644149)
  - add vmbus storage controllers (bnc #654959)
  - fix SPARC compile fixes


author: snwint@suse.de
changelog:
  - fix network detection if several interfaces are attached to a single pci function (bnc #693090)
  - fixed typo
  - USB joystick fixes
  - replace USB details by joystick details
  - set unix_dev_name2 to /dev/input/jsX
  - added Gameport bus, detect gameport joysticks
  - cleanup - removed unused variables
  - added NULL checks
  - joystick: detect and report number of axes and buttons
  - added support for detecting USB joysticks
  - updated .gitignore
  - added .gitignore files
  - show disk capacity in GB


author: snwint@suse.de
changelog:
  - AArch64 support
  - Add support for AArch64
  - Add a new CPU Arch Type, AArch64, and properly
  - parse the /proc/cpuinfo (that is quite similar to ARM 32bit)
  - Remove various unused variables
  - Fix sizing error in memset() call


author: Jarod Wilson <jarod@redhat.com> 15-4
changelog:
  - Add support for extended join multicast API in librdmacm
  - Add support for striding RQ on mlx5
  - Resolves: rhbz#1515487, rhbz#1516571


author: Jarod Wilson <jarod@redhat.com> 15-5
changelog:
  - libmlx4: report RSS caps for improved DPDK support
  - Fix double mutex unlock in iwpmd
  - Resolves: rhbz#1527350
  - Resolves: rhbz#1542362


author: Jarod Wilson <jarod@redhat.com> 15-7
changelog:
  - i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
    causing problems with suspend and resume, and fall back to load via
    systemd rdma initscript.
  - Resolves: rhbz#1561566


author: Jarod Wilson <jarod@redhat.com> 17.1-1
changelog:
  - Rebase to upstream rdma-core v17.1 stable release
  - No more libibcm or ib sysv initscripts
  - Resolves: rhbz#1515647
  - Resolves: rhbz#1517208
  - Resolves: rhbz#1523201
  - Resolves: rhbz#1541751


author: Jarod Wilson <jarod@redhat.com> 17.1-3
changelog:
  - Grab latest stable-v17 fixes from upstream
  - Fix Provides/Obsoletes on removed libibcm
  - Fix Provides/Obsoletes on removed libehca
  - Straighten out SW parsing feature support for DPDK
  - Fix mlx5 rate-limiting support
  - Resolves: rhbz#1588096
  - Resovles: rhbz#1534856
  - Resolves: rhbz#1589525


author: Jarod Wilson <jarod@redhat.com> 17.2-2
changelog:
  - Restore SysV Initscripts ib ifup and ifdown helpers
  - Adjust MTU limit for IPoIB in datagram mode via ifup-ib
  - Resolves: rhbz#1593426
  - Resolves: rhbz#1593334


author: Jarod Wilson <jarod@redhat.com> 22-1
changelog:
  - Rebase to upstream rdma-core v22
  - Resolves: rhbz#1641921
  - Add mlx5 IB Device Memory support (MEMIC)
  - Resolves: rhbz#1644697
  - Add mlx5 Tunnel protocol RX decap/encap offload
  - Resolves: rhbz#1644709
  - Add mlx5 Tunnel protocol TX decap/encap offload
  - Resolves: rhbz#1644778
  - Add support for mlx5 infiniband flow counters
  - Resolves: rhbz#1644714
  - Add mlx5 DEVX interface
  - Resolves: rhbz#1644722
  - Add libbnxt_re support for SRQ
  - Resolves: rhbz#1570393


author: Jarod Wilson <jarod@redhat.com> 22.1-1
changelog:
  - Update to upstream v22.1 release with stable-v22 branch fixes
  - Add support for Broadcom 57500 RoCE adapter
  - Resolves: rhbz#1678274


author: Jarod Wilson <jarod@redhat.com> 22.4-1
changelog:
  - Update to v22.4 stable release
  - Support mlx5 scatter to CQE over DCT QP
  - Fix ibacm segfault on non-IB hardware
  - Resolves: rhbz#1715489
  - Resolves: rhbz#1712296


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-12
changelog:
  - Resolves: #1183909 - programs using "PreeditType: OverTheSpot" is stalled
  - Resolves: #1191825 - gtk2's immodules.cache won't be updated in some cases


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-3
changelog:
  - Remove have_bridge_hotkey and need_pygobject3 macros which does no
    longer make sense after F17
  - Add ibus-hangul-dconf-prefix.patch
  - Fix bug 909509 - Hangul Keybaord doesn't be changed in IBusHangul Setup


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-7
changelog:
  - Invoke ibus-setup-hangul with the absolute path.
  - Fix bug 1012732 - Click ibus hangul setup on gnome-shell top bar's
    ibus -> No Response


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-10
changelog:
  - Add ibus-hangul-hangul-toggle.patch
  - Fix bug 1071351 - Cannot switch English input mode and Hangul
    (Korean) input mode by Hangul key


author: Jay Fenlason <fenlason@redhat.com> 1.5.7-8
changelog:
  - Add the -output patch to have programs use /var/cache/ibutils
    instead of /tmp
    Resolves: bz958569


author: Doug Ledford <dledford@redhat.com> - 1.5.7-12
changelog:
  - Change ExclusiveArch to ExcludeArch instead so we don't have
    the same problem again in the future
  - Update to the git repo tarball that we shipped in rhel6.6
  - Related: bz1123998


author: Jiri Vanek <jvanek@redhat.com> 1.6.1-4
changelog:
  - added and and applied patch2 fileLogInitializationError-1.6.patch to prevent 
  consequences 1268909
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. 
  set -e 
     _pompart="need" 
     _jarpart="tobe" 
  _filelist=".mfiles" 
  install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-2.tl2.i386/usr/share/maven-fragments 
  for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
      if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-2.tl2.i386$_dir/$_jarpart ]; then 
  	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-2.tl2.i386$_dir/$_jarpart" 
      fi 
  done 
  python -m /usr/share/java-utils/maven_depmap   \
            -p "/usr" -n "" \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-2.tl2.i386/usr/share/maven-fragments/icedtea-web \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-2.tl2.i386/usr/share/maven-poms/$_pompart \
          >> ${_filelist} 
  sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-2.tl2.i386::' ${_filelist} 
  sort -u -o ${_filelist} ${_filelist} 


  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-3
changelog:
  - added --family to make it part of javas alternatives alignment
  - java-javaver-openjdk collected into preffered_java 
  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.7-1
changelog:
  - updated to itw 1.7 and sync from fedora
  - added forgotten slaves of itweb-settings policyeditor
  - Own %{_datadir}/%{name} dir
  - Mark non-English man pages with %lang
  - Install COPYING as %license
  - last three by Ville Skytta <ville.skytta@iki.fi> via 1481270
  - for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
  - removed maven macros in favour of manual handling (bug)
  - Resolves: rhbz#1475411


author: Jiri Vanek <jvanek@redhat.com> 1.7.2-16
changelog:
  - added patch1, patch4 and patch11 to fix CVE-2019-10182
  - added patch2 to fix CVE-2019-10181
  - added patch3 and patch33 to fix CVE-2019-10185
  - Resolves: rhbz#1724958 
  - Resolves: rhbz#1725928 
  - Resolves: rhbz#1724989


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. 
  set -e 
     _pompart="need" 
     _jarpart="tobe" 
  _filelist=".mfiles" 
  install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-2.tl2.x86_64/usr/share/maven-fragments 
  for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
      if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-2.tl2.x86_64$_dir/$_jarpart ]; then 
  	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-2.tl2.x86_64$_dir/$_jarpart" 
      fi 
  done 
  python -m /usr/share/java-utils/maven_depmap   \
            -p "/usr" -n "" \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-2.tl2.x86_64/usr/share/maven-fragments/icedtea-web \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-2.tl2.x86_64/usr/share/maven-poms/$_pompart \
          >> ${_filelist} 
  sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-2.tl2.x86_64::' ${_filelist} 
  sort -u -o ${_filelist} ${_filelist} 


  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. 
  set -e 
     _pompart="need" 
     _jarpart="tobe" 
  _filelist=".mfiles" 
  install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.tl2.i386/usr/share/maven-fragments 
  for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
      if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.tl2.i386$_dir/$_jarpart ]; then 
  	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.tl2.i386$_dir/$_jarpart" 
      fi 
  done 
  python -m /usr/share/java-utils/maven_depmap   \
            -p "/usr" -n "" \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.tl2.i386/usr/share/maven-fragments/icedtea-web \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.tl2.i386/usr/share/maven-poms/$_pompart \
          >> ${_filelist} 
  sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.tl2.i386::' ${_filelist} 
  sort -u -o ${_filelist} ${_filelist} 


  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. 
  set -e 
     _pompart="need" 
     _jarpart="tobe" 
  _filelist=".mfiles" 
  install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.tl2.x86_64/usr/share/maven-fragments 
  for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
      if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.tl2.x86_64$_dir/$_jarpart ]; then 
  	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.tl2.x86_64$_dir/$_jarpart" 
      fi 
  done 
  python -m /usr/share/java-utils/maven_depmap   \
            -p "/usr" -n "" \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.tl2.x86_64/usr/share/maven-fragments/icedtea-web \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.tl2.x86_64/usr/share/maven-poms/$_pompart \
          >> ${_filelist} 
  sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.tl2.x86_64::' ${_filelist} 
  sort -u -o ${_filelist} ${_filelist} 


  - Resolves: rhbz#1299537


author: Mike FABIAN <mfabian@redhat.com> - 50.2-1
changelog:
  - Update to 50.2 maintenance release including support for new Japanese era Reiwa (令和).
  - Resolves: rhbz#1677092


author: Mike FABIAN <mfabian@redhat.com> - 50.2-2
changelog:
  - Fix rpmdiff failure: File /usr/src/debug/icu/source/i18n/unicode/selfmt.h
    relaxed permissions from 0644 to 0755 on all architectures
  - Related: rhbz#1677092


author: Mike FABIAN <mfabian@redhat.com> - 50.2-4
changelog:
  - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
  - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
  - Resolves: rhbz#1808235


author: Akira TAGOH <tagoh@redhat.com> - 1.6.2-1
changelog:
  - New upstream release.
  - the spec file cleanup.
  - Correct License field
  - Add Provides: bundled(egglib) to im-chooser-common since
    it actually contains things in libimchooseui.so.0


author: Akira TAGOH <tagoh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release.
    - Add a link to the log file in the error dialog (#950488)
    - Fix a crash issue (#859624)


author: Akira TAGOH <tagoh@redhat.com> - 1.6.4-6
changelog:
  - Bring up gnome-control-center region if current desktop is GNOME.
  - Hide application from menu. (#1657016)


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-1
changelog:
  - New upstream release
  - Remove libtool files
  - Run ldconfig after un/installation to update *.so files
  - Add -devel subpackage to handle include files and examples


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Adjusted docbook xsl path to match the correct stylesheet
  - Remove only *.la files, considering there aren't any *.a files


author: Akira TAGOH <tagoh@redhat.com> - 1.6.3-10
changelog:
  - Fix a regression imsettings can't detect GNOME running caused by GNOME rebase. (#1533772)
  - Fix unbound variable issue (#1533050)


author: Akira TAGOH <tagoh@redhat.com> - 1.6.3-11
changelog:
  - Don't set environment variables on GNOME. (#1673284)
  - Fix another unbound variable issue (#1533050)


author: Doug Ledford <dledford@redhat.com> - 1.6.2-1
changelog:
  - Update to latest upstream release (resolves bz998816)
  - Revive all_hcas patch (otherwise would be a regression)
  - Fix ibnodes -h output (another regression, bz1054545)
  - Resolves: bz998816, bz1054545


author: Michal Schmidt <mschmidt@redhat.com> - 1.6.5-1
changelog:
  - Update to latest upstream release. Adds rdma-ndd daemon.
  - Rebase patches, cherry-pick fixes from upstream git.
  - Enable build on s390(x).
  - Fixed bogus changelog dates.
  - Add Conflicts with old rdma. It needs to be aware of rdma-ndd.
  - Resolves: bz1169968


author: Honggang Li <honli@redhat.com> - 1.6.7-1
changelog:
  - Rebase to latest upstream release 1.6.7.
  - Remove patches merged into upstream release.
  - Remove sub-package rdma-ndd as it merged into rdma-core.
  - Resolves: bz1382809


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.39-1
changelog:
  - Run GUI on the s390 if possible (#1378082) (mkolman)
    Resolves: rhbz#1378082
  - Make it possible to set stdout log verbosity level (mkolman)
    Related: rhbz#1378082
  - Make it possible to show window header (mkolman)
    Related: rhbz#1378082


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.42-1
changelog:
  - Use constant+offset when turning systemd console logging on/off (#1479787) (mkolman)
    Resolves: rhbz#1479787


author: Richard Brantley <rbrantle@redhat.com> - 3.0.2-2
changelog:
  - Resolves BZ1498650, BZ1500008, BZ1501545, BZ1501552, BZ1501556, BZ1501561, BZ1501565, BZ1501566
  - Fixes version migration logic
  - Fixes symlink issues to old binary
  - Fixes short ID analysis for images and containers
  - Fixes Docker library detection
  - Fixes image and container detection
  - Fixes registration execution flow
  - Fixes --version flag to print to stdout and include additional versioning information
  - Includes Insights Core 3.0.3-1


author: Kyle Lape <klape@redhat.com> - 3.0.3-1
changelog:
  - RHEL 7 RPM now uses systemd service and timer instead of cron
  - Addition of IO and CPU cgroup constraints
  - Fixed memory cgroup constraint


author: Link Dupont <link@redhat.com> - 3.0.14-1
changelog:
  - Removed printing to stdout in cron script (RHBZ#1828778)
  - Add deprecation message when running legacy redhat-access-insights (RHCLOUD-5409)
  - Update systemd timer to use timers.target (RHBZ#1798373)
  - Fix an issue updating motd.d on relevant systems (RHCLOUD-6144)
  - Update shipped core to version 3.0.161 (RHCLOUD-4457)
  - Enable automatic checking for advisor results (RHCLOUD-4558)
  - Ensure dependency on coreutils for timeout (RHCLOUD-5131)
  - Build system converted to autotools (RHCLOUD-4333)


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-22.20160119
changelog:
  - xorg-x11-drv-intel hardly has any accel on skylake and newer, so make
    Xorg fallback to modesetting + glamor by returning FALSE from probe
  - Using glamor also gives us proper Xvideo support on skylake (rhbz#1305369)


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-23.20160512
changelog:
  - Update to 20160512 snapshot
  - This fixes laptops with switchable graphics hanging after a dpms off of
    the lcd screen (rhbz#1334581)
  - Fix fd-leak when falling back to mode-setting on skylake, this fixes
    Xorg exiting with a "drmSetMaster failed" error when not using server
    managed fds (e.g. using a different login manager then gdm)
  - Fix duplicate binaries in -devel / intel-gpu-tools subpackages (rhbz#1323641)


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-24.20160712
changelog:
  - Git snapshot du jour, bringing in a bunch of bugfixes
  - Fix dpi issues on Surface 3 (also needs some kernel fixes)
  - Hopefully fix rhbz#1354124


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-7.el7
changelog:
  - Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
    - ipactl restart: fix wrong logic when checking service list


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-8.el7
changelog:
  - Resolves: 1702651 - Command ipa conole is broken
    - ipa console: catch proper exception when history file can not be open
  - Resolves: 1704796 - Wrong CA replication topology created with two replicas
    - replica install: acknowledge ca_host override
  - Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
    - upgrade: adtrust - catch empty result when retrieving list of trusts


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-9.el7
changelog:
  - Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
    - Consider configured servers as valid


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-10.el7
changelog:
  - Resolves: 1723473 - ipa upgrade fails with trust entry already exists
    - adtrust upgrade: fix wrong primary principal name


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-11.el7
changelog:
  - Resolves: 1723473 - ipa upgrade fails with trust entry already exists
    - adtrust upgrade: fix wrong primary principal name, part 2
  - Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
    - trust-fetch-domains: make sure we use right KDC when --server is specified


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-11.el7_7.2
changelog:
  - Resolves: #1752740 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
    - add default access control when migrating trust objects
    - adtrust: add default read_keys permission for TDO objects
    - Disable deprecated-lambda check in adtrust upgrade code


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-11.el7_7.3
changelog:
  - Resolves: #1756914 - Sub-CA key replication failure
    - Handle missing LWCA certificate or chain
    - Fix CustodiaClient ccache handling
    - CustodiaClient: use ldapi when ldap_uri not specified
    - CustodiaClient: fix IPASecStore config on ipa-4-7
    - Bump krb5 min version


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-11.el7_7.4
changelog:
  - Resolves: #1781153 - After upgrade AD Trust Agents were removed from LDAP
    - trust upgrade: ensure that host is member of adtrust agents
  - Resolves: #1777303 - CVE-2019-10195 ipa: batch API logging user passwords to /var/log/httpd/error_log
    - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
  - Resolves: #1773953 - User incorrectly added to negative cache when backend is reconnecting to IPA service / timed out: error code 32 'No such object'
    - extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT
    - ipa-extdom-extop: test timed out getgrgid_r
  - Resolves: #1770728 - Issue with adding multiple RHEL 7 IPA replica to RHEL 6 IPA master
    - DL0 replica install: fix nsDS5ReplicaBindDN config 
  - Resolves: #1767300 - CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf()
    - Make sure to have storage space for tag


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-3.el7
changelog:
  - Resolves: 1694623 ipa-kra-install failing with invalid 'role_servrole': must be Unicode text error
    - ipa-setup-kra: fix python2 parameter
  - Resolves: 1694596 ipa-server-upgrade fails with ConversionError: invalid 'cn': must be Unicode text
    - ipa-server-upgrade: fix add_systemd_user_hbac


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-4.el7
changelog:
  - Resolves: 1686302 ipa trust fetch-domains, server parameter ignored
    - oddjob: allow to pass options to trust-fetch-domains
  - Resolves: 1695481 ipa trust-add failing with CIFS server communication error
    - adtrust: define Guests mapping after creating cifs/ principal
    - net groupmap: force using empty config when mapping Guests


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-5.el7
changelog:
  - Resolves: 1697242 Communication with oddjob helper fails
    - Bypass D-BUS interface definition deficiences for trust-fetch-domains


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7
changelog:
  - Resolves: #1834385 Man page syntax issue detected by rpminspect
    - Man pages: fix syntax issues
  - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
    - Make check_required_principal() case-insensitive
  - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
    - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
  - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
    - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
  - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
    - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7
changelog:
  - Resolves: #1842950 ipa-adtrust-install fails when replica is offline
    - ipa-adtrust-install: avoid failure when replica is offline
  - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
    - WebUI: Apply jQuery patch to fix htmlPrefilter issue


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7
changelog:
  - Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
    -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4
changelog:
  - Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
    - wgi/plugins.py: ignore empty plugin directories
  - Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
    - Improve PKI subsystem detection
    - ipatests: add test for PKI subsystem detection
    - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
  - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
    - Add more indices
  - Resolves: #1884819 IdM Web UI shows users as disabled
    - fix cert-find errors in CA-less deployment
  - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
    - CAless installation: set the perms on KDC cert file
    - ipatests: check KDC cert permissions in CA less install
  - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
    - WebUI: Fix jQuery DOM manipulation issues
  - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
    - fix iPAddress cert issuance for >1 host/service


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5
changelog:
  - Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
    - ipa-kdb: fix compiler warnings
    - ipa-kdb: add missing prototypes
    - ipa-kdb: reformat ipa_kdb_certauth
    - ipa-kdb: mark test functions as static
    - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
  - Resolves: #1835741 krb5kdc crashing on ipa server
  - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7
changelog:
  - Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
    - CA less installation: non ASCII chars in CA subject
    - ipatests: use non-ascii chars in CA-less install
  - Resolves: #1974328 - Revise PKINIT upgrade code
    - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9
changelog:
  - Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
    - extdom: return LDAP_NO_SUCH_OBJECT if domains differ


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10
changelog:
  - Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
    - Fix cert_request for KDC cert
  - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
    - SMB: switch IPA domain controller role


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11
changelog:
  - Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
    - WebUI: Add confirmation dialog for changing default user/host group


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7
changelog:
  - Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
    - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
  - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
    - Do not run trust upgrade code if master lacks Samba bindings
  - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
    - Make sure to have storage space for tag


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7
changelog:
  - Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
    - trust upgrade: ensure that host is member of adtrust agents


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7
changelog:
  - Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
  - Resolves: #1404770 - ID Views: do not allow custom Views for the masters
    - idviews: prevent applying to a master
  - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
    - install/updates: move external members past schema compat update
  - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
    - pkinit setup: fix regression on master install
    - pkinit enable: use local dogtag only if host has CA
  - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
    - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
  - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
    - ipa-cacert-manage man page: fix indentation
  - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
    - adtrust.py: mention restarting sssd when adding trust agents
  - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
    - Use default ssh host key algorithms
  - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
    - smartcard: make the ipa-advise script compatible with authselect/authconfig
  - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
    - upgrade: fix ipakra people entry 'description' attribute
    - krainstance: set correct issuer DN in uid=ipakra entry
  - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
    - ipa-server-certinstall manpage: add missing options
  - Resolves: #1206690 - UPG not being enforced properly
    - ipa user_add: do not check group if UPG is disabled
  - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
  - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
  - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
  - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
  - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
  - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
    - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
  - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
    - WebUI: Fix notification area layout
  - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
    - Fix indentation levels
    - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
    - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
    - Don't save password history on non-Kerberos accounts


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7
changelog:
  - Resolves: #1819725 - Rebase IPA to latest 4.6.x version
  - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
  - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
  - Resolves: #1817922 - covscan memory leaks report
  - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
  - Resolves: #1817918 - Secure tomcat AJP connector
  - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
  - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7
changelog:
  - Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
    - Add interactive prompt for the LDAP bind password to ipa-getkeytab
    - CVE-2020-1722: prevent use of too long passwords


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-9.el7
changelog:
  - Resolves: #1762317 - ipa-backup command is failing on rhel-7.8
    -  ipa-backup: fix python2 issue with os.mkdir


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-19.el7]
changelog:
  - rdma: add infrastructure for RDMA tool (Andrea Claudi) [1642479 1641914]
  - rdma: Add MR resource tracking information (Andrea Claudi) [1642479 1641914]
  - json_writer: add new json handlers (null, float with format, lluint, hu) (Andrea Claudi) [1642479 1641914]
  - lib: make resolve_hosts variable common (Andrea Claudi) [1642479 1641914]
  - utils: Move BIT macro to common header (Andrea Claudi) [1642479 1641914]
  - tc: flower: Add support for QinQ (Andrea Claudi) [1642347]
  - man: tc-vlan.8: Fix for incorrect example (Andrea Claudi) [1593630]
  - man: ip-route.8: ssthresh parameter is NUMBER (Andrea Claudi) [1593628]
  - devlink: Add param command support (Andrea Claudi) [1644731]
  - devlink: Update man pages and add resource man (Andrea Claudi) [1644731]
  - devlink: Add support for hot reload (Andrea Claudi) [1644731]
  - devlink: Add support for devlink resource abstraction (Andrea Claudi) [1644731]


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-21.el7]
changelog:
  - Check user supplied interface name lengths (Andrea Claudi) [1465646]
  - tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
  - ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
  - utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
  - lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
  - tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
  - ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
  - Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
  - Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
  - utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
  - lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
  - lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
  - lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
  - netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
  - ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
  - ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
  - lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
  - tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
  - lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
  - lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
  - lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
  - ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
  - tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
  - tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
  - tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
  - ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
  - lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
  - devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
  - iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
  - iproute: Check mark value input (Andrea Claudi) [1465646]
  - tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
  - netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
  - ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
  - ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
  - iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
  - ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
  - tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
  - ss: Drop useless assignment (Andrea Claudi) [1465646]
  - ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
  - lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
  - iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
  - ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
  - devlink: No need for this self-assignment (Andrea Claudi) [1465646]
  - tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
  - ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
  - ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
  - ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
  - ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
  - tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
  - ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
  - iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
  - iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
  - tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
  - ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
  - examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
  - ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
  - ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
  - tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-23.el7]
changelog:
  - tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
  - gre6: add collect metadata support (Andrea Claudi) [1714660]
  - tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
  - m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
  - tc: fix parsing of the control action (Andrea Claudi) [1714660]
  - tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
  - tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
  - tc: gact: fix control action parsing (Andrea Claudi) [1714660]
  - tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
  - tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
  - tc_filter: add support for chain index (Andrea Claudi) [1714660]
  - gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
  - man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
  - ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-25.el7]
changelog:
  - tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
  - tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
  - tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
  - tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]


author: Phil Sutter <psutter@redhat.com> [4.11.0-16.el7]
changelog:
  - ip-route: Fix nexthop encap parsing (Phil Sutter) [1624656]
  - man: ip-route.8: Document nexthop limit (Phil Sutter) [1624656]
  - ip-route: Fix segfault with many nexthops (Phil Sutter) [1624656]
  - iproute: Abort if nexthop cannot be parsed (Phil Sutter) [1624656]


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-27.el7]
changelog:
  - ss: fix NULL pointer access when parsing unix sockets with oldformat (Andrea Claudi) [1795891]
  - tc_util: Add support for showing TCA_STATS_BASIC_HW statistics (Andrea Claudi) [1637437]
  - Update kernel headers (Andrea Claudi) [1637437]
  - uapi: update bpf headers (Andrea Claudi) [1637437]
  - Update kernel headers (Andrea Claudi) [1637437]
  - man: Clarify idleslope calculation for tc-cbs (Andrea Claudi) [1557461]
  - man: Add initial manpage for tc-cbs(8) (Andrea Claudi) [1557461]
  - tc: Add support for the CBS qdisc (Andrea Claudi) [1557461]
  - nstat: print useful error messages in abort() cases (Andrea Claudi) [1792908]


author: Jakub Čajka <jcajka@redhat.com> - 2.4.8-1
changelog:
  - Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le
  - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format


author: Sinny Kumari <skumari@redhat.com> - 2.4.11.1-1
changelog:
  - Resolves: #1274367 - [7.3 FEAT] iprutils package update
  - Resolves: #1297921 - IPR: Raid migration fails to kick while executing through command line


author: Sinny Kumari <skumari@redhat.com> - 2.4.12.1-1
changelog:
  - Resolves: #1364131 - Integrate various important bug fixes for iprutils in
    RHEL7.3 by updating iprutils to 2.4.12


author: Sinny Kumari <skumari@redhat.com> - 2.4.16.1-1
changelog:
  - Resolves: #1587834 - vpdupdate takes over an hour on system with 104 drive
  - Resolves: #1521052 - iprutils package update for POWER
  - Resolves: #1547891 - iprconfig unable to Download microcode on all applicable devices
  - Resolves: #1576013 - iprconfig tools shows wrong error message, while creating raid using RI SSDs and normal SSDs


author: Thomas Woerner <twoerner@redhat.com> - 6.19-5
changelog:
  - New service sub package to provide the ipset service (RHBZ#1136257)
    Service and start-stop script from F-24
  - Fixed ipset package summary (RHBZ#1195171)
    Spec file derived from F-24


author: Thomas Woerner <twoerner@redhat.com> - 6.19-6
changelog:
  - Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
  - Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
  - No save on reload, but legacy save action (RHBZ#1136257)


author: Thomas Woerner <twoerner@redhat.com> - 6.29-1
changelog:
  - Rebase to 6.29 (RHBZ#1351299)
  - Fixes:
    - Backport ipset capability to run in namespaces (RHBZ#1226051)
    - Fix service save with empty ipset list and existing ipset save file
      (RHBZ#1377621)
    - Fix internal error at printing to output buffer (RHBZ#1395865)


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-1
changelog:
  - Rebase to 6.38 (RHBZ#1557600):
    - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
  - Refactor /etc/sysconfig/ipset.start-stop
  - Fixes:
    - IPSet Service Monolithic Operation (RHBZ#1440741)
    - "systemctl start ipset" doesn't handle existing ipset's having counters
      (RHBZ#1502212)


author: Stefano Brivio <sbrivio@redhat.com> - 7.1-1
changelog:
  - Rebase to 7.1 (RHBZ#1649080):
    - Add compatibility support for strscpy()
    - Correct the manpage about the sort option
    - Add missing functions to libipset.map
    - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych)
    - Implement sorting for hash types in the ipset tool
    - Fix to list/save into file specified by option (reported by Isaac Good)
    - Introduction of new commands and protocol version 7, updated kernel include files
    - Add compatibility support for async in pernet_operations
    - Use more robust awk patterns to check for backward compatibility
    - Prepare the ipset tool to handle multiple protocol version
    - Fix warning message handlin
    - Correct to test null valued entry in hash:net6,port,net6 test
    - Library reworked to support embedding ipset completely
    - Add compatibility to support kvcalloc()
    - Validate string type attributes in attr2data() (Stefano Brivio)
    - manpage: Add comment about matching on destination MAC address (Stefano Brivio)
      (RHBZ#1649079)
    - Add compatibility to support is_zero_ether_addr()
    - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649073)
    - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649073)
    - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649073)
    - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) 
  - Fixes:
    - Fix all shellcheck warnings in init script (RHBZ#1649073)
    - Make error reporting consistent, introduce different severities (RHBZ#1649877)
    - While restoring, on invalid entries, remove them and retry (RHBZ#1650297)
    - Fix covscan SC2166 warning in init script (RHBZ#1649073)
    - Hardcode triggerin, triggerun versions for ipset-service (RHBZ#1646666)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-14
changelog:
  - Add cgroup support (RHBZ#1058660)
  - Add wait seonds support for commands (RHBZ#1156411)
  - Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
  - Add message for init script error returns (RHBZ#1200415)
  - Use flock for wait option (RHBZ#1202435)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-16
changelog:
  - Fix important coverity findings: missing include for flock and use bash for
    init script (RHBZ#1264399)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-17
changelog:
  - Fixed init script not to fail on missing restorecon (RHBZ#1246380)
  - Adapted man page snipplet for TRACE to use proper logging backend names
    (RHBZ#1261238)
  - Warn about use of DROP in nat table (RHBZ#1298879)
  - Fixed modules unload in init script (RHBZ#1324102)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-18
changelog:
  - Add support for --wait options to restore commands (RHBZ#1438597)
  - Do not set changed flag for rule check operations with module targets
    (RHBZ#1438597)
  - Add version option to restore commands (RHBZ#1438597)


author: Phil Sutter - 1.4.21-18.2
changelog:
  - Prevent iptables.service and ip6tables.service from running in parallel
    (RHBZ#1491963)
  - Don't restart services upon upgrade (RHBZ#1491961)


author: Phil Sutter - 1.4.21-20
changelog:
  - Prevent iptables.service and ip6tables.service from running in parallel
    (RHBZ#1486803)
  - Don't restart services upon upgrade (RHBZ#1380141)


author: Phil Sutter - 1.4.21-25
changelog:
  - Fix for stopping iptables and ip6tables at the same time (RHBZ#1560012)
  - Propagate errors on service stop (RHBZ#1560012)


author: Phil Sutter - 1.4.21-27
changelog:
  - libxt_tcpmss: Detect invalid ranges (RHBZ#1128510)
  - ip(6)tables-save/restore: Exit if invalid option was given (RHBZ#1465078)
  - ip(6)tables-save/restore: Require value to -W option (RHBZ#1465078)
  - ip(6)tables-save/restore: Don't accept -W without -w (RHBZ#1465078)
  - Ignore security table when setting policies (RHBZ#1494012)
  - Fix spec file changing SRPM content (RHBZ#1531290)


author: Phil Sutter - 1.4.21-29
changelog:
  - Do not attempt to unload any modules when stopping the firewall (RHBZ#1520534)
  - Fix for covscan warnings (RHBZ#1525980)


author: Phil Sutter <psutter@redhat.com> - 1.4.21-31
changelog:
  - Fix iptables-restore with empty comment in rule (RHBZ#1668475)
  - Fix parsing and printing of -m ipvs --vproto option (RHBZ#1679726)
  - Fix for wrong location of devgroup definition file (RHBZ#1657075)
  - Fix for non-numeric devgroup name output (RHBZ#1657075)
  - Reject negative realm values (RHBZ#1657075)


author: Phil Sutter <psutter@redhat.com> - 1.4.21-34
changelog:
  - Fix iptables-restore for rules with '-' and 't' in comments (RHBZ#1749700)
  - Make services start before network-pre.target is reached (RHBZ#1736765)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-7
changelog:
  - ping hung when it cannot receive echo reply (#1362463)
  - arping documentation inconsistency (#1351704)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-9
changelog:
  - IPv4 vs IPv6 inconsistency on return value of ping (#1362388)
  - ping6 does not use device specified with -I parameter (#1371824, #1424965)
  - double cap_free call in ping_common.c (#1410114)
  - ping assumes EACCESS errors are due to broadcast addresses (#1387315)
  - ping -t with multicast address without effect on ppc64 (#1373333)
  - arping -c <n> does not exit when the device is deleted (#1387542)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-6.gitc4bce43.el7
changelog:
  - ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
  - ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
  - ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
  - Resolves: bz#1084561
    (RFE: ship UEFI drivers for ipxe in RHEL-7.y)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-2.git6366fa7a.el7
changelog:
  - ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
  - Resolves: bz#1350167
    (ipxe: enable IPV6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-3.git6366fa7a.el7
changelog:
  - ipxe-Add-pci_find_next_capability.patch [bz#1242850]
  - ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
  - ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
  - ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
  - ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
  - ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
  - Resolves: bz#1242850
    (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-4.git6366fa7a.el7
changelog:
  - ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
  - ipxe-enable-e1000e-rom.patch [bz#1361534]
  - Resolves: bz#1322056
    (ipxe freeze during HTTP download with last RPM)
  - Resolves: bz#1361534
    (RFE: Integrate e1000e implementation in downstream QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-5.git6366fa7a.el7
changelog:
  - ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
  - Resolves: bz#1316329
    ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170123-2.git4e85b27.el7
changelog:
  - ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1467887]
  - Resolves: bz#1467887
    (iommu platform support for ipxe)


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-6
changelog:
  - 1507945 force start iscsiuio for boot session recovery with qedi
  - 1457359 start systemd socket listeners, otherwise if iscsid is started
    directly iscsiuio doesn't activate as expected


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-12
changelog:
  - 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
  - 1624670 Login negotiation failed due to CHAP_N values do not match
            (rec update race condition)


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-17
changelog:
  - 1518367 boot from iSCSI not establishing all sessions persistently
  - 1667965 A manual restart of iscsi.service modifies records node.startup value


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-18
changelog:
  - 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)


author: Herton R. Krzesinski <herton@redhat.com> - 20190516-94.git711d3297
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
  - Pull new version of Netronome firmware (rhbz 1663989)
  - Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
  - Update Netronome firmware that include bug fixes (rhbz 1673890)
  - Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)


author: Bruno Meneguele <bmeneg@redhat.com> - 20191202-95.gite8a0f4c9
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
  - Update bnx2x firmware to latest upstream (rhbz 1720395)
  - AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
  - Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
  - Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
  - Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
  - DDP Package to support Columbiaville NIC (rhbz 1726454)
  - Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
  - Change install section to use usptream installation process


author: Frantisek Hrbata <fhrbata@redhat.com> - 20200512-98.gitb2cad6a2
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
  - Update bnx2x firmware to latest upstream (rhbz 1791031)
  - Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
  - Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)


author: Jan Stancek <jstancek@redhat.com> - 20201022-100.gitdae4b4cd
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - ice: Pull Comms Market Segment Package (rhbz 1861491)
  - ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)


author: Jan Stancek <jstancek@redhat.com> - 20201118-101.git7455a360
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
  - Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)


author: Rafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - netr: Add Netronome TC flower firmware (rhbz 1518900)
  - Revert amd-ucode for fam17h (rhbz 1533945)


author: Rafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311
changelog:
  - nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
  - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cf
changelog:
  - Update to latest upstream linux-firmware image for assorted netdrv updates
  - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - amd: update microcode for family 15h (rhbz 1574575)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab
changelog:
  - Update to latest upstream linux-firmware image for assorted netdrv updates
  - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - nvidia: update firmware for Pascal GPUs (rhbz 1625514)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31
changelog:
  - cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610)
  - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996)
  - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148)
  - qed: Add 8.37.7.0 firmware image (rhbz 1654809)
  - liquidio: fix GPL compliance issue (rhbz 1622521)
  - Update Intel OPA hfi1 firmware (rhbz 1637240)
  - qed: Add firmware 8.37.7.0 (rhbz 1643554)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
  - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)


author: Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b
changelog:
  - Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
  - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
  - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package


author: Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update bnx2x firmware to latest upstream (rhbz 1720386)


author: Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171211)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)


author: Josef Ridky <jridky@redhat.com> - 1.900.1-30
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.16.1
changelog:
  - Bump to 2.6.16 and u201b00.
  - Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.17pre01.0
changelog:
  - Bump to 2.6.17pre01.
  - Add support for icedtea_snapshot so we can build pre-releases.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.211-2.6.17.1
changelog:
  - Bump to 2.6.17.
  - Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
  - Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.211-2.6.17.2
changelog:
  - Synchronise Requires with java-1.8.0-openjdk
  - Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
  - Add libjavagtk.so and libmawt.so to _privatelibs
  - Remove duplicate fontconfig build requirement
  - Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
  - Add _isa to NSS requirements
  - Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
  - Resolves: rhbz#1608957


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.231-2.6.19.1
changelog:
  - Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
  - Fix fsg.sh to fail if patching fails.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.241-2.6.20.0
changelog:
  - Bump to 2.6.20 and OpenJDK 7u241-b01.
  - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.241-2.6.20.1
changelog:
  - Bump to 2.6.20 and OpenJDK 7u241-b01.
  - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Drop JDK-8226318/RH1738637 which is now included upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.261-2.6.22.1
changelog:
  - Add release notes from IcedTea.
  - Mark license files with appropriate macro.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1
changelog:
  - Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions
  - Yet another cast to resolve s390 ambiguity in call to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b01.
  - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575.
  - Drop 8171000, 8197546 & PR3634 as applied upstream.
  - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b02.
  - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100).
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b03.
  - Set milestone to "ea" as this is not the final release.
  - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u.
  - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes.
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1
changelog:
  - Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately.
  - Drop unused use_shenandoah_hotspot variable.
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
  - Resolves: rhbz#1724452


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2
changelog:
  - Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
  - Don't perform a bootcycle build for the debug variant build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b08.
  - Adjust PR3083/RH134640 to apply after JDK-8182999
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2
changelog:
  - Provide Javadoc debug subpackages for now, but populate them from the normal build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2
changelog:
  - Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b01.
  - Switch to EA mode.
  - Drop JDK-8210761/RH1632174 as now upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05.
  - Drop upstreamed patch JDK-8141570/PR3548.
  - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
  - Update version logic to handle -shenandoah* tag suffix.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b09.
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Mark net.properties as a config file (based on Fedora patch by James Cassell)
  - Resolves: rhbz#1710928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve.
  - Regenerate source tarball using the updated script and add the -'4curve' suffix.
  - Resolves: rhbz#1746874


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5
changelog:
  - Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b03.
  - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
  - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea
changelog:
  - Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b06.
  - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea
changelog:
  - Include a test in the RPM to check the build has the correct vendor information.
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Improve quoting of vendor name
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u272 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Delay tzdata 2020b dependency until tzdata update has shipped.
  - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
  - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1
changelog:
  - Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea
changelog:
  - Added patch600: rh1750419-redhat_alt_java.patch
  - Replaced alt-java placeholder with real patched alt-java
  - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Both surpassed by new patch
  - Resolves: rhbz#1901690


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea
changelog:
  - Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
  - Resolves: rhbz#1901690


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b02 (EA)
  - Update release notes for 8u282-b02.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b03 (EA)
  - Update release notes for 8u282-b03.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b04 (EA)
  - Update release notes for 8u282-b04.
  - Remove upstreamed patch PR3519
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b05 (EA)
  - Update release notes for 8u282-b05 and make some minor corrections.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b06 (EA)
  - Update release notes for 8u282-b06.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b07 (EA)
  - Update release notes for 8u282-b07.
  - Fix placement issue in release notes, caught by comparing with vanilla version.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b08 (GA)
  - Update release notes for 8u282-b08.
  - This tarball is embargoed until 2021-01-19 @ 1pm PT.
  - Resolves: rhbz#1908963


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b04 (EA)
  - Update release notes for 8u292-b04.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b05 (EA)
  - Update release notes for 8u292-b05.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea
changelog:
  - Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
  - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
  - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b06 (EA)
  - Update release notes for 8u292-b06.
  - Require tzdata 2020f due to JDK-8259048
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b07 (EA)
  - Update release notes for 8u292-b07.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b08 (EA)
  - Update release notes for 8u292-b08.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b09 (EA)
  - Update release notes for 8u292-b09.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  - Update release notes for 8u292-b10.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b01 (EA)
  - Update release notes for 8u312-b01.
  - Switch to EA mode.
  - Remove "-clean" suffix as no 8u312 builds are unclean.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b02 (EA)
  - Update release notes for 8u312-b02.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b03 (EA)
  - Update release notes for 8u312-b03.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b04 (EA)
  - Update release notes for 8u312-b04.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05 (EA)
  - Update release notes for 8u312-b05.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
  - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
  - Resolves: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.ea
changelog:
  - Add patch to improve performance of common separators in Scanner.useLocale
  - Move alt-java patch to correct section.
  - Resolves: rhbz#1862929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b07 (EA)
  - Update release notes for 8u312-b07.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
  - Update release notes for 8u322-b04.
  - Require tzdata 2021c as of JDK-8274407.
  - Switch to EA mode.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Related: rhbz#2022809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+6
  - Update release notes to 11.0.12.0+6
  - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
  - Resolves: rhbz#1967811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0
changelog:
  - Update to jdk-11.0.12.0+7
  - Update release notes to 11.0.12.0+7
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Related: rhbz#1999936


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.13.0+1
  - Update release notes to 11.0.13.0+1
  - Update tarball generation script to use git following OpenJDK 11u's move to github
  - Switch to EA mode for 11.0.13 pre-release builds.
  - Remove non-Free test from source tarball.
  - Related: rhbz#1999936


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1
changelog:
  - Update to jdk-11.0.12.0+8
  - Update release notes to 11.0.12.0+8
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2012332


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.ea
changelog:
  - Replaced hardcoded 11 by featurever where appropriate
  - Fixed comment of `for slowdebug` to correct `any debug`
  - Related: rhbz#2022810


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.14.0+8
  - Update release notes to 11.0.14.0+8
  - Switch to EA mode for 11.0.14 pre-release builds.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Rename blacklisted.certs to blocked.certs following JDK-8253866
  - Resolves: rhbz#2022810


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1
changelog:
  - Update to jdk-11.0.14.0+9
  - Update release notes to 11.0.14.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-01-18 @ 1pm PT.
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-1
changelog:
  - Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
  - Make tagsuffix optional and comment it out while unused.
  - Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
  - Drop JDK-8209639/RH1640127 applied upstream.
  - Re-generate JDK-8210416/RH1632174 following JDK-8209786
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-4
changelog:
  - Replace pcsc-lite-devel with pcsc-lite-libs so deps can be resolved without optional repository
  - Add JDK-8009550/RH910107 patch so OpenJDK checks for libpcsclite.so.1 (in pcsc-lite-libs)
  - Add missing ISA to cups-libs requirement
  - Remove duplicate lksctp-tools requirement
  - Resolves: rhbz#1684617


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.3.6-1
changelog:
  - Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
  - Drop JDK-8210416/RH1632174 applied upstream.
  - Drop JDK-8210425/RH1632174 applied upstream.
  - Drop JDK-8210647/RH1632174 applied upstream.
  - Drop JDK-8210761/RH1632174 applied upstream.
  - Drop JDK-8210703/RH1632174 applied upstream.
  - Resolves: rhbz#1677516


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.4.11-1
changelog:
  - Update to shenandoah-jdk-11.0.4+11 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.1-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.5+1 (EA)
  - Switch to EA mode for 11.0.5 pre-release builds.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-0
changelog:
  - Update to shenandoah-jdk-11.0.5+10 (GA)
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.6+1 (EA)
  - Switch to EA mode for 11.0.6 pre-release builds.
  - Add support for jfr binary.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-0
changelog:
  - Update to shenandoah-jdk-11.0.6+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-3
changelog:
  - Add JDK-8237396 backport to resolve Shenandoah TCK breakage in traversal mode.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.7.10-0
changelog:
  - Update to shenandoah-jdk-11.0.7+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: seanwxiang <seanwxiang@tencent.com> - 1:8.0.6-3.1.292
changelog:
  - Update to jdk-8u292
  - AppCDS Enhancement
  - Kona CPU Share Scale
  - Optimization for G1GC
  - Remove TencentSMProvider


author: tobytbzhang <tobytbzhang@tencent.com> - 1:8.0.8-1.1.312
changelog:
  - Update to jdk-8u312
  - Vectorize UTF-8 decode
  - Support asynchronous GC logging
  - JDK-8175318: Performance issue regarding local JNI references
  - JDK-8183369: RFC unconformity of HttpURLConnection with proxy
  - Revert CMSParallelFullGC
  - Revert ArrayAllocationWarningSize


author: seanwxiang <seanwxiang@tencent.com> - 1:8.0.9-1.1.322
changelog:
  - Update to jdk-8u322
  - Vectorize UTF-8 encode
  - Fix: FreeHeapPhysicalMemory period check use wrong time unit


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-3
changelog:
  - Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data (cfu)
  - Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.6-2
changelog:
  - Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-2
changelog:
  - Bugzilla #1747967 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-3
changelog:
  - Bugzilla #1710105 - JSS: add RSA PSS support (jmagne)
  - Bugzilla #1796642 - JSS -- remove hardcoded native library
    /usr/lib{64}/jss/libjss4.so (ascheel)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14
changelog:
  - Replace CtrlL_Lock with Caps_Lock in generated us.map
    Resolves: #1441411
  - Improve man pages and usage messages quality and consistency
    Resolves: #949015


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-8
changelog:
  - Powerdevil: do not notify about a non existent action
    Resolves: bz#1289149
  - Plasma taskmanager: close context menu when task is closed
    Resolves: bz#1262603


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-10
changelog:
  - Fix grouping of tasks in taskmanager applet
    Resolves: bz#1348917
  - Fix unlocking of kscreenlocker, unlock it just once
    Resolves: bz#1333441


author: Jan Grulich <jgrulich@redhat.com> - 4.11-19-13
changelog:
  - Sanitise notification HTML
    Resolves: bz#1568853

  - Increase cpu buffer size in ksysguard
    Resolves: bz#1611762


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-14
changelog:
  - Do not show disabled buttons in Plastik decoration theme
    Resolves: bz#1677641

  - Taskmanager: dismiss group when application is closed and there is enough space
    Resolve: bz#1698048


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-10
changelog:
  - Avoid duplicates in solid device automounter kcm
    Resolves: bz#1084191
  - Enable automount overrides even when automatic mounting is disabled
    Resolves: bz#1084497


author: Jan Grulich <jgrulich@redhat.com> - 19-23.9
changelog:
  - Check if we have write access to home directory before creating default folders
    Resolves: bz#1579764


author: Jan Grulich <jgrulich@redhat.com> - 19-23.11
changelog:
  - Do not fail when HOME is defined as multiwords
    Resolves: bz#1786089

  - Do not fail when prelink is not installed or disabled
    Resolves: bz#1732607


author: Jan Grulich <jgrulich@redhat.com> - 19-23.11
changelog:
  - Do not fail when prelink is not installed or disabled (fixed syntax
    error in previous patch)
    Resolves: bz#1732607


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-9
changelog:
  - Do not fork konsole process when opening terminal from apps using dolphin-part
    Resolves: bz#1710362


author: Init by Xiaoming Gao <newtongao@tencent.com>
changelog:
  - 2019-07-25 [ Xiaoming Gao  ]  config: open more ipv6 configs
  - 2019-07-23 [ Liu Yu  ]  extra_modules: Add module kvdo
  - 2019-07-23 [ Liu Yu  ]  extra_modules: Add module bnxt
  - 2019-07-23 [ Liu Yu  ]  build: Add extra modules build support
  - 2019-07-22 [ Xiaoming Gao  ]  Makefile: modify EXTRA_VERSION to 19
  - 2019-07-19 [ Xiaoming Gao  ]  package: auto generate changelog use git log command
  - 2019-07-19 [ Xiaoming Gao  ]  config: open CONFIG_PVPANIC as module
  - 2019-07-19 [ Xiaoming Gao  ]  kernel/panic:  set crash_kexec_post_notifiers default to true
  - 2019-07-17 [ Xiaoming Gao  ]  kpatch: add kpatch core files
  - 2019-07-12 [ Xiaoming Gao  ]  add .gitignore
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_BLK_DEV_RAM as module
  - 2019-07-12 [ Zhiping du  ]  tcp: add tcp_min_snd_mss sysctl
  - 2019-07-12 [ Zhiping du  ]  tcp: tcp_fragment() should apply sane memory limits
  - 2019-07-12 [ Zhiping du  ]  tcp: limit payload size of sacked skbs
  - 2019-07-12 [ Fuhai Wang  ]  sched: fix poor performace on kvm guest
  - 2019-07-12 [ Jan Kiszka  ]  x86/apic: Install an empty physflat_init_apic_ldr
  - 2019-07-12 [ Xiaoming Gao  ]  spec: generate vmlinuz hmac file
  - 2019-07-12 [ Xiaoming Gao  ]  config: set CONFIG_LEGACY_PTY_COUNT default to 0
  - 2019-07-12 [ kaixuxia  ]  tkernel: add the kpatch kmod support
  - 2019-07-12 [ kaixuxia  ]  arm64: implement ftrace with regs by using patchable-function-entry
  - 2019-07-12 [ kaixuxia  ]  arm64/gcc: Fix the net compile error when using gcc 8.3.0
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_BNXT as module
  - 2019-07-12 [ brookxu  ]  memcg: fix bug of null pointer accessed when unregister event
  - 2019-07-12 [ wenbinzeng  ]  auth_gss fix: rpcsec_gss_exit_net has no chance to run when use-gss-proxy==1
  - 2019-07-12 [ herberthbli  ]  net: resolve clash for matching conntracks
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_AMD_IOMMU
  - 2019-07-12 [ Jia Wang  ]  NBD: remove invalid reread of partition info
  - 2019-07-12 [ Xiaoming Gao  ]  config: oepn CONFIG_EXT2_FS_XATTR and CONFIG_EXT4_ENCRYPTION
  - 2019-07-12 [ samuelliao  ]  iommu/amd: Support AMD platform with more than 255 CPU
  - 2019-07-12 [ herberthbli  ]  net: update i40evf drv to 3.6.15
  - 2019-07-12 [ herberthbli  ]  net: update i40e drv to 2.7.29
  - 2019-07-12 [ Wang Fuhai  ]  vfio: set vfio config on
  - 2019-07-12 [ chen xiaoguang  ]  memory cgroup: fix memory and swap calculation error
  - 2019-07-12 [ kaixuxia  ]  xfs: validate sb_logsunit is a multiple of the fs blocksize
  - 2019-07-12 [ Songqiao Tao  ]  package: update rpm scripts for kernel installation, upgrade and uninstallation
  - 2019-07-12 [ Lei Chen  ]  driver: fix mpt3sas driver Makefile bug
  - 2019-07-12 [ Songqiao Tao  ]  package: update package name and config for x86_64
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_UNWINDER_FRAME_POINTER
  - 2019-07-12 [ Xiaoming Gao  ]  kernel: open CONFIG_LIVEPATCH
  - 2019-07-12 [ Chandu-babu Namburu  ]  Add AMD Rome RAS feature support
  - 2019-07-12 [ Chandu Babu N  ]  Add AMD Rome CPU/Cache Topology support
  - 2019-07-12 [ Xiaoming Gao  ]  ip_vs: fix tunnel_df_force_zero's data
  - 2019-07-12 [ Xiaoming Gao  ]  kernel: remove no retpoline warnings
  - 2019-07-12 [ Lei Chen  ]  mpt3sas: update driver from 15.100.00.00 to 26.00.00.00
  - 2019-07-12 [ Xiaoming Gao  ]  Makefile: update kernel version to 4.14.105
  - 2019-07-12 [ Andy Lutomirski  ]  x86/uaccess: Don't leak the AC flag into __put_user() value evaluation
  - 2019-07-12 [ Paul Burton  ]  MIPS: eBPF: Fix icache flush end address
  - 2019-07-12 [ Michael Clark  ]  MIPS: fix truncation in __cmpxchg_small for short values
  - 2019-07-12 [ Jann Horn  ]  mm: enforce min addr even if capable() in expand_downwards()
  - 2019-07-12 [ BOUGH CHEN  ]  mmc: sdhci-esdhc-imx: correct the fix of ERR004536
  - 2019-07-12 [ Takeshi Saito  ]  mmc: tmio: fix access width of Block Count Register
  - 2019-07-12 [ Sergei Shtylyov  ]  mmc: tmio_mmc_core: don't claim spurious interrupts
  - 2019-07-12 [ Jonathan Neuschäfer  ]  mmc: spi: Fix card detection during probe
  - 2019-07-12 [ Seth Forshee  ]  powerpc: Always initialize input array when calling epapr_hypercall()
  - 2019-07-12 [ Vitaly Kuznetsov  ]  KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1
  - 2019-07-12 [ Suravee Suthikulpanit  ]  svm: Fix AVIC incomplete IPI emulation
  - 2019-07-12 [ Chaitanya Tata  ]  cfg80211: extend range deviation for DMG
  - 2019-07-12 [ Mathieu Malaterre  ]  mac80211: Add attribute aligned(2) to struct 'action'
  - 2019-07-12 [ Balaji Pothunoori  ]  mac80211: don't initiate TDLS connection if station is not associated to AP
  - 2019-07-12 [ Thomas Falcon  ]  ibmveth: Do not process frames after calling napi_reschedule
  - 2019-07-12 [ Maciej Żenczykowski  ]  net: dev_is_mac_header_xmit() true for ARPHRD_RAWIP
  - 2019-07-12 [ Zhang Run  ]  net: usb: asix: ax88772_bind return error when hw_reset fail
  - 2019-07-12 [ Haiyang Zhang  ]  hv_netvsc: Fix ethtool change hash key error
  - 2019-07-12 [ Atsushi Nemoto  ]  net: altera_tse: fix connect_local_phy error path
  - 2019-07-12 [ Varun Prakash  ]  scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state()
  - 2019-07-12 [ Tejun Heo  ]  writeback: synchronize sync(2) against cgroup writeback membership switches
  - 2019-07-12 [ Ernesto A. Fernández  ]  direct-io: allow direct writes to empty inodes
  - 2019-07-12 [ Liam Mark  ]  staging: android: ion: Support cpu access during dma_buf_detach
  - 2019-07-12 [ Tomonori Sakita  ]  serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling
  - 2019-07-12 [ Kenneth Feng  ]  drm/amd/powerplay: OD setting fix on Vega10
  - 2019-07-12 [ Xie Yongji  ]  locking/rwsem: Fix (possible) missed wakeup
  - 2019-07-12 [ Peter Zijlstra  ]  futex: Fix (possible) missed wakeup
  - 2019-07-12 [ Prateek Sood  ]  sched/wait: Fix rcuwait_wake_up() ordering
  - 2019-07-12 [ Bob Copeland  ]  mac80211: fix miscounting of ttl-dropped frames
  - 2019-07-12 [ Nathan Chancellor  ]  staging: rtl8723bs: Fix build error with Clang when inlining is disabled
  - 2019-07-12 [ Aaron Hill  ]  drivers: thermal: int340x_thermal: Fix sysfs race condition
  - 2019-07-12 [ Eugeniy Paltsev  ]  ARC: fix __ffs return value to avoid build warnings
  - 2019-07-12 [ Geert Uytterhoeven  ]  selftests: gpio-mockup-chardev: Check asprintf() for error
  - 2019-07-12 [ Fathi Boudra  ]  selftests: seccomp: use LDLIBS instead of LDFLAGS
  - 2019-07-12 [ Silvio Cesare  ]  ASoC: imx-audmux: change snprintf to scnprintf for possible overflow
  - 2019-07-12 [ Silvio Cesare  ]  ASoC: dapm: change snprintf to scnprintf for possible overflow
  - 2019-07-12 [ Srinivas Ramana  ]  genirq: Make sure the initial affinity is not empty
  - 2019-07-12 [ Dan Carpenter  ]  usb: gadget: Potential NULL dereference on allocation error
  - 2019-07-12 [ Zeng Tao  ]  usb: dwc3: gadget: Fix the uninitialized link_state when udc starts
  - 2019-07-12 [ Bo He  ]  usb: dwc3: gadget: synchronize_irq dwc irq in suspend
  - 2019-07-12 [ Dan Carpenter  ]  thermal: int340x_thermal: Fix a NULL vs IS_ERR() check
  - 2019-07-12 [ Marek Vasut  ]  clk: vc5: Abort clock configuration without upstream clock
  - 2019-07-12 [ Yizhuo  ]  ASoC: Variable "val" in function rt274_i2c_probe() could be uninitialized
  - 2019-07-12 [ Dan Carpenter  ]  ALSA: compress: prevent potential divide by zero bugs
  - 2019-07-12 [ Rander Wang  ]  ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field
  - 2019-07-12 [ Kristian H. Kristensen  ]  drm/msm: Unblock writer if reader closes file
  - 2019-07-12 [ John Garry  ]  scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached
  - 2019-07-12 [ Jose Abreu  ]  net: stmmac: Disable ACS Feature for GMAC >= 4
  - 2019-07-12 [ Florian Fainelli  ]  net: stmmac: Fix reception of Broadcom switches tags
  - 2019-07-12 [ Greg Kroah-Hartman  ]  Revert "loop: Fold __loop_release into loop_release"
  - 2019-07-12 [ Greg Kroah-Hartman  ]  Revert "loop: Get rid of loop_index_mutex"
  - 2019-07-12 [ Greg Kroah-Hartman  ]  Revert "loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()"
  - 2019-07-12 [ Russell King  ]  net: phylink: avoid resolving link state too early
  - 2019-07-12 [ Matthias Kaehlcke  ]  sched/sysctl: Fix attributes of some extern declarations
  - 2019-07-12 [ Colin Ian King  ]  phy: tegra: remove redundant self assignment of 'map'
  - 2019-07-12 [ Nathan Chancellor  ]  pinctrl: max77620: Use define directive for max77620_pinconf_param values
  - 2019-07-12 [ Eli Cooper  ]  netfilter: ipv6: Don't preserve original oif for loopback address
  - 2019-07-12 [ Pablo Neira Ayuso  ]  netfilter: nft_compat: use-after-free when deleting targets
  - 2019-07-12 [ Pablo Neira Ayuso  ]  netfilter: nf_tables: fix flush after rule deletion in the same batch
  - 2019-07-12 [ Hangbin Liu  ]  Revert "bridge: do not add port to router list when receives query with source 0.0.0.0"
  - 2019-07-12 [ Willem de Bruijn  ]  net: avoid false positives in untrusted gso validation
  - 2019-07-12 [ Willem de Bruijn  ]  net: validate untrusted gso packets without csum offload
  - 2019-07-12 [ Chris Wilson  ]  drm/i915/fbdev: Actually configure untiled displays
  - 2019-07-12 [ Alexey Brodkin  ]  ARC: define ARCH_SLAB_MINALIGN = 8
  - 2019-07-12 [ Eugeniy Paltsev  ]  ARC: U-boot: check arguments paranoidly
  - 2019-07-12 [ Eugeniy Paltsev  ]  ARCv2: Enable unaligned access in early ASM code
  - 2019-07-12 [ Dmitry V. Levin  ]  parisc: Fix ptrace syscall number modification
  - 2019-07-12 [ Eric Biggers  ]  KEYS: always initialize keyring_index_key::desc_len
  - 2019-07-12 [ Eric Biggers  ]  KEYS: user: Align the payload buffer
  - 2019-07-12 [ Bart Van Assche  ]  RDMA/srp: Rework SCSI device reset handling
  - 2019-07-12 [ Konstantin Khlebnikov  ]  inet_diag: fix reporting cgroup classid and fallback to priority
  - 2019-07-12 [ Saeed Mahameed  ]  net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames
  - 2019-07-12 [ Hangbin Liu  ]  sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()
  - 2019-07-12 [ Cong Wang  ]  team: avoid complex list operations in team_nl_cmd_options_set()
  - 2019-07-12 [ Xin Long  ]  sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment
  - 2019-07-12 [ Russell King  ]  net: sfp: do not probe SFP module before we're attached
  - 2019-07-12 [ Kal Conley  ]  net/packet: fix 4gb buffer limit due to overflow check
  - 2019-07-12 [ Tonghao Zhang  ]  net/mlx5e: Don't overwrite pedit action when multiple pedit used
  - 2019-07-12 [ Li RongQing  ]  ipv6: propagate genlmsg_reply return code
  - 2019-07-12 [ Eric Dumazet  ]  batman-adv: fix uninit-value in batadv_interface_tx()
  - 2019-07-12 [ Nathan Chancellor  ]  isdn: avm: Fix string plus integer warning from Clang
  - 2019-07-12 [ Tariq Toukan  ]  net/mlx5e: Fix wrong (zero) TX drop counter indication for representor
  - 2019-07-12 [ Ido Schimmel  ]  mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky
  - 2019-07-12 [ Peter Oskolkov  ]  bpf: bpf_setsockopt: reset sock dst on SO_MARK changes
  - 2019-07-12 [ Kangjie Lu  ]  leds: lp5523: fix a missing check of return value of lp55xx_read
  - 2019-07-12 [ Cheng-Min Ao  ]  hwmon: (tmp421) Correct the misspelling of the tmp442 compatible attribute in OF device ID table
  - 2019-07-12 [ Colin Ian King  ]  atm: he: fix sign-extension overflow on large shift
  - 2019-07-12 [ Julia Lawall  ]  drm/meson: add missing of_node_put
  - 2019-07-12 [ Talons Lee  ]  always clear the X2APIC_ENABLE bit for PV guest
  - 2019-07-12 [ Manish Rangankar  ]  scsi: qedi: Add ep_state for login completion on un-reachable targets
  - 2019-07-12 [ Stanley Chu  ]  scsi: ufs: Fix system suspend status
  - 2019-07-12 [ Jia-Ju Bai  ]  isdn: i4l: isdn_tty: Fix some concurrency double-free bugs
  - 2019-07-12 [ Jose Abreu  ]  net: stmmac: Fix PCI module removal leak
  - 2019-07-12 [ Yuchung Cheng  ]  bpf: correctly set initial window on active Fast Open sender
  - 2019-07-12 [ Thomas Bogendoerfer  ]  MIPS: jazz: fix 64bit build
  - 2019-07-12 [ Logan Gunthorpe  ]  scsi: isci: initialize shost fully before calling scsi_add_host()
  - 2019-07-12 [ YueHaibing  ]  scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param
  - 2019-07-12 [ Taehee Yoo  ]  netfilter: nf_tables: fix leaking object reference count
  - 2019-07-12 [ Alban Bedel  ]  MIPS: ath79: Enable OF serial ports in the default config
  - 2019-07-12 [ Yonglong Liu  ]  net: hns: Fix use after free identified by SLUB debug
  - 2019-07-12 [ Denis Bolotin  ]  qed: Fix qed_ll2_post_rx_buffer_notify_fw() by adding a write memory barrier
  - 2019-07-12 [ Denis Bolotin  ]  qed: Fix qed_chain_set_prod() for PBL chains with non power of 2 page count
  - 2019-07-12 [ YueHaibing  ]  xen/pvcalls: remove set but not used variable 'intf'
  - 2019-07-12 [ Kangjie Lu  ]  mfd: mc13xxx: Fix a missing check of a register-read failure
  - 2019-07-12 [ Keerthy  ]  mfd: tps65218: Use devm_regmap_add_irq_chip and clean up error path in probe()
  - 2019-07-12 [ Charles Keepax  ]  mfd: wm5110: Add missing ASRC rate register
  - 2019-07-12 [ Jonathan Marek  ]  mfd: qcom_rpm: write fw_version to CTRL_REG
  - 2019-07-12 [ Dien Pham  ]  mfd: bd9571mwv: Add volatile register to make DVFS work
  - 2019-07-12 [ Dan Carpenter  ]  mfd: ab8500-core: Return zero in get_register_interruptible()
  - 2019-07-12 [ Nicolas Boichat  ]  mfd: mt6397: Do not call irq_domain_remove if PMIC unsupported
  - 2019-07-12 [ Nathan Chancellor  ]  mfd: db8500-prcmu: Fix some section annotations
  - 2019-07-12 [ Nathan Chancellor  ]  mfd: twl-core: Fix section annotations on {,un}protect_pm_master
  - 2019-07-12 [ Stefano Stabellini  ]  pvcalls-back: set -ENOTCONN in pvcalls_conn_back_read
  - 2019-07-12 [ Vignesh R  ]  mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells
  - 2019-07-12 [ Eric Biggers  ]  KEYS: allow reaching the keys quotas exactly
  - 2019-07-12 [ Michal Hocko  ]  proc, oom: do not report alien mms when setting oom_score_adj
  - 2019-07-12 [ Ralph Campbell  ]  numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES
  - 2019-07-12 [ Yan, Zheng  ]  ceph: avoid repeatedly adding inode to mdsc->snap_flush_list
  - 2019-07-12 [ Ilya Dryomov  ]  libceph: handle an empty authorize reply
  - 2019-07-12 [ Herbert Xu  ]  mac80211: Free mpath object when rhashtable insertion fails
  - 2019-07-12 [ Rakesh Pillai  ]  mac80211: Restore vif beacon interval if start ap fails
  - 2019-07-12 [ Paul Burton  ]  MIPS: eBPF: Always return sign extended 32b values
  - 2019-07-12 [ Quentin Perret  ]  tracing: Fix number of entries in trace header
  - 2019-07-12 [ Mathieu Desnoyers  ]  ARM: 8834/1: Fix: kprobes: optimized kprobes illegal instruction
  - 2019-07-12 [ Eric Dumazet  ]  ax25: fix possible use-after-free
  - 2019-07-12 [ Eric Dumazet  ]  mISDN: fix a race in dev_expire_timer()
  - 2019-07-12 [ Eric Dumazet  ]  net/x25: do not hold the cpu too long in x25_new_lci()
  - 2019-07-12 [ Scott Mayhew  ]  sunrpc: fix 4 more call sites that were using stack memory with a scatterlist
  - 2019-07-12 [ Eric Dumazet  ]  tcp: clear icsk_backoff in tcp_write_queue_purge()
  - 2019-07-12 [ Alexander Duyck  ]  net: Do not allocate page fragments that are not skb aligned
  - 2019-07-12 [ Eric Dumazet  ]  tcp: tcp_v4_err() should be more careful
  - 2019-07-12 [ David S. Miller  ]  net: Add header for usage of fls64()
  - 2019-07-12 [ Jason Wang  ]  vhost: correctly check the return value of translate_desc() in log_used()
  - 2019-07-12 [ Kai-Heng Feng  ]  sky2: Increase D3 delay again
  - 2019-07-12 [ Alexandre Torgue  ]  net: stmmac: handle endianness in dwmac4_get_timestamp
  - 2019-07-12 [ Jose Abreu  ]  net: stmmac: Fix a race in EEE enable callback
  - 2019-07-12 [ Paul Kocialkowski  ]  net: phy: xgmiitorgmii: Support generic PHY status read
  - 2019-07-12 [ Hauke Mehrtens  ]  net: Fix for_each_netdev_feature on Big endian
  - 2019-07-12 [ Mao Wenan  ]  net: crypto set sk to NULL when af_alg_release.
  - 2019-07-12 [ Petr Machata  ]  mlxsw: __mlxsw_sp_port_headroom_set(): Fix a use of local variable
  - 2019-07-12 [ Wei Yongjun  ]  hwmon: (lm80) Fix missing unlock on error in set_fan_div()
  - 2019-07-12 [ Eric Dumazet  ]  vxlan: test dev->flags & IFF_UP before calling netif_rx()
  - 2019-07-12 [ Paolo Abeni  ]  vsock: cope with memory allocation failure at socket creation time
  - 2019-07-12 [ Lorenzo Bianconi  ]  net: ipv4: use a dedicated counter for icmp_v4 redirect packets
  - 2019-07-12 [ Zhiqiang Liu  ]  net: fix IPv6 prefix route residue
  - 2019-07-12 [ John David Anglin  ]  dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit
  - 2019-07-12 [ Hauke Mehrtens  ]  uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define
  - 2019-07-12 [ Christian Lamparter  ]  pinctrl: msm: fix gpio-hog related boot issues
  - 2019-07-12 [ Thomas Gleixner  ]  futex: Cure exit race
  - 2019-07-12 [ Pavankumar Kondeti  ]  sched, trace: Fix prev_state output in sched_switch tracepoint
  - 2019-07-12 [ Joonas Lahtinen  ]  drm/i915: Prevent a race during I915_GEM_MMAP ioctl with WC set
  - 2019-07-12 [ Nikos Tsironis  ]  dm thin: fix bug where bio that overwrites thin block ignores FUA
  - 2019-07-12 [ Mikulas Patocka  ]  dm crypt: don't overallocate the integrity tag space
  - 2019-07-12 [ Borislav Petkov  ]  x86/a.out: Clear the dump structure initially
  - 2019-07-12 [ Nate Dailey  ]  md/raid1: don't clear bitmap bits on interrupted recovery.
  - 2019-07-12 [ Eric W. Biederman  ]  signal: Restore the stop PTRACE_EVENT_EXIT
  - 2019-07-12 [ Hedi Berriche  ]  x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls
  - 2019-07-12 [ Andreas Ziegler  ]  tracing/uprobes: Fix output for multiple string arguments
  - 2019-07-12 [ Meelis Roos  ]  alpha: Fix Eiger NR_IRQS to 128
  - 2019-07-12 [ Sergei Trofimovich  ]  alpha: fix page fault handling for r16-r18 targets
  - 2019-07-12 [ Sandeep Patil  ]  mm: proc: smaps_rollup: fix pss_locked calculation
  - 2019-07-12 [ Matti Kurkela  ]  Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780
  - 2019-07-12 [ Jonathan Bakker  ]  Input: bma150 - register input device after setting private data
  - 2019-07-12 [ Xiaoyao Li  ]  kvm: vmx: Fix entry number check for add_atomic_switch_msr()
  - 2019-07-12 [ Manuel Reinhardt  ]  ALSA: usb-audio: Fix implicit fb endpoint setup by quirk
  - 2019-07-12 [ Jurica Vukadin  ]  ALSA: hda - Add quirk for HP EliteBook 840 G5
  - 2019-07-12 [ Jiri Olsa  ]  perf/x86: Add check_period PMU callback
  - 2019-07-12 [ Ingo Molnar  ]  perf/core: Fix impossible ring-buffer sizes warning
  - 2019-07-12 [ Mauro Ciancio  ]  Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK
  - 2019-07-12 [ Dmitry Torokhov  ]  Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G"
  - 2019-07-12 [ Ross Lagerwall  ]  cifs: Limit memory used by lock request calls to a page
  - 2019-07-12 [ Ilia Mirkin  ]  drm/nouveau/falcon: avoid touching registers if engine is off
  - 2019-07-12 [ Takashi Iwai  ]  drm/nouveau: Don't disable polling in fallback mode
  - 2019-07-12 [ Nicholas Mc Guire  ]  gpio: pl061: handle failed allocations
  - 2019-07-12 [ Linus Walleij  ]  ARM: dts: kirkwood: Fix polarity of GPIO fan lines
  - 2019-07-12 [ Peter Ujfalusi  ]  ARM: dts: da850-lcdk: Correct the sound card name
  - 2019-07-12 [ Peter Ujfalusi  ]  ARM: dts: da850-evm: Correct the sound card name
  - 2019-07-12 [ Liviu Dudau  ]  nvme-pci: use the same attributes when freeing host_mem_desc_bufs.
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: fix output H/V syncs
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: reject modes which require too much BW
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: fix initial DP0/1_SRCCTRL value
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: fix single lane configuration
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: add defines for DP1_SRCCTRL & PHY_2LANE
  - 2019-07-12 [ Sudeep Holla  ]  cpufreq: check if policy is inactive early in __cpufreq_get()
  - 2019-07-12 [ Arnaldo Carvalho de Melo  ]  perf test shell: Use a fallback to get the pathname in vfs_getname
  - 2019-07-12 [ Chao Fan  ]  ACPI: NUMA: Use correct type for printing addresses on i386-PAE
  - 2019-07-12 [ Daniel Axtens  ]  bnx2x: disable GSO where gso_size is too big for hardware
  - 2019-07-12 [ Daniel Axtens  ]  net: create skb_gso_validate_mac_len()
  - 2019-07-12 [ Russell King  ]  ARM: fix the cockup in the previous patch
  - 2019-07-12 [ Russell King  ]  ARM: ensure that processor vtables is not lost after boot
  - 2019-07-12 [ Russell King  ]  ARM: spectre-v2: per-CPU vtables to work around big.Little systems
  - 2019-07-12 [ Russell King  ]  ARM: add PROC_VTABLE and PROC_TABLE macros
  - 2019-07-12 [ Russell King  ]  ARM: clean up per-processor check_bugs method call
  - 2019-07-12 [ Russell King  ]  ARM: split out processor lookup
  - 2019-07-12 [ Russell King  ]  ARM: make lookup_processor_type() non-__init
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8810/1: vfp: Fix wrong assignement to ufp_exc
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8797/1: spectre-v1.1: harden __copy_to_user
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8796/1: spectre-v1,v1.1: provide helpers for address sanitization
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8795/1: spectre-v1.1: use put_user() for __put_user()
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8794/1: uaccess: Prevent speculative use of the current addr_limit
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8793/1: signal: replace __put_user_error with __put_user
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8792/1: oabi-compat: copy oabi events using __copy_to_user()
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8791/1: vfp: use __copy_to_user() when saving VFP state
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8790/1: signal: always use __copy_to_user to save iwmmxt context
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8789/1: signal: copy registers using __copy_to_user()
  - 2019-07-12 [ Hauke Mehrtens  ]  uapi/if_ether.h: prevent redefinition of struct ethhdr
  - 2019-07-12 [ Jianchao Wang  ]  blk-mq: fix a hung issue when fsync
  - 2019-07-12 [ Adrian Bunk  ]  eeprom: at24: add support for 24c2048
  - 2019-07-12 [ Adrian Bunk  ]  dt-bindings: eeprom: at24: add "atmel,24c2048" compatible string
  - 2019-07-12 [ Linus Torvalds  ]  Revert "exec: load_script: don't blindly truncate shebang string"
  - 2019-07-12 [ Xiubo Li  ]  Revert "uio: use request_threaded_irq instead"
  - 2019-07-12 [ Xiubo Li  ]  uio: fix possible circular locking dependency
  - 2019-07-12 [ Hailong Liu  ]  uio: fix wrong return value from uio_mmap()
  - 2019-07-12 [ Xiubo Li  ]  uio: fix crash after the device is unregistered
  - 2019-07-12 [ Xiubo Li  ]  uio: change to use the mutex lock instead of the spin lock
  - 2019-07-12 [ Xiubo Li  ]  uio: use request_threaded_irq instead
  - 2019-07-12 [ Hamish Martin  ]  uio: Prevent device destruction while fds are open
  - 2019-07-12 [ Hamish Martin  ]  uio: Reduce return paths from uio_write()
  - 2019-07-12 [ Jiri Olsa  ]  perf tests attr: Make hw events optional
  - 2019-07-12 [ Jiri Olsa  ]  perf tests attr: Fix group stat tests
  - 2019-07-12 [ Jiri Olsa  ]  perf tests attr: Fix task term values
  - 2019-07-12 [ Sven Eckelmann  ]  batman-adv: Force mac header to start of data on xmit
  - 2019-07-12 [ Sven Eckelmann  ]  batman-adv: Avoid WARN on net_device without parent in netns
  - 2019-07-12 [ Florian Westphal  ]  xfrm: refine validation of template and selector families
  - 2019-07-12 [ Ilya Dryomov  ]  libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive()
  - 2019-07-12 [ Theodore Ts'o  ]  Revert "ext4: use ext4_write_inode() when fsyncing w/o a journal"
  - 2019-07-12 [ Vladis Dronov  ]  HID: debug: fix the ring buffer implementation
  - 2019-07-12 [ Thomas Hellstrom  ]  drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
  - 2019-07-12 [ Thomas Hellstrom  ]  drm/vmwgfx: Fix setting of dma masks
  - 2019-07-12 [ Tina Zhang  ]  drm/modes: Prevent division by zero htotal
  - 2019-07-12 [ Felix Fietkau  ]  mac80211: ensure that mgmt tx skbs have tailroom for encryption
  - 2019-07-12 [ Marc Gonzalez  ]  ARM: tango: Improve ARCH_MULTIPLATFORM compatibility
  - 2019-07-12 [ Russell King  ]  ARM: iop32x/n2100: fix PCI IRQ mapping
  - 2019-07-12 [ Paul Burton  ]  MIPS: VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds
  - 2019-07-12 [ Aaro Koskinen  ]  MIPS: OCTEON: don't set octeon_dma_bar_type if PCI is disabled
  - 2019-07-12 [ Vladimir Kondratiev  ]  mips: cm: reprime error cause
  - 2019-07-12 [ Andreas Ziegler  ]  tracing: uprobes: Fix typo in pr_fmt string
  - 2019-07-12 [ Greg Kroah-Hartman  ]  debugfs: fix debugfs_rename parameter checking
  - 2019-07-12 [ Tomas Winkler  ]  samples: mei: use /dev/mei0 instead of /dev/mei
  - 2019-07-12 [ Dan Carpenter  ]  misc: vexpress: Off by one in vexpress_syscfg_exec()
  - 2019-07-12 [ Eric W. Biederman  ]  signal: Better detection of synchronous signals
  - 2019-07-12 [ Eric W. Biederman  ]  signal: Always notice exiting tasks
  - 2019-07-12 [ Matt Ranostay  ]  iio: chemical: atlas-ph-sensor: correct IIO_TEMP values to millicelsius
  - 2019-07-12 [ Hans de Goede  ]  iio: adc: axp288: Fix TS-pin handling
  - 2019-07-12 [ Martin Kepplinger  ]  mtd: rawnand: gpmi: fix MX28 bus master lockup problem
  - 2019-07-12 [ LiuHua  ]  cpuset: Compatible with ARM arch
  - 2019-07-12 [ Songqiao Tao  ]  package: update spec, mark kernel rpm of centos as obsolete
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_USER_NS
  - 2019-07-12 [ brookxu  ]  pagecachelimit: page cache reclaim asynchronous
  - 2019-07-12 [ brookxu  ]  pagecachelimit: limit the pagecache ratio of totalram
  - 2019-07-12 [ brookxu  ]  expose taskstats to all netspace
  - 2019-07-12 [ kaixuxia  ]  mounts: add shield mountpoint in container support
  - 2019-07-12 [ kaixuxia  ]  xfs: add kmem_alloc_by_vmalloc and kmem_alloc_large_dump_stack sysctl
  - 2019-07-12 [ Xiaoming Gao  ]  xfs: set xfs default error level to 5
  - 2019-07-12 [ LiuHUa  ]  vm:isolate max_map_count by pid namespace
  - 2019-07-12 [ LiuHUa  ]  wathdog: add symbol info when panic by hard lockup
  - 2019-07-12 [ LiuHUa  ]  ioapic: add pr_info in __assign_irq_vector when vector not assigned
  - 2019-07-12 [ LiuHUa  ]  irq: add more info when interrupt cannot find handler
  - 2019-07-12 [ LiuHUa  ]  cpuset: add loadavg calc for each container
  - 2019-07-12 [ LiuHUa  ]  cpuset: add cpuinfo and stat show
  - 2019-07-12 [ Xiaoming Gao  ]  signal: add print_fatal_signals_src_dst sysctl to switch dump fatal signals from sender side
  - 2019-07-12 [ Lorin Liu  ]  proc: add pid mapping between host and container
  - 2019-07-12 [ chen xiaoguang  ]  memcg: add meminfo and vmstat show
  - 2019-07-12 [ herberthbli  ]  net: namespaceify sysctl_tcp_rmem and sysctl_tcp_wmem
  - 2019-07-12 [ herberthbli  ]  net: allow per netns sysctl_rmem and sysctl_wmem for protos
  - 2019-07-12 [ herberthbli  ]  net: namespaceify sysctl_tcp_workaround_signed_windows
  - 2019-07-12 [ herberthbli  ]  net: namespaceify sysctl_tcp_max_orphans
  - 2019-07-12 [ herberthbli  ]  net: namespaceify sysctl_tcp_no_delay_ack
  - 2019-07-12 [ Xiaoming Gao  ]  package: update spec
  - 2019-07-12 [ Xiaoming Gao  ]  config: open virtulization
  - 2019-07-12 [ Xiaoming Gao  ]  package: add package files
  - 2019-07-12 [ Xiaoming Gao  ]  Makefile: add extra version
  - 2019-07-12 [ Xiaoming Gao  ]  net: add toa support
  - 2019-07-12 [ Xiaoming Gao  ]  xfs: set XFS_BUF_LOCK_TRACKING to 1 as default
  - 2019-07-12 [ Liu Yu  ]  pci: prohibit storage probe delay of virtio block device
  - 2019-07-12 [ Xiaoming Gao  ]  numa: change syctl_numa_balancing_scan_size_mb default value to 0
  - 2019-07-12 [ Xiaoming Gao  ]  pci: add probe delay between two network adapters when network-strict-sort parameter set
  - 2019-07-12 [ Xiaoming Gao  ]  ipmi: set kipmid_max_busy_us default to 1
  - 2019-07-12 [ Shan Wei  ]  tcp: kill the limit for init cwnd
  - 2019-07-12 [ Shan Wei  ]  tcp: fix the bug of tcp hash size tuning down
  - 2019-07-12 [ Xiaoming Gao  ]  conntrack: add netagent extention slot.
  - 2019-07-12 [ Xiaoming Gao  ]  block: check whether queue is NULL or not in stats functions
  - 2019-07-12 [ Xiaoming Gao  ]  hw_ssd: add hw_ssd driver
  - 2019-07-12 [ Samuel Liao  ]  netlink: don't modprobe proto audit & selinux
  - 2019-07-12 [ Shan Wei  ]  tcp: add proc parameter to change init cwnd
  - 2019-07-12 [ Xiaoming Gao  ]  net: add tcp_no_delay_ack to enable absolute quick ack
  - 2019-07-12 [ Xiaoming Gao  ]  tcp: add tcp_loss_init_cwnd sysctl to tunnel packet numbers in loss
  - 2019-07-12 [ Samuel Liao  ]  sched: adaptive default skew_tick value
  - 2019-07-12 [ Samuel Liao  ]  epoll: introduce min_wait_time
  - 2019-07-12 [ Xiaoming Gao  ]  net bridge: add null pointer check,fix panic
  - 2019-07-12 [ Lingling Song  ]  network: Default zero bond_devices to support
  - 2019-07-12 [ Mojiong Qiu  ]  nf_conntrack: adjust nf_conntrack_max default value
  - 2019-07-12 [ Xiaoming Gao  ]  tkernel: control nonpriv bind port below 1024
  - 2019-07-12 [ Xiaoming Gao  ]  tkernel: create top proc & sysctl directory
  - 2019-07-12 [ Mojiong Qiu  ]  Increase dirty-ratio from 20 to 40
  - 2019-07-12 [ Xiaoming Gao  ]  Double the default value of thash_entries
  - 2019-07-12 [ Xiaoming Gao  ]  Backoff the commit allowing timestamps even if SYN packet has tsval=0
  - 2019-07-12 [ Chris Mason  ]  increase defaults for shmmall, shmmax, msgmax and msgmnb
  - 2019-07-12 [ Xiaoming Gao  ]  mpt3sas: sort sas by slot before sas_attach
  - 2019-07-12 [ Xiaoming Gao  ]  backport: add backport_remove_lists.txt
  - 2019-07-12 [ Xiaoming Gao  ]  dmi_probe: disable breadfirst sort of pci device on dmi Vendor "Dell Inc"
  - 2019-07-12 [ Samuel Liao  ]  hpsa: root=cciss/c0d0pX compatiblilty
  - 2019-07-12 [ Xiaoming Gao  ]  dell: AHCI should be loaded before mpt2sas
  - 2019-07-12 [ Samuel Liao  ]  pci: delay 5s to proble multiple storage controllers
  - 2019-07-12 [ Xiaoming Gao  ]  module: change same_magic to be more strictly
  - 2019-07-12 [ Xiaoming Gao  ]  sysrq: fix warning
  - 2019-07-12 [ Xiaoming Gao  ]  sysrq: add ALT+LEFTCTRL to trigger crash dump
  - 2019-07-12 [ Xiaoming Gao  ]  Init Repo base on 4.14.99 long term commit 383e9b61f85cc8e5f1fcb1493d95f826a2fa736e Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Date:   Tue Feb 12 19:46:14 2019 +0100


author: Init by Xiaoming Gao <newtongao@tencent.com>
changelog:
  - 2019-09-05 [ Xiaoming Gao  ]  crash: add compat suffix and set default reserve addr up to max address
  - 2019-09-05 [ Xiaoming Gao  ]  perf: disable --children by default
  - 2019-08-15 [ Xiaoming Gao  ]  tcp: make TCP_RTO_MIN/MAX be tunable
  - 2019-08-15 [ brookxu  ]  dm: add support for blkcg diskstats
  - 2019-08-15 [ brookxu  ]  md: add support for blkcg diskstats
  - 2019-08-15 [ brookxu  ]  blkcg: add per blkcg diskstats
  - 2019-08-15 [ brookxu  ]  cpuacct: get the uptime of container
  - 2019-08-15 [ Xiaoming Gao  ]  perf/amd: Fixed ROME Perf BUG
  - 2019-08-15 [ Xiaoming Gao  ]  x86/mce: Handle varying MCA bank counts
  - 2019-08-15 [ Xiaoming Gao  ]  iommu/amd: Add support for IOMMU XT mode
  - 2019-08-15 [ Xiaoming Gao  ]  iommu/amd: Add support for higher 64 bit IOMMU Control
  - 2019-08-15 [ Xiaoming Gao  ]  x86/irq: remapping Move irq remapping mode enum
  - 2019-08-15 [ Xiaoming Gao  ]  Revert "iommu/amd: Support AMD platform with more than 255 CPU"
  - 2019-08-09 [ Xiaoming Gao  ]  config: open CONFIG_PARAVIRT
  - 2019-08-06 [ Xiaoming Gao  ]  config: open CONFIG_EDAC
  - 2019-07-25 [ Xiaoming Gao  ]  config: open more ipv6 configs
  - 2019-07-23 [ Liu Yu  ]  extra_modules: Add module kvdo
  - 2019-07-23 [ Liu Yu  ]  extra_modules: Add module bnxt
  - 2019-07-23 [ Liu Yu  ]  build: Add extra modules build support
  - 2019-07-22 [ Xiaoming Gao  ]  Makefile: modify EXTRA_VERSION to 19
  - 2019-07-19 [ Xiaoming Gao  ]  package: auto generate changelog use git log command
  - 2019-07-19 [ Xiaoming Gao  ]  config: open CONFIG_PVPANIC as module
  - 2019-07-19 [ Xiaoming Gao  ]  kernel/panic:  set crash_kexec_post_notifiers default to true
  - 2019-07-17 [ Xiaoming Gao  ]  kpatch: add kpatch core files
  - 2019-07-12 [ Xiaoming Gao  ]  add .gitignore
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_BLK_DEV_RAM as module
  - 2019-07-12 [ Zhiping du  ]  tcp: add tcp_min_snd_mss sysctl
  - 2019-07-12 [ Zhiping du  ]  tcp: tcp_fragment() should apply sane memory limits
  - 2019-07-12 [ Zhiping du  ]  tcp: limit payload size of sacked skbs
  - 2019-07-12 [ Fuhai Wang  ]  sched: fix poor performace on kvm guest
  - 2019-07-12 [ Jan Kiszka  ]  x86/apic: Install an empty physflat_init_apic_ldr
  - 2019-07-12 [ Xiaoming Gao  ]  spec: generate vmlinuz hmac file
  - 2019-07-12 [ Xiaoming Gao  ]  config: set CONFIG_LEGACY_PTY_COUNT default to 0
  - 2019-07-12 [ kaixuxia  ]  tkernel: add the kpatch kmod support
  - 2019-07-12 [ kaixuxia  ]  arm64: implement ftrace with regs by using patchable-function-entry
  - 2019-07-12 [ kaixuxia  ]  arm64/gcc: Fix the net compile error when using gcc 8.3.0
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_BNXT as module
  - 2019-07-12 [ brookxu  ]  memcg: fix bug of null pointer accessed when unregister event
  - 2019-07-12 [ wenbinzeng  ]  auth_gss fix: rpcsec_gss_exit_net has no chance to run when use-gss-proxy==1
  - 2019-07-12 [ herberthbli  ]  net: resolve clash for matching conntracks
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_AMD_IOMMU
  - 2019-07-12 [ Jia Wang  ]  NBD: remove invalid reread of partition info
  - 2019-07-12 [ Xiaoming Gao  ]  config: oepn CONFIG_EXT2_FS_XATTR and CONFIG_EXT4_ENCRYPTION
  - 2019-07-12 [ samuelliao  ]  iommu/amd: Support AMD platform with more than 255 CPU
  - 2019-07-12 [ herberthbli  ]  net: update i40evf drv to 3.6.15
  - 2019-07-12 [ herberthbli  ]  net: update i40e drv to 2.7.29
  - 2019-07-12 [ Wang Fuhai  ]  vfio: set vfio config on
  - 2019-07-12 [ chen xiaoguang  ]  memory cgroup: fix memory and swap calculation error
  - 2019-07-12 [ kaixuxia  ]  xfs: validate sb_logsunit is a multiple of the fs blocksize
  - 2019-07-12 [ Songqiao Tao  ]  package: update rpm scripts for kernel installation, upgrade and uninstallation
  - 2019-07-12 [ Lei Chen  ]  driver: fix mpt3sas driver Makefile bug
  - 2019-07-12 [ Songqiao Tao  ]  package: update package name and config for x86_64
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_UNWINDER_FRAME_POINTER
  - 2019-07-12 [ Xiaoming Gao  ]  kernel: open CONFIG_LIVEPATCH
  - 2019-07-12 [ Chandu-babu Namburu  ]  Add AMD Rome RAS feature support
  - 2019-07-12 [ Chandu Babu N  ]  Add AMD Rome CPU/Cache Topology support
  - 2019-07-12 [ Xiaoming Gao  ]  ip_vs: fix tunnel_df_force_zero's data
  - 2019-07-12 [ Xiaoming Gao  ]  kernel: remove no retpoline warnings
  - 2019-07-12 [ Lei Chen  ]  mpt3sas: update driver from 15.100.00.00 to 26.00.00.00
  - 2019-07-12 [ Xiaoming Gao  ]  Makefile: update kernel version to 4.14.105
  - 2019-07-12 [ Andy Lutomirski  ]  x86/uaccess: Don't leak the AC flag into __put_user() value evaluation
  - 2019-07-12 [ Paul Burton  ]  MIPS: eBPF: Fix icache flush end address
  - 2019-07-12 [ Michael Clark  ]  MIPS: fix truncation in __cmpxchg_small for short values
  - 2019-07-12 [ Jann Horn  ]  mm: enforce min addr even if capable() in expand_downwards()
  - 2019-07-12 [ BOUGH CHEN  ]  mmc: sdhci-esdhc-imx: correct the fix of ERR004536
  - 2019-07-12 [ Takeshi Saito  ]  mmc: tmio: fix access width of Block Count Register
  - 2019-07-12 [ Sergei Shtylyov  ]  mmc: tmio_mmc_core: don't claim spurious interrupts
  - 2019-07-12 [ Jonathan Neuschäfer  ]  mmc: spi: Fix card detection during probe
  - 2019-07-12 [ Seth Forshee  ]  powerpc: Always initialize input array when calling epapr_hypercall()
  - 2019-07-12 [ Vitaly Kuznetsov  ]  KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1
  - 2019-07-12 [ Suravee Suthikulpanit  ]  svm: Fix AVIC incomplete IPI emulation
  - 2019-07-12 [ Chaitanya Tata  ]  cfg80211: extend range deviation for DMG
  - 2019-07-12 [ Mathieu Malaterre  ]  mac80211: Add attribute aligned(2) to struct 'action'
  - 2019-07-12 [ Balaji Pothunoori  ]  mac80211: don't initiate TDLS connection if station is not associated to AP
  - 2019-07-12 [ Thomas Falcon  ]  ibmveth: Do not process frames after calling napi_reschedule
  - 2019-07-12 [ Maciej Żenczykowski  ]  net: dev_is_mac_header_xmit() true for ARPHRD_RAWIP
  - 2019-07-12 [ Zhang Run  ]  net: usb: asix: ax88772_bind return error when hw_reset fail
  - 2019-07-12 [ Haiyang Zhang  ]  hv_netvsc: Fix ethtool change hash key error
  - 2019-07-12 [ Atsushi Nemoto  ]  net: altera_tse: fix connect_local_phy error path
  - 2019-07-12 [ Varun Prakash  ]  scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state()
  - 2019-07-12 [ Tejun Heo  ]  writeback: synchronize sync(2) against cgroup writeback membership switches
  - 2019-07-12 [ Ernesto A. Fernández  ]  direct-io: allow direct writes to empty inodes
  - 2019-07-12 [ Liam Mark  ]  staging: android: ion: Support cpu access during dma_buf_detach
  - 2019-07-12 [ Tomonori Sakita  ]  serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling
  - 2019-07-12 [ Kenneth Feng  ]  drm/amd/powerplay: OD setting fix on Vega10
  - 2019-07-12 [ Xie Yongji  ]  locking/rwsem: Fix (possible) missed wakeup
  - 2019-07-12 [ Peter Zijlstra  ]  futex: Fix (possible) missed wakeup
  - 2019-07-12 [ Prateek Sood  ]  sched/wait: Fix rcuwait_wake_up() ordering
  - 2019-07-12 [ Bob Copeland  ]  mac80211: fix miscounting of ttl-dropped frames
  - 2019-07-12 [ Nathan Chancellor  ]  staging: rtl8723bs: Fix build error with Clang when inlining is disabled
  - 2019-07-12 [ Aaron Hill  ]  drivers: thermal: int340x_thermal: Fix sysfs race condition
  - 2019-07-12 [ Eugeniy Paltsev  ]  ARC: fix __ffs return value to avoid build warnings
  - 2019-07-12 [ Geert Uytterhoeven  ]  selftests: gpio-mockup-chardev: Check asprintf() for error
  - 2019-07-12 [ Fathi Boudra  ]  selftests: seccomp: use LDLIBS instead of LDFLAGS
  - 2019-07-12 [ Silvio Cesare  ]  ASoC: imx-audmux: change snprintf to scnprintf for possible overflow
  - 2019-07-12 [ Silvio Cesare  ]  ASoC: dapm: change snprintf to scnprintf for possible overflow
  - 2019-07-12 [ Srinivas Ramana  ]  genirq: Make sure the initial affinity is not empty
  - 2019-07-12 [ Dan Carpenter  ]  usb: gadget: Potential NULL dereference on allocation error
  - 2019-07-12 [ Zeng Tao  ]  usb: dwc3: gadget: Fix the uninitialized link_state when udc starts
  - 2019-07-12 [ Bo He  ]  usb: dwc3: gadget: synchronize_irq dwc irq in suspend
  - 2019-07-12 [ Dan Carpenter  ]  thermal: int340x_thermal: Fix a NULL vs IS_ERR() check
  - 2019-07-12 [ Marek Vasut  ]  clk: vc5: Abort clock configuration without upstream clock
  - 2019-07-12 [ Yizhuo  ]  ASoC: Variable "val" in function rt274_i2c_probe() could be uninitialized
  - 2019-07-12 [ Dan Carpenter  ]  ALSA: compress: prevent potential divide by zero bugs
  - 2019-07-12 [ Rander Wang  ]  ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field
  - 2019-07-12 [ Kristian H. Kristensen  ]  drm/msm: Unblock writer if reader closes file
  - 2019-07-12 [ John Garry  ]  scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached
  - 2019-07-12 [ Jose Abreu  ]  net: stmmac: Disable ACS Feature for GMAC >= 4
  - 2019-07-12 [ Florian Fainelli  ]  net: stmmac: Fix reception of Broadcom switches tags
  - 2019-07-12 [ Greg Kroah-Hartman  ]  Revert "loop: Fold __loop_release into loop_release"
  - 2019-07-12 [ Greg Kroah-Hartman  ]  Revert "loop: Get rid of loop_index_mutex"
  - 2019-07-12 [ Greg Kroah-Hartman  ]  Revert "loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()"
  - 2019-07-12 [ Russell King  ]  net: phylink: avoid resolving link state too early
  - 2019-07-12 [ Matthias Kaehlcke  ]  sched/sysctl: Fix attributes of some extern declarations
  - 2019-07-12 [ Colin Ian King  ]  phy: tegra: remove redundant self assignment of 'map'
  - 2019-07-12 [ Nathan Chancellor  ]  pinctrl: max77620: Use define directive for max77620_pinconf_param values
  - 2019-07-12 [ Eli Cooper  ]  netfilter: ipv6: Don't preserve original oif for loopback address
  - 2019-07-12 [ Pablo Neira Ayuso  ]  netfilter: nft_compat: use-after-free when deleting targets
  - 2019-07-12 [ Pablo Neira Ayuso  ]  netfilter: nf_tables: fix flush after rule deletion in the same batch
  - 2019-07-12 [ Hangbin Liu  ]  Revert "bridge: do not add port to router list when receives query with source 0.0.0.0"
  - 2019-07-12 [ Willem de Bruijn  ]  net: avoid false positives in untrusted gso validation
  - 2019-07-12 [ Willem de Bruijn  ]  net: validate untrusted gso packets without csum offload
  - 2019-07-12 [ Chris Wilson  ]  drm/i915/fbdev: Actually configure untiled displays
  - 2019-07-12 [ Alexey Brodkin  ]  ARC: define ARCH_SLAB_MINALIGN = 8
  - 2019-07-12 [ Eugeniy Paltsev  ]  ARC: U-boot: check arguments paranoidly
  - 2019-07-12 [ Eugeniy Paltsev  ]  ARCv2: Enable unaligned access in early ASM code
  - 2019-07-12 [ Dmitry V. Levin  ]  parisc: Fix ptrace syscall number modification
  - 2019-07-12 [ Eric Biggers  ]  KEYS: always initialize keyring_index_key::desc_len
  - 2019-07-12 [ Eric Biggers  ]  KEYS: user: Align the payload buffer
  - 2019-07-12 [ Bart Van Assche  ]  RDMA/srp: Rework SCSI device reset handling
  - 2019-07-12 [ Konstantin Khlebnikov  ]  inet_diag: fix reporting cgroup classid and fallback to priority
  - 2019-07-12 [ Saeed Mahameed  ]  net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames
  - 2019-07-12 [ Hangbin Liu  ]  sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()
  - 2019-07-12 [ Cong Wang  ]  team: avoid complex list operations in team_nl_cmd_options_set()
  - 2019-07-12 [ Xin Long  ]  sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment
  - 2019-07-12 [ Russell King  ]  net: sfp: do not probe SFP module before we're attached
  - 2019-07-12 [ Kal Conley  ]  net/packet: fix 4gb buffer limit due to overflow check
  - 2019-07-12 [ Tonghao Zhang  ]  net/mlx5e: Don't overwrite pedit action when multiple pedit used
  - 2019-07-12 [ Li RongQing  ]  ipv6: propagate genlmsg_reply return code
  - 2019-07-12 [ Eric Dumazet  ]  batman-adv: fix uninit-value in batadv_interface_tx()
  - 2019-07-12 [ Nathan Chancellor  ]  isdn: avm: Fix string plus integer warning from Clang
  - 2019-07-12 [ Tariq Toukan  ]  net/mlx5e: Fix wrong (zero) TX drop counter indication for representor
  - 2019-07-12 [ Ido Schimmel  ]  mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky
  - 2019-07-12 [ Peter Oskolkov  ]  bpf: bpf_setsockopt: reset sock dst on SO_MARK changes
  - 2019-07-12 [ Kangjie Lu  ]  leds: lp5523: fix a missing check of return value of lp55xx_read
  - 2019-07-12 [ Cheng-Min Ao  ]  hwmon: (tmp421) Correct the misspelling of the tmp442 compatible attribute in OF device ID table
  - 2019-07-12 [ Colin Ian King  ]  atm: he: fix sign-extension overflow on large shift
  - 2019-07-12 [ Julia Lawall  ]  drm/meson: add missing of_node_put
  - 2019-07-12 [ Talons Lee  ]  always clear the X2APIC_ENABLE bit for PV guest
  - 2019-07-12 [ Manish Rangankar  ]  scsi: qedi: Add ep_state for login completion on un-reachable targets
  - 2019-07-12 [ Stanley Chu  ]  scsi: ufs: Fix system suspend status
  - 2019-07-12 [ Jia-Ju Bai  ]  isdn: i4l: isdn_tty: Fix some concurrency double-free bugs
  - 2019-07-12 [ Jose Abreu  ]  net: stmmac: Fix PCI module removal leak
  - 2019-07-12 [ Yuchung Cheng  ]  bpf: correctly set initial window on active Fast Open sender
  - 2019-07-12 [ Thomas Bogendoerfer  ]  MIPS: jazz: fix 64bit build
  - 2019-07-12 [ Logan Gunthorpe  ]  scsi: isci: initialize shost fully before calling scsi_add_host()
  - 2019-07-12 [ YueHaibing  ]  scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param
  - 2019-07-12 [ Taehee Yoo  ]  netfilter: nf_tables: fix leaking object reference count
  - 2019-07-12 [ Alban Bedel  ]  MIPS: ath79: Enable OF serial ports in the default config
  - 2019-07-12 [ Yonglong Liu  ]  net: hns: Fix use after free identified by SLUB debug
  - 2019-07-12 [ Denis Bolotin  ]  qed: Fix qed_ll2_post_rx_buffer_notify_fw() by adding a write memory barrier
  - 2019-07-12 [ Denis Bolotin  ]  qed: Fix qed_chain_set_prod() for PBL chains with non power of 2 page count
  - 2019-07-12 [ YueHaibing  ]  xen/pvcalls: remove set but not used variable 'intf'
  - 2019-07-12 [ Kangjie Lu  ]  mfd: mc13xxx: Fix a missing check of a register-read failure
  - 2019-07-12 [ Keerthy  ]  mfd: tps65218: Use devm_regmap_add_irq_chip and clean up error path in probe()
  - 2019-07-12 [ Charles Keepax  ]  mfd: wm5110: Add missing ASRC rate register
  - 2019-07-12 [ Jonathan Marek  ]  mfd: qcom_rpm: write fw_version to CTRL_REG
  - 2019-07-12 [ Dien Pham  ]  mfd: bd9571mwv: Add volatile register to make DVFS work
  - 2019-07-12 [ Dan Carpenter  ]  mfd: ab8500-core: Return zero in get_register_interruptible()
  - 2019-07-12 [ Nicolas Boichat  ]  mfd: mt6397: Do not call irq_domain_remove if PMIC unsupported
  - 2019-07-12 [ Nathan Chancellor  ]  mfd: db8500-prcmu: Fix some section annotations
  - 2019-07-12 [ Nathan Chancellor  ]  mfd: twl-core: Fix section annotations on {,un}protect_pm_master
  - 2019-07-12 [ Stefano Stabellini  ]  pvcalls-back: set -ENOTCONN in pvcalls_conn_back_read
  - 2019-07-12 [ Vignesh R  ]  mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells
  - 2019-07-12 [ Eric Biggers  ]  KEYS: allow reaching the keys quotas exactly
  - 2019-07-12 [ Michal Hocko  ]  proc, oom: do not report alien mms when setting oom_score_adj
  - 2019-07-12 [ Ralph Campbell  ]  numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES
  - 2019-07-12 [ Yan, Zheng  ]  ceph: avoid repeatedly adding inode to mdsc->snap_flush_list
  - 2019-07-12 [ Ilya Dryomov  ]  libceph: handle an empty authorize reply
  - 2019-07-12 [ Herbert Xu  ]  mac80211: Free mpath object when rhashtable insertion fails
  - 2019-07-12 [ Rakesh Pillai  ]  mac80211: Restore vif beacon interval if start ap fails
  - 2019-07-12 [ Paul Burton  ]  MIPS: eBPF: Always return sign extended 32b values
  - 2019-07-12 [ Quentin Perret  ]  tracing: Fix number of entries in trace header
  - 2019-07-12 [ Mathieu Desnoyers  ]  ARM: 8834/1: Fix: kprobes: optimized kprobes illegal instruction
  - 2019-07-12 [ Eric Dumazet  ]  ax25: fix possible use-after-free
  - 2019-07-12 [ Eric Dumazet  ]  mISDN: fix a race in dev_expire_timer()
  - 2019-07-12 [ Eric Dumazet  ]  net/x25: do not hold the cpu too long in x25_new_lci()
  - 2019-07-12 [ Scott Mayhew  ]  sunrpc: fix 4 more call sites that were using stack memory with a scatterlist
  - 2019-07-12 [ Eric Dumazet  ]  tcp: clear icsk_backoff in tcp_write_queue_purge()
  - 2019-07-12 [ Alexander Duyck  ]  net: Do not allocate page fragments that are not skb aligned
  - 2019-07-12 [ Eric Dumazet  ]  tcp: tcp_v4_err() should be more careful
  - 2019-07-12 [ David S. Miller  ]  net: Add header for usage of fls64()
  - 2019-07-12 [ Jason Wang  ]  vhost: correctly check the return value of translate_desc() in log_used()
  - 2019-07-12 [ Kai-Heng Feng  ]  sky2: Increase D3 delay again
  - 2019-07-12 [ Alexandre Torgue  ]  net: stmmac: handle endianness in dwmac4_get_timestamp
  - 2019-07-12 [ Jose Abreu  ]  net: stmmac: Fix a race in EEE enable callback
  - 2019-07-12 [ Paul Kocialkowski  ]  net: phy: xgmiitorgmii: Support generic PHY status read
  - 2019-07-12 [ Hauke Mehrtens  ]  net: Fix for_each_netdev_feature on Big endian
  - 2019-07-12 [ Mao Wenan  ]  net: crypto set sk to NULL when af_alg_release.
  - 2019-07-12 [ Petr Machata  ]  mlxsw: __mlxsw_sp_port_headroom_set(): Fix a use of local variable
  - 2019-07-12 [ Wei Yongjun  ]  hwmon: (lm80) Fix missing unlock on error in set_fan_div()
  - 2019-07-12 [ Eric Dumazet  ]  vxlan: test dev->flags & IFF_UP before calling netif_rx()
  - 2019-07-12 [ Paolo Abeni  ]  vsock: cope with memory allocation failure at socket creation time
  - 2019-07-12 [ Lorenzo Bianconi  ]  net: ipv4: use a dedicated counter for icmp_v4 redirect packets
  - 2019-07-12 [ Zhiqiang Liu  ]  net: fix IPv6 prefix route residue
  - 2019-07-12 [ John David Anglin  ]  dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit
  - 2019-07-12 [ Hauke Mehrtens  ]  uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define
  - 2019-07-12 [ Christian Lamparter  ]  pinctrl: msm: fix gpio-hog related boot issues
  - 2019-07-12 [ Thomas Gleixner  ]  futex: Cure exit race
  - 2019-07-12 [ Pavankumar Kondeti  ]  sched, trace: Fix prev_state output in sched_switch tracepoint
  - 2019-07-12 [ Joonas Lahtinen  ]  drm/i915: Prevent a race during I915_GEM_MMAP ioctl with WC set
  - 2019-07-12 [ Nikos Tsironis  ]  dm thin: fix bug where bio that overwrites thin block ignores FUA
  - 2019-07-12 [ Mikulas Patocka  ]  dm crypt: don't overallocate the integrity tag space
  - 2019-07-12 [ Borislav Petkov  ]  x86/a.out: Clear the dump structure initially
  - 2019-07-12 [ Nate Dailey  ]  md/raid1: don't clear bitmap bits on interrupted recovery.
  - 2019-07-12 [ Eric W. Biederman  ]  signal: Restore the stop PTRACE_EVENT_EXIT
  - 2019-07-12 [ Hedi Berriche  ]  x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls
  - 2019-07-12 [ Andreas Ziegler  ]  tracing/uprobes: Fix output for multiple string arguments
  - 2019-07-12 [ Meelis Roos  ]  alpha: Fix Eiger NR_IRQS to 128
  - 2019-07-12 [ Sergei Trofimovich  ]  alpha: fix page fault handling for r16-r18 targets
  - 2019-07-12 [ Sandeep Patil  ]  mm: proc: smaps_rollup: fix pss_locked calculation
  - 2019-07-12 [ Matti Kurkela  ]  Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780
  - 2019-07-12 [ Jonathan Bakker  ]  Input: bma150 - register input device after setting private data
  - 2019-07-12 [ Xiaoyao Li  ]  kvm: vmx: Fix entry number check for add_atomic_switch_msr()
  - 2019-07-12 [ Manuel Reinhardt  ]  ALSA: usb-audio: Fix implicit fb endpoint setup by quirk
  - 2019-07-12 [ Jurica Vukadin  ]  ALSA: hda - Add quirk for HP EliteBook 840 G5
  - 2019-07-12 [ Jiri Olsa  ]  perf/x86: Add check_period PMU callback
  - 2019-07-12 [ Ingo Molnar  ]  perf/core: Fix impossible ring-buffer sizes warning
  - 2019-07-12 [ Mauro Ciancio  ]  Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK
  - 2019-07-12 [ Dmitry Torokhov  ]  Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G"
  - 2019-07-12 [ Ross Lagerwall  ]  cifs: Limit memory used by lock request calls to a page
  - 2019-07-12 [ Ilia Mirkin  ]  drm/nouveau/falcon: avoid touching registers if engine is off
  - 2019-07-12 [ Takashi Iwai  ]  drm/nouveau: Don't disable polling in fallback mode
  - 2019-07-12 [ Nicholas Mc Guire  ]  gpio: pl061: handle failed allocations
  - 2019-07-12 [ Linus Walleij  ]  ARM: dts: kirkwood: Fix polarity of GPIO fan lines
  - 2019-07-12 [ Peter Ujfalusi  ]  ARM: dts: da850-lcdk: Correct the sound card name
  - 2019-07-12 [ Peter Ujfalusi  ]  ARM: dts: da850-evm: Correct the sound card name
  - 2019-07-12 [ Liviu Dudau  ]  nvme-pci: use the same attributes when freeing host_mem_desc_bufs.
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: fix output H/V syncs
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: reject modes which require too much BW
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: fix initial DP0/1_SRCCTRL value
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: fix single lane configuration
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: add defines for DP1_SRCCTRL & PHY_2LANE
  - 2019-07-12 [ Sudeep Holla  ]  cpufreq: check if policy is inactive early in __cpufreq_get()
  - 2019-07-12 [ Arnaldo Carvalho de Melo  ]  perf test shell: Use a fallback to get the pathname in vfs_getname
  - 2019-07-12 [ Chao Fan  ]  ACPI: NUMA: Use correct type for printing addresses on i386-PAE
  - 2019-07-12 [ Daniel Axtens  ]  bnx2x: disable GSO where gso_size is too big for hardware
  - 2019-07-12 [ Daniel Axtens  ]  net: create skb_gso_validate_mac_len()
  - 2019-07-12 [ Russell King  ]  ARM: fix the cockup in the previous patch
  - 2019-07-12 [ Russell King  ]  ARM: ensure that processor vtables is not lost after boot
  - 2019-07-12 [ Russell King  ]  ARM: spectre-v2: per-CPU vtables to work around big.Little systems
  - 2019-07-12 [ Russell King  ]  ARM: add PROC_VTABLE and PROC_TABLE macros
  - 2019-07-12 [ Russell King  ]  ARM: clean up per-processor check_bugs method call
  - 2019-07-12 [ Russell King  ]  ARM: split out processor lookup
  - 2019-07-12 [ Russell King  ]  ARM: make lookup_processor_type() non-__init
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8810/1: vfp: Fix wrong assignement to ufp_exc
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8797/1: spectre-v1.1: harden __copy_to_user
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8796/1: spectre-v1,v1.1: provide helpers for address sanitization
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8795/1: spectre-v1.1: use put_user() for __put_user()
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8794/1: uaccess: Prevent speculative use of the current addr_limit
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8793/1: signal: replace __put_user_error with __put_user
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8792/1: oabi-compat: copy oabi events using __copy_to_user()
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8791/1: vfp: use __copy_to_user() when saving VFP state
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8790/1: signal: always use __copy_to_user to save iwmmxt context
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8789/1: signal: copy registers using __copy_to_user()
  - 2019-07-12 [ Hauke Mehrtens  ]  uapi/if_ether.h: prevent redefinition of struct ethhdr
  - 2019-07-12 [ Jianchao Wang  ]  blk-mq: fix a hung issue when fsync
  - 2019-07-12 [ Adrian Bunk  ]  eeprom: at24: add support for 24c2048
  - 2019-07-12 [ Adrian Bunk  ]  dt-bindings: eeprom: at24: add "atmel,24c2048" compatible string
  - 2019-07-12 [ Linus Torvalds  ]  Revert "exec: load_script: don't blindly truncate shebang string"
  - 2019-07-12 [ Xiubo Li  ]  Revert "uio: use request_threaded_irq instead"
  - 2019-07-12 [ Xiubo Li  ]  uio: fix possible circular locking dependency
  - 2019-07-12 [ Hailong Liu  ]  uio: fix wrong return value from uio_mmap()
  - 2019-07-12 [ Xiubo Li  ]  uio: fix crash after the device is unregistered
  - 2019-07-12 [ Xiubo Li  ]  uio: change to use the mutex lock instead of the spin lock
  - 2019-07-12 [ Xiubo Li  ]  uio: use request_threaded_irq instead
  - 2019-07-12 [ Hamish Martin  ]  uio: Prevent device destruction while fds are open
  - 2019-07-12 [ Hamish Martin  ]  uio: Reduce return paths from uio_write()
  - 2019-07-12 [ Jiri Olsa  ]  perf tests attr: Make hw events optional
  - 2019-07-12 [ Jiri Olsa  ]  perf tests attr: Fix group stat tests
  - 2019-07-12 [ Jiri Olsa  ]  perf tests attr: Fix task term values
  - 2019-07-12 [ Sven Eckelmann  ]  batman-adv: Force mac header to start of data on xmit
  - 2019-07-12 [ Sven Eckelmann  ]  batman-adv: Avoid WARN on net_device without parent in netns
  - 2019-07-12 [ Florian Westphal  ]  xfrm: refine validation of template and selector families
  - 2019-07-12 [ Ilya Dryomov  ]  libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive()
  - 2019-07-12 [ Theodore Ts'o  ]  Revert "ext4: use ext4_write_inode() when fsyncing w/o a journal"
  - 2019-07-12 [ Vladis Dronov  ]  HID: debug: fix the ring buffer implementation
  - 2019-07-12 [ Thomas Hellstrom  ]  drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
  - 2019-07-12 [ Thomas Hellstrom  ]  drm/vmwgfx: Fix setting of dma masks
  - 2019-07-12 [ Tina Zhang  ]  drm/modes: Prevent division by zero htotal
  - 2019-07-12 [ Felix Fietkau  ]  mac80211: ensure that mgmt tx skbs have tailroom for encryption
  - 2019-07-12 [ Marc Gonzalez  ]  ARM: tango: Improve ARCH_MULTIPLATFORM compatibility
  - 2019-07-12 [ Russell King  ]  ARM: iop32x/n2100: fix PCI IRQ mapping
  - 2019-07-12 [ Paul Burton  ]  MIPS: VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds
  - 2019-07-12 [ Aaro Koskinen  ]  MIPS: OCTEON: don't set octeon_dma_bar_type if PCI is disabled
  - 2019-07-12 [ Vladimir Kondratiev  ]  mips: cm: reprime error cause
  - 2019-07-12 [ Andreas Ziegler  ]  tracing: uprobes: Fix typo in pr_fmt string
  - 2019-07-12 [ Greg Kroah-Hartman  ]  debugfs: fix debugfs_rename parameter checking
  - 2019-07-12 [ Tomas Winkler  ]  samples: mei: use /dev/mei0 instead of /dev/mei
  - 2019-07-12 [ Dan Carpenter  ]  misc: vexpress: Off by one in vexpress_syscfg_exec()
  - 2019-07-12 [ Eric W. Biederman  ]  signal: Better detection of synchronous signals
  - 2019-07-12 [ Eric W. Biederman  ]  signal: Always notice exiting tasks
  - 2019-07-12 [ Matt Ranostay  ]  iio: chemical: atlas-ph-sensor: correct IIO_TEMP values to millicelsius
  - 2019-07-12 [ Hans de Goede  ]  iio: adc: axp288: Fix TS-pin handling
  - 2019-07-12 [ Martin Kepplinger  ]  mtd: rawnand: gpmi: fix MX28 bus master lockup problem
  - 2019-07-12 [ LiuHua  ]  cpuset: Compatible with ARM arch
  - 2019-07-12 [ Songqiao Tao  ]  package: update spec, mark kernel rpm of centos as obsolete
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_USER_NS
  - 2019-07-12 [ brookxu  ]  pagecachelimit: page cache reclaim asynchronous
  - 2019-07-12 [ brookxu  ]  pagecachelimit: limit the pagecache ratio of totalram
  - 2019-07-12 [ brookxu  ]  expose taskstats to all netspace
  - 2019-07-12 [ kaixuxia  ]  mounts: add shield mountpoint in container support
  - 2019-07-12 [ kaixuxia  ]  xfs: add kmem_alloc_by_vmalloc and kmem_alloc_large_dump_stack sysctl
  - 2019-07-12 [ Xiaoming Gao  ]  xfs: set xfs default error level to 5
  - 2019-07-12 [ LiuHUa  ]  vm:isolate max_map_count by pid namespace
  - 2019-07-12 [ LiuHUa  ]  wathdog: add symbol info when panic by hard lockup
  - 2019-07-12 [ LiuHUa  ]  ioapic: add pr_info in __assign_irq_vector when vector not assigned
  - 2019-07-12 [ LiuHUa  ]  irq: add more info when interrupt cannot find handler
  - 2019-07-12 [ LiuHUa  ]  cpuset: add loadavg calc for each container
  - 2019-07-12 [ LiuHUa  ]  cpuset: add cpuinfo and stat show
  - 2019-07-12 [ Xiaoming Gao  ]  signal: add print_fatal_signals_src_dst sysctl to switch dump fatal signals from sender side
  - 2019-07-12 [ Lorin Liu  ]  proc: add pid mapping between host and container
  - 2019-07-12 [ chen xiaoguang  ]  memcg: add meminfo and vmstat show
  - 2019-07-12 [ herberthbli  ]  net: namespaceify sysctl_tcp_rmem and sysctl_tcp_wmem
  - 2019-07-12 [ herberthbli  ]  net: allow per netns sysctl_rmem and sysctl_wmem for protos
  - 2019-07-12 [ herberthbli  ]  net: namespaceify sysctl_tcp_workaround_signed_windows
  - 2019-07-12 [ herberthbli  ]  net: namespaceify sysctl_tcp_max_orphans
  - 2019-07-12 [ herberthbli  ]  net: namespaceify sysctl_tcp_no_delay_ack
  - 2019-07-12 [ Xiaoming Gao  ]  package: update spec
  - 2019-07-12 [ Xiaoming Gao  ]  config: open virtulization
  - 2019-07-12 [ Xiaoming Gao  ]  package: add package files
  - 2019-07-12 [ Xiaoming Gao  ]  Makefile: add extra version
  - 2019-07-12 [ Xiaoming Gao  ]  net: add toa support
  - 2019-07-12 [ Xiaoming Gao  ]  xfs: set XFS_BUF_LOCK_TRACKING to 1 as default
  - 2019-07-12 [ Liu Yu  ]  pci: prohibit storage probe delay of virtio block device
  - 2019-07-12 [ Xiaoming Gao  ]  numa: change syctl_numa_balancing_scan_size_mb default value to 0
  - 2019-07-12 [ Xiaoming Gao  ]  pci: add probe delay between two network adapters when network-strict-sort parameter set
  - 2019-07-12 [ Xiaoming Gao  ]  ipmi: set kipmid_max_busy_us default to 1
  - 2019-07-12 [ Shan Wei  ]  tcp: kill the limit for init cwnd
  - 2019-07-12 [ Shan Wei  ]  tcp: fix the bug of tcp hash size tuning down
  - 2019-07-12 [ Xiaoming Gao  ]  conntrack: add netagent extention slot.
  - 2019-07-12 [ Xiaoming Gao  ]  block: check whether queue is NULL or not in stats functions
  - 2019-07-12 [ Xiaoming Gao  ]  hw_ssd: add hw_ssd driver
  - 2019-07-12 [ Samuel Liao  ]  netlink: don't modprobe proto audit & selinux
  - 2019-07-12 [ Shan Wei  ]  tcp: add proc parameter to change init cwnd
  - 2019-07-12 [ Xiaoming Gao  ]  net: add tcp_no_delay_ack to enable absolute quick ack
  - 2019-07-12 [ Xiaoming Gao  ]  tcp: add tcp_loss_init_cwnd sysctl to tunnel packet numbers in loss
  - 2019-07-12 [ Samuel Liao  ]  sched: adaptive default skew_tick value
  - 2019-07-12 [ Samuel Liao  ]  epoll: introduce min_wait_time
  - 2019-07-12 [ Xiaoming Gao  ]  net bridge: add null pointer check,fix panic
  - 2019-07-12 [ Lingling Song  ]  network: Default zero bond_devices to support
  - 2019-07-12 [ Mojiong Qiu  ]  nf_conntrack: adjust nf_conntrack_max default value
  - 2019-07-12 [ Xiaoming Gao  ]  tkernel: control nonpriv bind port below 1024
  - 2019-07-12 [ Xiaoming Gao  ]  tkernel: create top proc & sysctl directory
  - 2019-07-12 [ Mojiong Qiu  ]  Increase dirty-ratio from 20 to 40
  - 2019-07-12 [ Xiaoming Gao  ]  Double the default value of thash_entries
  - 2019-07-12 [ Xiaoming Gao  ]  Backoff the commit allowing timestamps even if SYN packet has tsval=0
  - 2019-07-12 [ Chris Mason  ]  increase defaults for shmmall, shmmax, msgmax and msgmnb
  - 2019-07-12 [ Xiaoming Gao  ]  mpt3sas: sort sas by slot before sas_attach
  - 2019-07-12 [ Xiaoming Gao  ]  backport: add backport_remove_lists.txt
  - 2019-07-12 [ Xiaoming Gao  ]  dmi_probe: disable breadfirst sort of pci device on dmi Vendor "Dell Inc"
  - 2019-07-12 [ Samuel Liao  ]  hpsa: root=cciss/c0d0pX compatiblilty
  - 2019-07-12 [ Xiaoming Gao  ]  dell: AHCI should be loaded before mpt2sas
  - 2019-07-12 [ Samuel Liao  ]  pci: delay 5s to proble multiple storage controllers
  - 2019-07-12 [ Xiaoming Gao  ]  module: change same_magic to be more strictly
  - 2019-07-12 [ Xiaoming Gao  ]  sysrq: fix warning
  - 2019-07-12 [ Xiaoming Gao  ]  sysrq: add ALT+LEFTCTRL to trigger crash dump
  - 2019-07-12 [ Xiaoming Gao  ]  Init Repo base on 4.14.99 long term commit 383e9b61f85cc8e5f1fcb1493d95f826a2fa736e Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Date:   Tue Feb 12 19:46:14 2019 +0100


author: Init by Xiaoming Gao <newtongao@tencent.com>
changelog:
  - 2019-09-26 [ Xiaoming Gao  ]  config: open more bpf configs
  - 2019-09-26 [ Xiaoming Gao  ]  ceph: quota: report root dir quota usage in statfs
  - 2019-09-26 [ Luis Henriques  ]  ceph: quota: add counter for snaprealms with quota
  - 2019-09-26 [ Luis Henriques  ]  ceph: quota: cache inode pointer in ceph_snap_realm
  - 2019-09-26 [ Yan, Zheng  ]  ceph: fix root quota realm check
  - 2019-09-26 [ Yan, Zheng  ]  ceph: don't check quota for snap inode
  - 2019-09-26 [ Luis Henriques  ]  ceph: quota: update MDS when max_bytes is approaching
  - 2019-09-26 [ Luis Henriques  ]  ceph: quota: support for ceph.quota.max_bytes
  - 2019-09-26 [ Luis Henriques  ]  ceph: quota: don't allow cross-quota renames
  - 2019-09-26 [ Luis Henriques  ]  ceph: quota: support for ceph.quota.max_files
  - 2019-09-26 [ Luis Henriques  ]  ceph: quota: add initial infrastructure to support cephfs quotas
  - 2019-09-26 [ Liu Yu  ]  ceph: Add new mount option req_resend
  - 2019-09-26 [ Zhang Zhi  ]  ceph: re-send osd requests if timeout
  - 2019-09-26 [ zgpeng  ]  sched:fair: fix crash in list_add_leaf_cfs_rq due to bad tmp_alone_branch
  - 2019-09-26 [ Xiaoming Gao  ]  irq: allow user manage irq affinity
  - 2019-09-26 [ Xiaoming Gao  ]  kvm: add kvm_no_pv_ipi kernel parameter
  - 2019-09-26 [ zgpeng  ]  cpuset: add sysctl cpuset_cpuinfo_show_realinfo to switch whether show real cpuinfo or not
  - 2019-09-12 [ chen xiaoguang  ]  cgroup/cpuset: fix idle compute bug in cpuset.stat
  - 2019-09-12 [ loobinliu  ]  KVM: X86: Implement PV IPIs in linux guest
  - 2019-09-12 [ brookxu  ]  cpuset: fixed cpuset.stat process field value exception
  - 2019-09-05 [ Xiaoming Gao  ]  crash: add compat suffix and set default reserve addr up to max address
  - 2019-09-05 [ Xiaoming Gao  ]  perf: disable --children by default
  - 2019-08-15 [ Xiaoming Gao  ]  tcp: make TCP_RTO_MIN/MAX be tunable
  - 2019-08-15 [ brookxu  ]  dm: add support for blkcg diskstats
  - 2019-08-15 [ brookxu  ]  md: add support for blkcg diskstats
  - 2019-08-15 [ brookxu  ]  blkcg: add per blkcg diskstats
  - 2019-08-15 [ brookxu  ]  cpuacct: get the uptime of container
  - 2019-08-15 [ Xiaoming Gao  ]  perf/amd: Fixed ROME Perf BUG
  - 2019-08-15 [ Xiaoming Gao  ]  x86/mce: Handle varying MCA bank counts
  - 2019-08-15 [ Xiaoming Gao  ]  iommu/amd: Add support for IOMMU XT mode
  - 2019-08-15 [ Xiaoming Gao  ]  iommu/amd: Add support for higher 64 bit IOMMU Control
  - 2019-08-15 [ Xiaoming Gao  ]  x86/irq: remapping Move irq remapping mode enum
  - 2019-08-15 [ Xiaoming Gao  ]  Revert "iommu/amd: Support AMD platform with more than 255 CPU"
  - 2019-08-09 [ Xiaoming Gao  ]  config: open CONFIG_PARAVIRT
  - 2019-08-06 [ Xiaoming Gao  ]  config: open CONFIG_EDAC
  - 2019-07-25 [ Xiaoming Gao  ]  config: open more ipv6 configs
  - 2019-07-23 [ Liu Yu  ]  extra_modules: Add module kvdo
  - 2019-07-23 [ Liu Yu  ]  extra_modules: Add module bnxt
  - 2019-07-23 [ Liu Yu  ]  build: Add extra modules build support
  - 2019-07-22 [ Xiaoming Gao  ]  Makefile: modify EXTRA_VERSION to 19
  - 2019-07-19 [ Xiaoming Gao  ]  package: auto generate changelog use git log command
  - 2019-07-19 [ Xiaoming Gao  ]  config: open CONFIG_PVPANIC as module
  - 2019-07-19 [ Xiaoming Gao  ]  kernel/panic:  set crash_kexec_post_notifiers default to true
  - 2019-07-17 [ Xiaoming Gao  ]  kpatch: add kpatch core files
  - 2019-07-12 [ Xiaoming Gao  ]  add .gitignore
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_BLK_DEV_RAM as module
  - 2019-07-12 [ Zhiping du  ]  tcp: add tcp_min_snd_mss sysctl
  - 2019-07-12 [ Zhiping du  ]  tcp: tcp_fragment() should apply sane memory limits
  - 2019-07-12 [ Zhiping du  ]  tcp: limit payload size of sacked skbs
  - 2019-07-12 [ Fuhai Wang  ]  sched: fix poor performace on kvm guest
  - 2019-07-12 [ Jan Kiszka  ]  x86/apic: Install an empty physflat_init_apic_ldr
  - 2019-07-12 [ Xiaoming Gao  ]  spec: generate vmlinuz hmac file
  - 2019-07-12 [ Xiaoming Gao  ]  config: set CONFIG_LEGACY_PTY_COUNT default to 0
  - 2019-07-12 [ kaixuxia  ]  tkernel: add the kpatch kmod support
  - 2019-07-12 [ kaixuxia  ]  arm64: implement ftrace with regs by using patchable-function-entry
  - 2019-07-12 [ kaixuxia  ]  arm64/gcc: Fix the net compile error when using gcc 8.3.0
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_BNXT as module
  - 2019-07-12 [ brookxu  ]  memcg: fix bug of null pointer accessed when unregister event
  - 2019-07-12 [ wenbinzeng  ]  auth_gss fix: rpcsec_gss_exit_net has no chance to run when use-gss-proxy==1
  - 2019-07-12 [ herberthbli  ]  net: resolve clash for matching conntracks
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_AMD_IOMMU
  - 2019-07-12 [ Jia Wang  ]  NBD: remove invalid reread of partition info
  - 2019-07-12 [ Xiaoming Gao  ]  config: oepn CONFIG_EXT2_FS_XATTR and CONFIG_EXT4_ENCRYPTION
  - 2019-07-12 [ samuelliao  ]  iommu/amd: Support AMD platform with more than 255 CPU
  - 2019-07-12 [ herberthbli  ]  net: update i40evf drv to 3.6.15
  - 2019-07-12 [ herberthbli  ]  net: update i40e drv to 2.7.29
  - 2019-07-12 [ Wang Fuhai  ]  vfio: set vfio config on
  - 2019-07-12 [ chen xiaoguang  ]  memory cgroup: fix memory and swap calculation error
  - 2019-07-12 [ kaixuxia  ]  xfs: validate sb_logsunit is a multiple of the fs blocksize
  - 2019-07-12 [ Songqiao Tao  ]  package: update rpm scripts for kernel installation, upgrade and uninstallation
  - 2019-07-12 [ Lei Chen  ]  driver: fix mpt3sas driver Makefile bug
  - 2019-07-12 [ Songqiao Tao  ]  package: update package name and config for x86_64
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_UNWINDER_FRAME_POINTER
  - 2019-07-12 [ Xiaoming Gao  ]  kernel: open CONFIG_LIVEPATCH
  - 2019-07-12 [ Chandu-babu Namburu  ]  Add AMD Rome RAS feature support
  - 2019-07-12 [ Chandu Babu N  ]  Add AMD Rome CPU/Cache Topology support
  - 2019-07-12 [ Xiaoming Gao  ]  ip_vs: fix tunnel_df_force_zero's data
  - 2019-07-12 [ Xiaoming Gao  ]  kernel: remove no retpoline warnings
  - 2019-07-12 [ Lei Chen  ]  mpt3sas: update driver from 15.100.00.00 to 26.00.00.00
  - 2019-07-12 [ Xiaoming Gao  ]  Makefile: update kernel version to 4.14.105
  - 2019-07-12 [ Andy Lutomirski  ]  x86/uaccess: Don't leak the AC flag into __put_user() value evaluation
  - 2019-07-12 [ Paul Burton  ]  MIPS: eBPF: Fix icache flush end address
  - 2019-07-12 [ Michael Clark  ]  MIPS: fix truncation in __cmpxchg_small for short values
  - 2019-07-12 [ Jann Horn  ]  mm: enforce min addr even if capable() in expand_downwards()
  - 2019-07-12 [ BOUGH CHEN  ]  mmc: sdhci-esdhc-imx: correct the fix of ERR004536
  - 2019-07-12 [ Takeshi Saito  ]  mmc: tmio: fix access width of Block Count Register
  - 2019-07-12 [ Sergei Shtylyov  ]  mmc: tmio_mmc_core: don't claim spurious interrupts
  - 2019-07-12 [ Jonathan Neuschäfer  ]  mmc: spi: Fix card detection during probe
  - 2019-07-12 [ Seth Forshee  ]  powerpc: Always initialize input array when calling epapr_hypercall()
  - 2019-07-12 [ Vitaly Kuznetsov  ]  KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1
  - 2019-07-12 [ Suravee Suthikulpanit  ]  svm: Fix AVIC incomplete IPI emulation
  - 2019-07-12 [ Chaitanya Tata  ]  cfg80211: extend range deviation for DMG
  - 2019-07-12 [ Mathieu Malaterre  ]  mac80211: Add attribute aligned(2) to struct 'action'
  - 2019-07-12 [ Balaji Pothunoori  ]  mac80211: don't initiate TDLS connection if station is not associated to AP
  - 2019-07-12 [ Thomas Falcon  ]  ibmveth: Do not process frames after calling napi_reschedule
  - 2019-07-12 [ Maciej Żenczykowski  ]  net: dev_is_mac_header_xmit() true for ARPHRD_RAWIP
  - 2019-07-12 [ Zhang Run  ]  net: usb: asix: ax88772_bind return error when hw_reset fail
  - 2019-07-12 [ Haiyang Zhang  ]  hv_netvsc: Fix ethtool change hash key error
  - 2019-07-12 [ Atsushi Nemoto  ]  net: altera_tse: fix connect_local_phy error path
  - 2019-07-12 [ Varun Prakash  ]  scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state()
  - 2019-07-12 [ Tejun Heo  ]  writeback: synchronize sync(2) against cgroup writeback membership switches
  - 2019-07-12 [ Ernesto A. Fernández  ]  direct-io: allow direct writes to empty inodes
  - 2019-07-12 [ Liam Mark  ]  staging: android: ion: Support cpu access during dma_buf_detach
  - 2019-07-12 [ Tomonori Sakita  ]  serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling
  - 2019-07-12 [ Kenneth Feng  ]  drm/amd/powerplay: OD setting fix on Vega10
  - 2019-07-12 [ Xie Yongji  ]  locking/rwsem: Fix (possible) missed wakeup
  - 2019-07-12 [ Peter Zijlstra  ]  futex: Fix (possible) missed wakeup
  - 2019-07-12 [ Prateek Sood  ]  sched/wait: Fix rcuwait_wake_up() ordering
  - 2019-07-12 [ Bob Copeland  ]  mac80211: fix miscounting of ttl-dropped frames
  - 2019-07-12 [ Nathan Chancellor  ]  staging: rtl8723bs: Fix build error with Clang when inlining is disabled
  - 2019-07-12 [ Aaron Hill  ]  drivers: thermal: int340x_thermal: Fix sysfs race condition
  - 2019-07-12 [ Eugeniy Paltsev  ]  ARC: fix __ffs return value to avoid build warnings
  - 2019-07-12 [ Geert Uytterhoeven  ]  selftests: gpio-mockup-chardev: Check asprintf() for error
  - 2019-07-12 [ Fathi Boudra  ]  selftests: seccomp: use LDLIBS instead of LDFLAGS
  - 2019-07-12 [ Silvio Cesare  ]  ASoC: imx-audmux: change snprintf to scnprintf for possible overflow
  - 2019-07-12 [ Silvio Cesare  ]  ASoC: dapm: change snprintf to scnprintf for possible overflow
  - 2019-07-12 [ Srinivas Ramana  ]  genirq: Make sure the initial affinity is not empty
  - 2019-07-12 [ Dan Carpenter  ]  usb: gadget: Potential NULL dereference on allocation error
  - 2019-07-12 [ Zeng Tao  ]  usb: dwc3: gadget: Fix the uninitialized link_state when udc starts
  - 2019-07-12 [ Bo He  ]  usb: dwc3: gadget: synchronize_irq dwc irq in suspend
  - 2019-07-12 [ Dan Carpenter  ]  thermal: int340x_thermal: Fix a NULL vs IS_ERR() check
  - 2019-07-12 [ Marek Vasut  ]  clk: vc5: Abort clock configuration without upstream clock
  - 2019-07-12 [ Yizhuo  ]  ASoC: Variable "val" in function rt274_i2c_probe() could be uninitialized
  - 2019-07-12 [ Dan Carpenter  ]  ALSA: compress: prevent potential divide by zero bugs
  - 2019-07-12 [ Rander Wang  ]  ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field
  - 2019-07-12 [ Kristian H. Kristensen  ]  drm/msm: Unblock writer if reader closes file
  - 2019-07-12 [ John Garry  ]  scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached
  - 2019-07-12 [ Jose Abreu  ]  net: stmmac: Disable ACS Feature for GMAC >= 4
  - 2019-07-12 [ Florian Fainelli  ]  net: stmmac: Fix reception of Broadcom switches tags
  - 2019-07-12 [ Greg Kroah-Hartman  ]  Revert "loop: Fold __loop_release into loop_release"
  - 2019-07-12 [ Greg Kroah-Hartman  ]  Revert "loop: Get rid of loop_index_mutex"
  - 2019-07-12 [ Greg Kroah-Hartman  ]  Revert "loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()"
  - 2019-07-12 [ Russell King  ]  net: phylink: avoid resolving link state too early
  - 2019-07-12 [ Matthias Kaehlcke  ]  sched/sysctl: Fix attributes of some extern declarations
  - 2019-07-12 [ Colin Ian King  ]  phy: tegra: remove redundant self assignment of 'map'
  - 2019-07-12 [ Nathan Chancellor  ]  pinctrl: max77620: Use define directive for max77620_pinconf_param values
  - 2019-07-12 [ Eli Cooper  ]  netfilter: ipv6: Don't preserve original oif for loopback address
  - 2019-07-12 [ Pablo Neira Ayuso  ]  netfilter: nft_compat: use-after-free when deleting targets
  - 2019-07-12 [ Pablo Neira Ayuso  ]  netfilter: nf_tables: fix flush after rule deletion in the same batch
  - 2019-07-12 [ Hangbin Liu  ]  Revert "bridge: do not add port to router list when receives query with source 0.0.0.0"
  - 2019-07-12 [ Willem de Bruijn  ]  net: avoid false positives in untrusted gso validation
  - 2019-07-12 [ Willem de Bruijn  ]  net: validate untrusted gso packets without csum offload
  - 2019-07-12 [ Chris Wilson  ]  drm/i915/fbdev: Actually configure untiled displays
  - 2019-07-12 [ Alexey Brodkin  ]  ARC: define ARCH_SLAB_MINALIGN = 8
  - 2019-07-12 [ Eugeniy Paltsev  ]  ARC: U-boot: check arguments paranoidly
  - 2019-07-12 [ Eugeniy Paltsev  ]  ARCv2: Enable unaligned access in early ASM code
  - 2019-07-12 [ Dmitry V. Levin  ]  parisc: Fix ptrace syscall number modification
  - 2019-07-12 [ Eric Biggers  ]  KEYS: always initialize keyring_index_key::desc_len
  - 2019-07-12 [ Eric Biggers  ]  KEYS: user: Align the payload buffer
  - 2019-07-12 [ Bart Van Assche  ]  RDMA/srp: Rework SCSI device reset handling
  - 2019-07-12 [ Konstantin Khlebnikov  ]  inet_diag: fix reporting cgroup classid and fallback to priority
  - 2019-07-12 [ Saeed Mahameed  ]  net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames
  - 2019-07-12 [ Hangbin Liu  ]  sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()
  - 2019-07-12 [ Cong Wang  ]  team: avoid complex list operations in team_nl_cmd_options_set()
  - 2019-07-12 [ Xin Long  ]  sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment
  - 2019-07-12 [ Russell King  ]  net: sfp: do not probe SFP module before we're attached
  - 2019-07-12 [ Kal Conley  ]  net/packet: fix 4gb buffer limit due to overflow check
  - 2019-07-12 [ Tonghao Zhang  ]  net/mlx5e: Don't overwrite pedit action when multiple pedit used
  - 2019-07-12 [ Li RongQing  ]  ipv6: propagate genlmsg_reply return code
  - 2019-07-12 [ Eric Dumazet  ]  batman-adv: fix uninit-value in batadv_interface_tx()
  - 2019-07-12 [ Nathan Chancellor  ]  isdn: avm: Fix string plus integer warning from Clang
  - 2019-07-12 [ Tariq Toukan  ]  net/mlx5e: Fix wrong (zero) TX drop counter indication for representor
  - 2019-07-12 [ Ido Schimmel  ]  mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky
  - 2019-07-12 [ Peter Oskolkov  ]  bpf: bpf_setsockopt: reset sock dst on SO_MARK changes
  - 2019-07-12 [ Kangjie Lu  ]  leds: lp5523: fix a missing check of return value of lp55xx_read
  - 2019-07-12 [ Cheng-Min Ao  ]  hwmon: (tmp421) Correct the misspelling of the tmp442 compatible attribute in OF device ID table
  - 2019-07-12 [ Colin Ian King  ]  atm: he: fix sign-extension overflow on large shift
  - 2019-07-12 [ Julia Lawall  ]  drm/meson: add missing of_node_put
  - 2019-07-12 [ Talons Lee  ]  always clear the X2APIC_ENABLE bit for PV guest
  - 2019-07-12 [ Manish Rangankar  ]  scsi: qedi: Add ep_state for login completion on un-reachable targets
  - 2019-07-12 [ Stanley Chu  ]  scsi: ufs: Fix system suspend status
  - 2019-07-12 [ Jia-Ju Bai  ]  isdn: i4l: isdn_tty: Fix some concurrency double-free bugs
  - 2019-07-12 [ Jose Abreu  ]  net: stmmac: Fix PCI module removal leak
  - 2019-07-12 [ Yuchung Cheng  ]  bpf: correctly set initial window on active Fast Open sender
  - 2019-07-12 [ Thomas Bogendoerfer  ]  MIPS: jazz: fix 64bit build
  - 2019-07-12 [ Logan Gunthorpe  ]  scsi: isci: initialize shost fully before calling scsi_add_host()
  - 2019-07-12 [ YueHaibing  ]  scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param
  - 2019-07-12 [ Taehee Yoo  ]  netfilter: nf_tables: fix leaking object reference count
  - 2019-07-12 [ Alban Bedel  ]  MIPS: ath79: Enable OF serial ports in the default config
  - 2019-07-12 [ Yonglong Liu  ]  net: hns: Fix use after free identified by SLUB debug
  - 2019-07-12 [ Denis Bolotin  ]  qed: Fix qed_ll2_post_rx_buffer_notify_fw() by adding a write memory barrier
  - 2019-07-12 [ Denis Bolotin  ]  qed: Fix qed_chain_set_prod() for PBL chains with non power of 2 page count
  - 2019-07-12 [ YueHaibing  ]  xen/pvcalls: remove set but not used variable 'intf'
  - 2019-07-12 [ Kangjie Lu  ]  mfd: mc13xxx: Fix a missing check of a register-read failure
  - 2019-07-12 [ Keerthy  ]  mfd: tps65218: Use devm_regmap_add_irq_chip and clean up error path in probe()
  - 2019-07-12 [ Charles Keepax  ]  mfd: wm5110: Add missing ASRC rate register
  - 2019-07-12 [ Jonathan Marek  ]  mfd: qcom_rpm: write fw_version to CTRL_REG
  - 2019-07-12 [ Dien Pham  ]  mfd: bd9571mwv: Add volatile register to make DVFS work
  - 2019-07-12 [ Dan Carpenter  ]  mfd: ab8500-core: Return zero in get_register_interruptible()
  - 2019-07-12 [ Nicolas Boichat  ]  mfd: mt6397: Do not call irq_domain_remove if PMIC unsupported
  - 2019-07-12 [ Nathan Chancellor  ]  mfd: db8500-prcmu: Fix some section annotations
  - 2019-07-12 [ Nathan Chancellor  ]  mfd: twl-core: Fix section annotations on {,un}protect_pm_master
  - 2019-07-12 [ Stefano Stabellini  ]  pvcalls-back: set -ENOTCONN in pvcalls_conn_back_read
  - 2019-07-12 [ Vignesh R  ]  mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells
  - 2019-07-12 [ Eric Biggers  ]  KEYS: allow reaching the keys quotas exactly
  - 2019-07-12 [ Michal Hocko  ]  proc, oom: do not report alien mms when setting oom_score_adj
  - 2019-07-12 [ Ralph Campbell  ]  numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES
  - 2019-07-12 [ Yan, Zheng  ]  ceph: avoid repeatedly adding inode to mdsc->snap_flush_list
  - 2019-07-12 [ Ilya Dryomov  ]  libceph: handle an empty authorize reply
  - 2019-07-12 [ Herbert Xu  ]  mac80211: Free mpath object when rhashtable insertion fails
  - 2019-07-12 [ Rakesh Pillai  ]  mac80211: Restore vif beacon interval if start ap fails
  - 2019-07-12 [ Paul Burton  ]  MIPS: eBPF: Always return sign extended 32b values
  - 2019-07-12 [ Quentin Perret  ]  tracing: Fix number of entries in trace header
  - 2019-07-12 [ Mathieu Desnoyers  ]  ARM: 8834/1: Fix: kprobes: optimized kprobes illegal instruction
  - 2019-07-12 [ Eric Dumazet  ]  ax25: fix possible use-after-free
  - 2019-07-12 [ Eric Dumazet  ]  mISDN: fix a race in dev_expire_timer()
  - 2019-07-12 [ Eric Dumazet  ]  net/x25: do not hold the cpu too long in x25_new_lci()
  - 2019-07-12 [ Scott Mayhew  ]  sunrpc: fix 4 more call sites that were using stack memory with a scatterlist
  - 2019-07-12 [ Eric Dumazet  ]  tcp: clear icsk_backoff in tcp_write_queue_purge()
  - 2019-07-12 [ Alexander Duyck  ]  net: Do not allocate page fragments that are not skb aligned
  - 2019-07-12 [ Eric Dumazet  ]  tcp: tcp_v4_err() should be more careful
  - 2019-07-12 [ David S. Miller  ]  net: Add header for usage of fls64()
  - 2019-07-12 [ Jason Wang  ]  vhost: correctly check the return value of translate_desc() in log_used()
  - 2019-07-12 [ Kai-Heng Feng  ]  sky2: Increase D3 delay again
  - 2019-07-12 [ Alexandre Torgue  ]  net: stmmac: handle endianness in dwmac4_get_timestamp
  - 2019-07-12 [ Jose Abreu  ]  net: stmmac: Fix a race in EEE enable callback
  - 2019-07-12 [ Paul Kocialkowski  ]  net: phy: xgmiitorgmii: Support generic PHY status read
  - 2019-07-12 [ Hauke Mehrtens  ]  net: Fix for_each_netdev_feature on Big endian
  - 2019-07-12 [ Mao Wenan  ]  net: crypto set sk to NULL when af_alg_release.
  - 2019-07-12 [ Petr Machata  ]  mlxsw: __mlxsw_sp_port_headroom_set(): Fix a use of local variable
  - 2019-07-12 [ Wei Yongjun  ]  hwmon: (lm80) Fix missing unlock on error in set_fan_div()
  - 2019-07-12 [ Eric Dumazet  ]  vxlan: test dev->flags & IFF_UP before calling netif_rx()
  - 2019-07-12 [ Paolo Abeni  ]  vsock: cope with memory allocation failure at socket creation time
  - 2019-07-12 [ Lorenzo Bianconi  ]  net: ipv4: use a dedicated counter for icmp_v4 redirect packets
  - 2019-07-12 [ Zhiqiang Liu  ]  net: fix IPv6 prefix route residue
  - 2019-07-12 [ John David Anglin  ]  dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit
  - 2019-07-12 [ Hauke Mehrtens  ]  uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define
  - 2019-07-12 [ Christian Lamparter  ]  pinctrl: msm: fix gpio-hog related boot issues
  - 2019-07-12 [ Thomas Gleixner  ]  futex: Cure exit race
  - 2019-07-12 [ Pavankumar Kondeti  ]  sched, trace: Fix prev_state output in sched_switch tracepoint
  - 2019-07-12 [ Joonas Lahtinen  ]  drm/i915: Prevent a race during I915_GEM_MMAP ioctl with WC set
  - 2019-07-12 [ Nikos Tsironis  ]  dm thin: fix bug where bio that overwrites thin block ignores FUA
  - 2019-07-12 [ Mikulas Patocka  ]  dm crypt: don't overallocate the integrity tag space
  - 2019-07-12 [ Borislav Petkov  ]  x86/a.out: Clear the dump structure initially
  - 2019-07-12 [ Nate Dailey  ]  md/raid1: don't clear bitmap bits on interrupted recovery.
  - 2019-07-12 [ Eric W. Biederman  ]  signal: Restore the stop PTRACE_EVENT_EXIT
  - 2019-07-12 [ Hedi Berriche  ]  x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls
  - 2019-07-12 [ Andreas Ziegler  ]  tracing/uprobes: Fix output for multiple string arguments
  - 2019-07-12 [ Meelis Roos  ]  alpha: Fix Eiger NR_IRQS to 128
  - 2019-07-12 [ Sergei Trofimovich  ]  alpha: fix page fault handling for r16-r18 targets
  - 2019-07-12 [ Sandeep Patil  ]  mm: proc: smaps_rollup: fix pss_locked calculation
  - 2019-07-12 [ Matti Kurkela  ]  Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780
  - 2019-07-12 [ Jonathan Bakker  ]  Input: bma150 - register input device after setting private data
  - 2019-07-12 [ Xiaoyao Li  ]  kvm: vmx: Fix entry number check for add_atomic_switch_msr()
  - 2019-07-12 [ Manuel Reinhardt  ]  ALSA: usb-audio: Fix implicit fb endpoint setup by quirk
  - 2019-07-12 [ Jurica Vukadin  ]  ALSA: hda - Add quirk for HP EliteBook 840 G5
  - 2019-07-12 [ Jiri Olsa  ]  perf/x86: Add check_period PMU callback
  - 2019-07-12 [ Ingo Molnar  ]  perf/core: Fix impossible ring-buffer sizes warning
  - 2019-07-12 [ Mauro Ciancio  ]  Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK
  - 2019-07-12 [ Dmitry Torokhov  ]  Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G"
  - 2019-07-12 [ Ross Lagerwall  ]  cifs: Limit memory used by lock request calls to a page
  - 2019-07-12 [ Ilia Mirkin  ]  drm/nouveau/falcon: avoid touching registers if engine is off
  - 2019-07-12 [ Takashi Iwai  ]  drm/nouveau: Don't disable polling in fallback mode
  - 2019-07-12 [ Nicholas Mc Guire  ]  gpio: pl061: handle failed allocations
  - 2019-07-12 [ Linus Walleij  ]  ARM: dts: kirkwood: Fix polarity of GPIO fan lines
  - 2019-07-12 [ Peter Ujfalusi  ]  ARM: dts: da850-lcdk: Correct the sound card name
  - 2019-07-12 [ Peter Ujfalusi  ]  ARM: dts: da850-evm: Correct the sound card name
  - 2019-07-12 [ Liviu Dudau  ]  nvme-pci: use the same attributes when freeing host_mem_desc_bufs.
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: fix output H/V syncs
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: reject modes which require too much BW
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: fix initial DP0/1_SRCCTRL value
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: fix single lane configuration
  - 2019-07-12 [ Tomi Valkeinen  ]  drm/bridge: tc358767: add defines for DP1_SRCCTRL & PHY_2LANE
  - 2019-07-12 [ Sudeep Holla  ]  cpufreq: check if policy is inactive early in __cpufreq_get()
  - 2019-07-12 [ Arnaldo Carvalho de Melo  ]  perf test shell: Use a fallback to get the pathname in vfs_getname
  - 2019-07-12 [ Chao Fan  ]  ACPI: NUMA: Use correct type for printing addresses on i386-PAE
  - 2019-07-12 [ Daniel Axtens  ]  bnx2x: disable GSO where gso_size is too big for hardware
  - 2019-07-12 [ Daniel Axtens  ]  net: create skb_gso_validate_mac_len()
  - 2019-07-12 [ Russell King  ]  ARM: fix the cockup in the previous patch
  - 2019-07-12 [ Russell King  ]  ARM: ensure that processor vtables is not lost after boot
  - 2019-07-12 [ Russell King  ]  ARM: spectre-v2: per-CPU vtables to work around big.Little systems
  - 2019-07-12 [ Russell King  ]  ARM: add PROC_VTABLE and PROC_TABLE macros
  - 2019-07-12 [ Russell King  ]  ARM: clean up per-processor check_bugs method call
  - 2019-07-12 [ Russell King  ]  ARM: split out processor lookup
  - 2019-07-12 [ Russell King  ]  ARM: make lookup_processor_type() non-__init
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8810/1: vfp: Fix wrong assignement to ufp_exc
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8797/1: spectre-v1.1: harden __copy_to_user
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8796/1: spectre-v1,v1.1: provide helpers for address sanitization
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8795/1: spectre-v1.1: use put_user() for __put_user()
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8794/1: uaccess: Prevent speculative use of the current addr_limit
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8793/1: signal: replace __put_user_error with __put_user
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8792/1: oabi-compat: copy oabi events using __copy_to_user()
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8791/1: vfp: use __copy_to_user() when saving VFP state
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8790/1: signal: always use __copy_to_user to save iwmmxt context
  - 2019-07-12 [ Julien Thierry  ]  ARM: 8789/1: signal: copy registers using __copy_to_user()
  - 2019-07-12 [ Hauke Mehrtens  ]  uapi/if_ether.h: prevent redefinition of struct ethhdr
  - 2019-07-12 [ Jianchao Wang  ]  blk-mq: fix a hung issue when fsync
  - 2019-07-12 [ Adrian Bunk  ]  eeprom: at24: add support for 24c2048
  - 2019-07-12 [ Adrian Bunk  ]  dt-bindings: eeprom: at24: add "atmel,24c2048" compatible string
  - 2019-07-12 [ Linus Torvalds  ]  Revert "exec: load_script: don't blindly truncate shebang string"
  - 2019-07-12 [ Xiubo Li  ]  Revert "uio: use request_threaded_irq instead"
  - 2019-07-12 [ Xiubo Li  ]  uio: fix possible circular locking dependency
  - 2019-07-12 [ Hailong Liu  ]  uio: fix wrong return value from uio_mmap()
  - 2019-07-12 [ Xiubo Li  ]  uio: fix crash after the device is unregistered
  - 2019-07-12 [ Xiubo Li  ]  uio: change to use the mutex lock instead of the spin lock
  - 2019-07-12 [ Xiubo Li  ]  uio: use request_threaded_irq instead
  - 2019-07-12 [ Hamish Martin  ]  uio: Prevent device destruction while fds are open
  - 2019-07-12 [ Hamish Martin  ]  uio: Reduce return paths from uio_write()
  - 2019-07-12 [ Jiri Olsa  ]  perf tests attr: Make hw events optional
  - 2019-07-12 [ Jiri Olsa  ]  perf tests attr: Fix group stat tests
  - 2019-07-12 [ Jiri Olsa  ]  perf tests attr: Fix task term values
  - 2019-07-12 [ Sven Eckelmann  ]  batman-adv: Force mac header to start of data on xmit
  - 2019-07-12 [ Sven Eckelmann  ]  batman-adv: Avoid WARN on net_device without parent in netns
  - 2019-07-12 [ Florian Westphal  ]  xfrm: refine validation of template and selector families
  - 2019-07-12 [ Ilya Dryomov  ]  libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive()
  - 2019-07-12 [ Theodore Ts'o  ]  Revert "ext4: use ext4_write_inode() when fsyncing w/o a journal"
  - 2019-07-12 [ Vladis Dronov  ]  HID: debug: fix the ring buffer implementation
  - 2019-07-12 [ Thomas Hellstrom  ]  drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
  - 2019-07-12 [ Thomas Hellstrom  ]  drm/vmwgfx: Fix setting of dma masks
  - 2019-07-12 [ Tina Zhang  ]  drm/modes: Prevent division by zero htotal
  - 2019-07-12 [ Felix Fietkau  ]  mac80211: ensure that mgmt tx skbs have tailroom for encryption
  - 2019-07-12 [ Marc Gonzalez  ]  ARM: tango: Improve ARCH_MULTIPLATFORM compatibility
  - 2019-07-12 [ Russell King  ]  ARM: iop32x/n2100: fix PCI IRQ mapping
  - 2019-07-12 [ Paul Burton  ]  MIPS: VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds
  - 2019-07-12 [ Aaro Koskinen  ]  MIPS: OCTEON: don't set octeon_dma_bar_type if PCI is disabled
  - 2019-07-12 [ Vladimir Kondratiev  ]  mips: cm: reprime error cause
  - 2019-07-12 [ Andreas Ziegler  ]  tracing: uprobes: Fix typo in pr_fmt string
  - 2019-07-12 [ Greg Kroah-Hartman  ]  debugfs: fix debugfs_rename parameter checking
  - 2019-07-12 [ Tomas Winkler  ]  samples: mei: use /dev/mei0 instead of /dev/mei
  - 2019-07-12 [ Dan Carpenter  ]  misc: vexpress: Off by one in vexpress_syscfg_exec()
  - 2019-07-12 [ Eric W. Biederman  ]  signal: Better detection of synchronous signals
  - 2019-07-12 [ Eric W. Biederman  ]  signal: Always notice exiting tasks
  - 2019-07-12 [ Matt Ranostay  ]  iio: chemical: atlas-ph-sensor: correct IIO_TEMP values to millicelsius
  - 2019-07-12 [ Hans de Goede  ]  iio: adc: axp288: Fix TS-pin handling
  - 2019-07-12 [ Martin Kepplinger  ]  mtd: rawnand: gpmi: fix MX28 bus master lockup problem
  - 2019-07-12 [ LiuHua  ]  cpuset: Compatible with ARM arch
  - 2019-07-12 [ Songqiao Tao  ]  package: update spec, mark kernel rpm of centos as obsolete
  - 2019-07-12 [ Xiaoming Gao  ]  config: open CONFIG_USER_NS
  - 2019-07-12 [ brookxu  ]  pagecachelimit: page cache reclaim asynchronous
  - 2019-07-12 [ brookxu  ]  pagecachelimit: limit the pagecache ratio of totalram
  - 2019-07-12 [ brookxu  ]  expose taskstats to all netspace
  - 2019-07-12 [ kaixuxia  ]  mounts: add shield mountpoint in container support
  - 2019-07-12 [ kaixuxia  ]  xfs: add kmem_alloc_by_vmalloc and kmem_alloc_large_dump_stack sysctl
  - 2019-07-12 [ Xiaoming Gao  ]  xfs: set xfs default error level to 5
  - 2019-07-12 [ LiuHUa  ]  vm:isolate max_map_count by pid namespace
  - 2019-07-12 [ LiuHUa  ]  wathdog: add symbol info when panic by hard lockup
  - 2019-07-12 [ LiuHUa  ]  ioapic: add pr_info in __assign_irq_vector when vector not assigned
  - 2019-07-12 [ LiuHUa  ]  irq: add more info when interrupt cannot find handler
  - 2019-07-12 [ LiuHUa  ]  cpuset: add loadavg calc for each container
  - 2019-07-12 [ LiuHUa  ]  cpuset: add cpuinfo and stat show
  - 2019-07-12 [ Xiaoming Gao  ]  signal: add print_fatal_signals_src_dst sysctl to switch dump fatal signals from sender side
  - 2019-07-12 [ Lorin Liu  ]  proc: add pid mapping between host and container
  - 2019-07-12 [ chen xiaoguang  ]  memcg: add meminfo and vmstat show
  - 2019-07-12 [ herberthbli  ]  net: namespaceify sysctl_tcp_rmem and sysctl_tcp_wmem
  - 2019-07-12 [ herberthbli  ]  net: allow per netns sysctl_rmem and sysctl_wmem for protos
  - 2019-07-12 [ herberthbli  ]  net: namespaceify sysctl_tcp_workaround_signed_windows
  - 2019-07-12 [ herberthbli  ]  net: namespaceify sysctl_tcp_max_orphans
  - 2019-07-12 [ herberthbli  ]  net: namespaceify sysctl_tcp_no_delay_ack
  - 2019-07-12 [ Xiaoming Gao  ]  package: update spec
  - 2019-07-12 [ Xiaoming Gao  ]  config: open virtulization
  - 2019-07-12 [ Xiaoming Gao  ]  package: add package files
  - 2019-07-12 [ Xiaoming Gao  ]  Makefile: add extra version
  - 2019-07-12 [ Xiaoming Gao  ]  net: add toa support
  - 2019-07-12 [ Xiaoming Gao  ]  xfs: set XFS_BUF_LOCK_TRACKING to 1 as default
  - 2019-07-12 [ Liu Yu  ]  pci: prohibit storage probe delay of virtio block device
  - 2019-07-12 [ Xiaoming Gao  ]  numa: change syctl_numa_balancing_scan_size_mb default value to 0
  - 2019-07-12 [ Xiaoming Gao  ]  pci: add probe delay between two network adapters when network-strict-sort parameter set
  - 2019-07-12 [ Xiaoming Gao  ]  ipmi: set kipmid_max_busy_us default to 1
  - 2019-07-12 [ Shan Wei  ]  tcp: kill the limit for init cwnd
  - 2019-07-12 [ Shan Wei  ]  tcp: fix the bug of tcp hash size tuning down
  - 2019-07-12 [ Xiaoming Gao  ]  conntrack: add netagent extention slot.
  - 2019-07-12 [ Xiaoming Gao  ]  block: check whether queue is NULL or not in stats functions
  - 2019-07-12 [ Xiaoming Gao  ]  hw_ssd: add hw_ssd driver
  - 2019-07-12 [ Samuel Liao  ]  netlink: don't modprobe proto audit & selinux
  - 2019-07-12 [ Shan Wei  ]  tcp: add proc parameter to change init cwnd
  - 2019-07-12 [ Xiaoming Gao  ]  net: add tcp_no_delay_ack to enable absolute quick ack
  - 2019-07-12 [ Xiaoming Gao  ]  tcp: add tcp_loss_init_cwnd sysctl to tunnel packet numbers in loss
  - 2019-07-12 [ Samuel Liao  ]  sched: adaptive default skew_tick value
  - 2019-07-12 [ Samuel Liao  ]  epoll: introduce min_wait_time
  - 2019-07-12 [ Xiaoming Gao  ]  net bridge: add null pointer check,fix panic
  - 2019-07-12 [ Lingling Song  ]  network: Default zero bond_devices to support
  - 2019-07-12 [ Mojiong Qiu  ]  nf_conntrack: adjust nf_conntrack_max default value
  - 2019-07-12 [ Xiaoming Gao  ]  tkernel: control nonpriv bind port below 1024
  - 2019-07-12 [ Xiaoming Gao  ]  tkernel: create top proc & sysctl directory
  - 2019-07-12 [ Mojiong Qiu  ]  Increase dirty-ratio from 20 to 40
  - 2019-07-12 [ Xiaoming Gao  ]  Double the default value of thash_entries
  - 2019-07-12 [ Xiaoming Gao  ]  Backoff the commit allowing timestamps even if SYN packet has tsval=0
  - 2019-07-12 [ Chris Mason  ]  increase defaults for shmmall, shmmax, msgmax and msgmnb
  - 2019-07-12 [ Xiaoming Gao  ]  mpt3sas: sort sas by slot before sas_attach
  - 2019-07-12 [ Xiaoming Gao  ]  backport: add backport_remove_lists.txt
  - 2019-07-12 [ Xiaoming Gao  ]  dmi_probe: disable breadfirst sort of pci device on dmi Vendor "Dell Inc"
  - 2019-07-12 [ Samuel Liao  ]  hpsa: root=cciss/c0d0pX compatiblilty
  - 2019-07-12 [ Xiaoming Gao  ]  dell: AHCI should be loaded before mpt2sas
  - 2019-07-12 [ Samuel Liao  ]  pci: delay 5s to proble multiple storage controllers
  - 2019-07-12 [ Xiaoming Gao  ]  module: change same_magic to be more strictly
  - 2019-07-12 [ Xiaoming Gao  ]  sysrq: fix warning
  - 2019-07-12 [ Xiaoming Gao  ]  sysrq: add ALT+LEFTCTRL to trigger crash dump
  - 2019-07-12 [ Xiaoming Gao  ]  Init Repo base on 4.14.99 long term commit 383e9b61f85cc8e5f1fcb1493d95f826a2fa736e Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Date:   Tue Feb 12 19:46:14 2019 +0100


