# changelog

author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1
changelog:
  - tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
  - Add LRO_OFFLINE
  - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
  - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
  - Add LR_VERSION constant with version string
  - python: Import contants from C librepo module in a loop
  - repoconf: Add support for failover and skip_if_unavailable options
  - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
  - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
  - util: Add lr_is_local_path()
  - New module repoconf for reading *.repo files
  - Add LRO_HTTPHEADER option (RhBug: 1181123)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1
changelog:
  - Do not inlude header in the body output (RhBug: 1207685)
  - metalink: Proper error handling
  - New LRR_RPMMD_* contants
  - Support for client certificates
  - Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
  - CMakeLists.txt: do not check for CXX
  - build: Use solely pkg-config to find glib


author: Colin Walters <tmlcoch@redhat.com> - 1.7.16-1
changelog:
  - Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
  - downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
  - test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
  - repoconf: Proper handling of gint64 and guint64 types
  - build: Be compatible with cmake 2.8
  - handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
  - utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
  - Python: call lr_global_init() during module initialization
  - Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
  - util: Honor RFC 3986 (Issue #55)


author: Marek Blaha <mblaha@redhat.com> - 1.8.1-1
changelog:
  - Add yumrecord substitution mechanism (mluscon)
  - Fix a memory leak in signature verification (cwalters)
  - Add new option LRO_FTPUSEEPSV
  - downloader prepare_next_transfer(): simplify long line
  - downloader prepare_next_transfer(): add missing error check
  - downloader prepare_next_transfer(): cleanup error path
  - downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
  - handle: Don't use proxy cache for downloads of metalink/mirrorlist
  - handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
  - downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
  - Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
  - New test: always try to download from the fastest mirror (Alexander Todorov)


author: Lukas Nykryn <lnykryn@redhat.com> - 033-546
changelog:
  - fcoe: handle CNAs with DCB firmware support
  Resolves: #1442663
  - mdraid: wait for rd.md.uuid specified devices to be assembled
  Resolves: #1451660
  - dracut: Introduce --force-drivers parameter and force_drivers=+ config option
  Resolves: #1577626
  - Skip iscsi attachment if no info
  Resolves: #1513397
  - Fix loading of modules in modules-load.d
  Resolves: #1547730
  - 40network: introduce ip=either6 option
  Resolves: #1582398
  - dracut-functions.sh:check_vol_slaves() speedup LV -> VG name
  Resolves: #1531503
  - dracut-function.sh:check_block_and_slaves() check for block devices
  Resolves: #1549498
  - net-lib: bump carrier timeout to 15
  Resolves: #1401811
  - dracut.sh: workaround broken read from /proc/modules
  Resolves: #1578222


author: Lukas Nykryn <lnykryn@redhat.com> - 033-551
changelog:
  - Revert "add 90multipath-hostonly module"
  - Introduce tri-state hostonly mode
  Resolves: #1599592
  - Correct paths for firmware
  Resolves: #1608491
  - Record loaded kernel modules when hostonly mode is enabled
  Resolves: #1607744


author: Andreas Schneider <asn@redhat.com> - 4.8.1-1
changelog:
  - related: #1558560 - Rebase to newer Samba version
  - resolves: #1567896 - Fix possible crash if secrets db is emtpy
  - resolves: #1570020 - Fix a crash in smbd when dfsgetinfo is called


author: Andreas Schneider <asn@redhat.com> - 4.8.1-3
changelog:
  - resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
  - resolves: #1525511 - Fix idmap_rid dependency on trusted domain list


author: Andreas Schneider <asn@redhat.com> - 4.8.3-1
changelog:
  - related: #1558560 - Rebase to Samba version 4.8.3
  - resolves: #1579398 - Add winbind localauth krb5 plugin


author: Andreas Schneider <asn@redhat.com> - 4.8.3-4
changelog:
  - resolves: #1614132 - Fix delete-on-close after smb2_find
  - resolves: #1614265 - Fix CVE-2018-1139
  - resolves: #1614269 - Fix CVE-2018-10858


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-33
changelog:
  - Repair of --noghost option implementation (#1395818)
  - Backport fix rpmSign() return value in case of failure (#1419590)
  - Backport passing _find_debuginfo_opts -g to eu-strip for executables
    (#1540653)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-34
changelog:
  - Adjust --noghost documentation (#1395818)
  - Provide audit events on update verification (#1555326)


author: David Shea <dshea@redhat.com> - 0.26.3-2
changelog:
  - Initial package for Red Hat Enterprise Linux 7
    Resolves: rhbz#1548043
  - Remove the compatibility .so file from the EPEL package
    Related: rhbz#1548043


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-12.5
changelog:
  - rabbitmq-cluster: get cluster status from mnesia during monitor
  - rabbitmq-cluster: fail monitor when node is in minority partition

    Resolves: rhbz#1641944
    Resolves: rhbz#1641946


author: Andrew Price <anprice@redhat.com> - 3.1.10-9
changelog:
  - fsck.gfs2: Don't check fs formats we don't recognise
  - libgfs2: Fix pointer cast byte order issue
    Resolves: rhbz#1616389


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.77.1-1
changelog:
  - bump upstream package, see https://pagure.io/clufter/releases
  - build for aarch64
    [rhbz#1569111]


author: Jarod Wilson <jarod@redhat.com> 15-7
changelog:
  - i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
    causing problems with suspend and resume, and fall back to load via
    systemd rdma initscript.
  - Resolves: rhbz#1561566


author: Jarod Wilson <jarod@redhat.com> 17.1-1
changelog:
  - Rebase to upstream rdma-core v17.1 stable release
  - No more libibcm or ib sysv initscripts
  - Resolves: rhbz#1515647
  - Resolves: rhbz#1517208
  - Resolves: rhbz#1523201
  - Resolves: rhbz#1541751


author: Jarod Wilson <jarod@redhat.com> 17.1-3
changelog:
  - Grab latest stable-v17 fixes from upstream
  - Fix Provides/Obsoletes on removed libibcm
  - Fix Provides/Obsoletes on removed libehca
  - Straighten out SW parsing feature support for DPDK
  - Fix mlx5 rate-limiting support
  - Resolves: rhbz#1588096
  - Resovles: rhbz#1534856
  - Resolves: rhbz#1589525


author: Jarod Wilson <jarod@redhat.com> 17.2-2
changelog:
  - Restore SysV Initscripts ib ifup and ifdown helpers
  - Adjust MTU limit for IPoIB in datagram mode via ifup-ib
  - Resolves: rhbz#1593426
  - Resolves: rhbz#1593334


author: John Dennis <jdennis@redhat.com> - 0.13.1-2
changelog:
  - Resolves: rhbz#1481330 Add diagnostic logging
  - Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
    signature method used to sign SAML messages sent by Mellon.
    Defaults to original sha1.


author: Phil Sutter - 1.4.21-25
changelog:
  - Fix for stopping iptables and ip6tables at the same time (RHBZ#1560012)
  - Propagate errors on service stop (RHBZ#1560012)


author: Phil Sutter - 1.4.21-27
changelog:
  - libxt_tcpmss: Detect invalid ranges (RHBZ#1128510)
  - ip(6)tables-save/restore: Exit if invalid option was given (RHBZ#1465078)
  - ip(6)tables-save/restore: Require value to -W option (RHBZ#1465078)
  - ip(6)tables-save/restore: Don't accept -W without -w (RHBZ#1465078)
  - Ignore security table when setting policies (RHBZ#1494012)
  - Fix spec file changing SRPM content (RHBZ#1531290)


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-27
changelog:
  - fix CVE-2014-0207 - cdf_read_short_sector insufficient boundary check
  - fix CVE-2014-0237 - cdf_unpack_summary_info() excessive looping DoS
  - fix CVE-2014-0238 - CDF property info parsing nelements infinite loop
  - fix CVE-2014-3478 - mconvert incorrect handling of truncated pascal string
  - fix CVE-2014-3479 - fix extensive backtracking in regular expression
  - fix CVE-2014-3480 - cdf_count_chain insufficient boundary check
  - fix CVE-2014-3487 - cdf_read_property_info insufficient boundary check
  - fix CVE-2014-3538 - unrestricted regular expression matching
  - fix CVE-2014-3587 - fix cdf_read_property_info
  - fix CVE-2014-3710 - out-of-bounds read in elf note headers
  - fix CVE-2014-8116 - multiple denial of service issues (resource consumption)
  - fix CVE-2014-8117 - denial of service issue (resource consumption)
  - fix CVE-2014-9652 - out of bounds read in mconvert()
  - fix CVE-2014-9653 - malformed elf file causes access to uninitialized memory


author: Jan Kaluza <jkaluza@redhat.com> 5.11-32
changelog:
  - fix #1278737 - add support for Java 1.7 and 1.8
  - fix #1281723 - show full executable name for core
  - fix #1271636 - add support for detection of Python 2.7 byte-compiled files
  - fix #1278768 - comment out too-sensitive Pascal magic


author: Michal Židek <mzidek@redhat.com> - 0.6.1-30
changelog:
  - Adopting to use Downstream Helper for bellow BZ backport
  - Related: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Michal Židek <mzidek@redhat.com> - 0.6.1-31
changelog:
  - Resolves: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Michal Židek <mzidek@redhat.com> - 0.6.1-32
changelog:
  - Previous change in spec file broke the application of downstream only patch
  - Related: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Bump to v1.3
  - Vendor in lates containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Bump to v1.2-dev
  - Add registries.conf link to a few man pages


author: Sinny Kumari <skumari@redhat.com> - 2.4.16.1-1
changelog:
  - Resolves: #1587834 - vpdupdate takes over an hour on system with 104 drive
  - Resolves: #1521052 - iprutils package update for POWER
  - Resolves: #1547891 - iprconfig unable to Download microcode on all applicable devices
  - Resolves: #1576013 - iprconfig tools shows wrong error message, while creating raid using RI SSDs and normal SSDs


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-1
changelog:
  - Rebase to version 2.4, drop patches integrated upstream
    Resolves #1534646 #1484051 #1498828 #1571266 #1496518


author: Michal Ruprich <mruprich@redhat.com> - 0.17-78
changelog:
  - Resolves: #1502657 - Copying remote file to local dir fails with "rcp: protocol screwup: expected control record"
  - Resolves: #1338037 - rsh/rlogin sessions ignore SIGPIPE due to systemd
  - Resolves: #1477207 - rlogin killed when changing run level
  - Resolves: #1503112 - rexecd Could not allocate space for cmdbuf
  - Resolves: #1505226 - have a proposed patch for rsh-0.17-76.el7_1.1


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-12
changelog:
  - Pull in latest fixes from upstream 1.1 branch
  - Build for aarch64
  - Resolves: rhbz#1422602
  - Resolves: rhbz#1463015
  - Resolves: rhbz#1469255
  - Resolves: rhbz#1519379
  - Resolves: rhbz#1543278
  - Resolves: rhbz#1545449
  - Resolves: rhbz#1550829
  - Resolves: rhbz#1561617
  - Resolves: rhbz#1562255
  - Resolves: rhbz#1565187
  - Resolves: rhbz#1568593
  - Resolves: rhbz#1570130


author: Bastien Nocera <bnocera@redhat.com> - 1:3.28.1-1
changelog:
  + gnome-bluetooth-3.28.1-1
  - Work-around bluez bug that would leave adapters on Discoverable
    when exiting
  - Resolves: #1567381


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-2.el7
changelog:
  - Resolves: #1594142 SRV lookup doesn't correctly sort results
    - Sort and shuffle SRV record by priority and weight
  - Resolves: #1594141 Replication races in DogtagInstance.setup_admin
    - Fix replication races in Dogtag admin code
    - Use common replication wait timeout of 5min
    - Improve and fix timeout bug in wait_for_entry()
  - Resolves: #1591824 Installation of replica against a specific master
    - Always set ca_host when installing replica
  - Resolves: #1591647 Increase WSGI worker process count
    - Increase WSGI process count to 5 on 64bit
  - Resolves: #1394034 Custom SELinux User Map order is changed after updating IPA
    - Use replace instead of add to set new default ipaSELinuxUserMapOrder
  - Resolves: #1381535 ipa config-mod returns "Configured size limit exceeded"
    - ipaserver config plugin: Increase search records minimum limit


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.4-3.el7
changelog:
  - Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-4.el7
changelog:
  - Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
    - ipa client uninstall: clean the state store when restoring hostname
  - Resolves: #1598117 client uninstall fails when installed using non-existing hostname
    - ipa client uninstall: clean the state store when restoring hostname
  - Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
    - Fix regression: Handle unicode where str is expected
  - Resolves: #1591824 Installation of replica against a specific master
    - Query for server role IPA master
    - Only create DNS SRV records for ready server
    - Delay enabling services until end of installer
    - replicainstall: DS SSL replica install pick right certmonger host
    - Fix CA topology warning
    - Fix race condition in get_locations_records()
    - Fix DNSSEC install regression
    - Handle races in replica config
  - Resolves: #1591647 Increase WSGI worker process count
    - Use 4 WSGI workers on 64bit systems
  - Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
    - Tune DS replication settings
  - Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in <module>#012
    - Removing filesystem encoding check
  - Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
    - Removing filesystem encoding check


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-5.el7
changelog:
  - Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in <module>#012
    - Removing filesystem encoding check
  - Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
    - Removing filesystem encoding check


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-6.el7
changelog:
  - Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
    - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
  - Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
    - Re-open the ldif file to prevent error message
  - Resolves: #1608783 ipa trust-add fails in FIPS mode.
    - Move fips_enabled to a common library to share across different plugins
    - ipasam: do not use RC4 in FIPS mode


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-7.el7
changelog:
  - Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
    - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
  - Resolves: #1598662 Replica installation fails with connection refused error 
    - Do not set ca_host when --setup-ca is used
  - Resolves: #1577108 Improve Custodia client and key distribution handling
    - Fix KRA replica installation from CA master
  - Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
    - Fix ipa-replica-install when key not protected by PIN
  - Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
    - uninstall -v: remove Tracebacks
  - Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
    - ipa commands: print 'IPA is not configured' when ipa is not setup
    - Disable message about log in ipa-backup if IPA is not configured
  - Resolves: #1591824 Installation of replica against a specific master
    - Do not set ca_host when --setup-ca is used
  - Resolves: #1594141 Replication races in DogtagInstance.setup_admin
    - Catch ACIError instead of invalid credentials
  - Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
    - DS replication settings: fix regression with <3.3 master
  - Resolves: #1623113 Replica install: certmonger sometimes fails
    - Wait for client certificates
    - Auto-retry failed certmonger requests


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-8.el7
changelog:
  - Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
    - Clear next field when returnining list elements in queue.c
    - Add cmocka unit tests for ipa otpd queue code
  - Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
    - Clear next field when returnining list elements in queue.c
    - Add cmocka unit tests for ipa otpd queue code
  - Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
    - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-9.el7
changelog:
  - Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
    - ipa-replica-install: properly use the file store
  - Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
    - ipa-replica-install: fix pkinit setup
  - Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
    - Update minimum selinux-policy to 3.13.1-224


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-10.el7
changelog:
  - Resolves: 1630361 PKINIT fails in FIPS mode
    - Ensure that public cert and CA bundle are readable
    - Always make ipa.p11-kit world-readable
    - Make /etc/httpd/alias world readable & executable
    - Fix permission of public files in upgrader


author: Nathan Scott <nathans@redhat.com> - 4.0.2-1
changelog:
  - Ensure sans font dependency resolved for webapps (BZ 1568109)
  - Ensure sans font dependency resolved for pmchart (BZ 1546640)
  - Update to latest PCP sources (BZ 1565370).


author: Nathan Scott <nathans@redhat.com> - 4.0.2-3
changelog:
  - Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
  - Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
  - Fix pmlogger_daily log rotation open port issue (BZ 1579881)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-9.el7
changelog:
  - kvm-Disable-aarch64-devices-reappeared-after-2.12-rebase.patch [bz#1586357]
  - kvm-Disable-split-irq-device.patch [bz#1586357]
  - kvm-Disable-AT24Cx-i2c-eeprom.patch [bz#1586357]
  - kvm-Disable-CAN-bus-devices.patch [bz#1586357]
  - kvm-Disable-new-superio-devices.patch [bz#1586357]
  - kvm-Disable-new-pvrdma-device.patch [bz#1586357]
  - kvm-Disable-PCIe-to-PCI-bridge-device.patch [bz#1586357]
  - kvm-qdev-add-HotplugHandler-post_plug-callback.patch [bz#1607891]
  - kvm-virtio-scsi-fix-hotplug-reset-vs-event-race.patch [bz#1607891]
  - kvm-i386-Allow-TOPOEXT-to-be-enabled-on-older-kernels.patch [bz#1608698]
  - kvm-e1000-Fix-tso_props-compat-for-82540em.patch [bz#1608778]
  - kvm-Revert-redhat-support-POWER8-on-POWER9-settings-in-k.patch [bz#1607443]
  - kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586255]
  - kvm-s390x-sclp-fix-maxram-calculation.patch [bz#1595740]
  - kvm-Fix-update-of-qemu-kvm-tools.patch [bz#1598104]
  - Resolves: bz#1586255
    (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])
  - Resolves: bz#1586357
    (Disable new devices in 2.12)
  - Resolves: bz#1595740
    (RHEL-Alt-7.6 - qemu has error during migration of larger guests)
  - Resolves: bz#1598104
    (Upgrade failed from qemu-kvm-tools-rhev-2.12.0-6.el7 to qemu-kvm-tools-rhev-2.12.0-7.el7)
  - Resolves: bz#1607443
    (qemu-kvm-rhev: Remove POWER8-on-POWER9 settings from kvm-setup)
  - Resolves: bz#1607891
    (Hotplug events are sometimes lost with virtio-scsi + iothread)
  - Resolves: bz#1608698
    (topoext support should not require kernel support)
  - Resolves: bz#1608778
    (qemu/migration: migrate failed from RHEL.7.6 to RHEL.7.5 with e1000-82540em)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-10.el7
changelog:
  - kvm-qemu-img-Add-C-option-for-convert-with-copy-offloadi.patch [bz#1607774]
  - kvm-iotests-Add-test-for-qemu-img-convert-C-compatibilit.patch [bz#1607774]
  - kvm-qemu-img-Fix-assert-when-mapping-unaligned-raw-file.patch [bz#1601310]
  - kvm-iotests-Add-test-221-to-catch-qemu-img-map-regressio.patch [bz#1601310]
  - kvm-pc-acpi-fix-memory-hotplug-regression-by-reducing-st.patch [bz#1609234]
  - kvm-block-qapi-Add-qdev-field-to-query-blockstats-result.patch [bz#1612114]
  - kvm-block-qapi-Include-anonymous-BBs-in-query-blockstats.patch [bz#1612114]
  - kvm-qemu-iotests-Test-query-blockstats-with-drive-and-bl.patch [bz#1612114]
  - kvm-Add-local-build-configure-for-s390x.patch [bz#1573135]
  - kvm-Update-build-configuration.patch [bz#1573135]
  - kvm-Update-local-build-to-work-with-2.12.0-configuration.patch [bz#1573135]
  - kvm-Ensure-all-iotests-are-executable-on-build-from-srpm.patch [bz#1608229]
  - Resolves: bz#1573135
    (Update build configure for QEMU 2.12.0)
  - Resolves: bz#1601310
    (qemu-img map 'Aborted (core dumped)' when specifying a plain file)
  - Resolves: bz#1607774
    (Target files for 'qemu-img convert' do not support thin_provisoning with iscsi/nfs backend)
  - Resolves: bz#1608229
    (Parts of iotest cases in SRPM don't have execute permission)
  - Resolves: bz#1609234
    (Win2016 guest can't recognize pc-dimm hotplugged to node 0)
  - Resolves: bz#1612114
    (Anonymous BlockBackends are missing in query-blockstats)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-11.el7
changelog:
  - kvm-slirp-reformat-m_inc-routine.patch [bz#1586255]
  - kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586255]
  - kvm-Revert-Disable-PCIe-to-PCI-bridge-device.patch [bz#1390329]
  - kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1562750]
  - kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1562750]
  - Resolves: bz#1390329
    (PCIe: Add Generic PCIe-PCI bridge)
  - Resolves: bz#1562750
    (VM doesn't boot from HD)
  - Resolves: bz#1586255
    (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-12.el7
changelog:
  - kvm-e1000e-Do-not-auto-clear-ICR-bits-which-aren-t-set-i.patch [bz#1596010]
  - kvm-e1000e-Prevent-MSI-MSI-X-storms.patch [bz#1596010]
  - kvm-hw-usb-dev-smartcard-reader-Handle-64-B-USB-packets.patch [bz#1589147]
  - kvm-i386-Disable-TOPOEXT-by-default-on-cpu-host.patch [bz#1613277]
  - kvm-RHEL-Disable-transparent-hugepages-on-POWER8-KVM-hos.patch [bz#1620378]
  - Resolves: bz#1589147
    (Handle 64 B USB packets for Smart Card redirection)
  - Resolves: bz#1596010
    (The network link can't be detected on guest when the guest uses e1000e model type)
  - Resolves: bz#1613277
    (kernel panic in init_amd_cacheinfo)
  - Resolves: bz#1620378
    (qemu-kvm-rhev: Failed to allocate KVM HPT with vfio device enabled - disable THP for POWER8 guests)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-13.el7
changelog:
  - kvm-linux-headers-asm-s390-kvm.h-header-sync.patch [bz#1622962]
  - kvm-s390x-kvm-add-etoken-facility.patch [bz#1622962]
  - kvm-block-for-jobs-do-not-clear-user_paused-until-after-.patch [bz#1605026]
  - kvm-iotests-Add-failure-matching-to-common.qemu.patch [bz#1605026]
  - kvm-block-iotest-to-catch-abort-on-forced-blockjob-cance.patch [bz#1605026]
  - kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574216]
  - kvm-target-i386-sev-fix-memory-leaks.patch [bz#1624390]
  - kvm-i386-Fix-arch_query_cpu_model_expansion-leak.patch [bz#1624390]
  - kvm-migration-discard-non-migratable-RAMBlocks.patch [bz#1539280]
  - kvm-vfio-pci-do-not-set-the-PCIDevice-has_rom-attribute.patch [bz#1539280]
  - kvm-memory-exec-Expose-all-memory-block-related-flags.patch [bz#1539280]
  - kvm-memory-exec-switch-file-ram-allocation-functions-to-.patch [bz#1539280]
  - kvm-configure-add-libpmem-support.patch [bz#1539280]
  - kvm-hostmem-file-add-the-pmem-option.patch [bz#1539280]
  - kvm-mem-nvdimm-ensure-write-persistence-to-PMEM-in-label.patch [bz#1539280]
  - kvm-migration-ram-Add-check-and-info-message-to-nvdimm-p.patch [bz#1539280]
  - kvm-migration-ram-ensure-write-persistence-on-loading-al.patch [bz#1539280]
  - kvm-intel-iommu-send-PSI-always-even-if-across-PDEs.patch [bz#1623859]
  - kvm-intel-iommu-remove-IntelIOMMUNotifierNode.patch [bz#1623859]
  - kvm-intel-iommu-add-iommu-lock.patch [bz#1623859]
  - kvm-intel-iommu-only-do-page-walk-for-MAP-notifiers.patch [bz#1623859]
  - kvm-intel-iommu-introduce-vtd_page_walk_info.patch [bz#1623859]
  - kvm-intel-iommu-pass-in-address-space-when-page-walk.patch [bz#1623859]
  - kvm-intel-iommu-trace-domain-id-during-page-walk.patch [bz#1623859]
  - kvm-util-implement-simple-iova-tree.patch [bz#1623859]
  - kvm-intel-iommu-rework-the-page-walk-logic.patch [bz#1623859]
  - kvm-qemu-img-fix-regression-copying-secrets-during-conve.patch [bz#1575578]
  - kvm-redhat-rewrap-build_configure.sh-cmdline-for-the-rh-.patch [bz#1500753]
  - kvm-redhat-enable-opengl-for-x86_64.patch [bz#1500753]
  - Resolves: bz#1500753
    ([RFE] Support console on Intel vGPU - qemu)
  - Resolves: bz#1539280
    ([Intel 7.6 Bug] [KVM][Crystal Ridge] Lack of data persistence guarantee of QEMU writes to host PMEM)
  - Resolves: bz#1574216
    (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: speculative store bypass [rhel-7.6])
  - Resolves: bz#1575578
    (Failed to convert a source image to the qcow2 image encrypted by luks)
  - Resolves: bz#1605026
    (Quitting VM causes qemu core dump once the block mirror job paused for no enough target space)
  - Resolves: bz#1622962
    (Add etoken support to qemu-kvm for s390x KVM guests)
  - Resolves: bz#1623859
    (Guest "Detected Tx unit Hang" and host "DMAR: fault addr" when booting guest with ixgbe device assignment,)
  - Resolves: bz#1624390
    (Memory leaks)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-14.el7
changelog:
  - kvm-mirror-Fail-gracefully-for-source-target.patch [bz#1582042]
  - Resolves: bz#1582042
    (Segfault on 'blockdev-mirror' with same node as source and target)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-15.el7
changelog:
  - kvm-jobs-change-start-callback-to-run-callback.patch [bz#1626061]
  - kvm-jobs-canonize-Error-object.patch [bz#1626061]
  - kvm-jobs-add-exit-shim.patch [bz#1626061]
  - kvm-block-commit-utilize-job_exit-shim.patch [bz#1626061]
  - kvm-block-mirror-utilize-job_exit-shim.patch [bz#1626061]
  - kvm-jobs-utilize-job_exit-shim.patch [bz#1626061]
  - kvm-block-backup-make-function-variables-consistently-na.patch [bz#1626061]
  - kvm-jobs-remove-ret-argument-to-job_completed-privatize-.patch [bz#1626061]
  - kvm-jobs-remove-job_defer_to_main_loop.patch [bz#1626061]
  - kvm-block-commit-add-block-job-creation-flags.patch [bz#1626061]
  - kvm-block-mirror-add-block-job-creation-flags.patch [bz#1626061]
  - kvm-block-stream-add-block-job-creation-flags.patch [bz#1626061]
  - kvm-block-commit-refactor-commit-to-use-job-callbacks.patch [bz#1626061]
  - kvm-block-mirror-don-t-install-backing-chain-on-abort.patch [bz#1626061]
  - kvm-block-mirror-conservative-mirror_exit-refactor.patch [bz#1626061]
  - kvm-block-stream-refactor-stream-to-use-job-callbacks.patch [bz#1626061]
  - kvm-tests-blockjob-replace-Blockjob-with-Job.patch [bz#1626061]
  - kvm-tests-test-blockjob-remove-exit-callback.patch [bz#1626061]
  - kvm-tests-test-blockjob-txn-move-.exit-to-.clean.patch [bz#1626061]
  - kvm-jobs-remove-.exit-callback.patch [bz#1626061]
  - kvm-qapi-block-commit-expose-new-job-properties.patch [bz#1626061]
  - kvm-qapi-block-mirror-expose-new-job-properties.patch [bz#1626061]
  - kvm-qapi-block-stream-expose-new-job-properties.patch [bz#1626061]
  - kvm-block-backup-qapi-documentation-fixup.patch [bz#1626061]
  - kvm-blockdev-document-transactional-shortcomings.patch [bz#1626061]
  - Resolves: bz#1626061
    (qemu blockjobs other than backup do not support job-finalize or job-dismiss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-16.el7
changelog:
  - kvm-commit-Add-top-node-base-node-options.patch [bz#1624012]
  - kvm-qemu-iotests-Test-commit-with-top-node-base-node.patch [bz#1624012]
  - kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1610605]
  - kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1610605]
  - kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1610605]
  - kvm-pc-acpi-revert-back-to-1-SRAT-entry-for-hotpluggable.patch [bz#1626059]
  - kvm-blockdev-backup-add-bitmap-argument.patch [bz#1628373]
  - kvm-test-bdrv-drain-bdrv_drain-works-with-cross-AioConte.patch [bz#1601212]
  - kvm-block-Use-bdrv_do_drain_begin-end-in-bdrv_drain_all.patch [bz#1601212]
  - kvm-block-Remove-recursive-parameter-from-bdrv_drain_inv.patch [bz#1601212]
  - kvm-block-Don-t-manually-poll-in-bdrv_drain_all.patch [bz#1601212]
  - kvm-tests-test-bdrv-drain-bdrv_drain_all-works-in-corout.patch [bz#1601212]
  - kvm-block-Avoid-unnecessary-aio_poll-in-AIO_WAIT_WHILE.patch [bz#1601212]
  - kvm-block-Really-pause-block-jobs-on-drain.patch [bz#1601212]
  - kvm-block-Remove-bdrv_drain_recurse.patch [bz#1601212]
  - kvm-test-bdrv-drain-Add-test-for-node-deletion.patch [bz#1601212]
  - kvm-block-Drain-recursively-with-a-single-BDRV_POLL_WHIL.patch [bz#1601212]
  - kvm-test-bdrv-drain-Test-node-deletion-in-subtree-recurs.patch [bz#1601212]
  - kvm-block-Don-t-poll-in-parent-drain-callbacks.patch [bz#1601212]
  - kvm-test-bdrv-drain-Graph-change-through-parent-callback.patch [bz#1601212]
  - kvm-block-Defer-.bdrv_drain_begin-callback-to-polling-ph.patch [bz#1601212]
  - kvm-test-bdrv-drain-Test-that-bdrv_drain_invoke-doesn-t-.patch [bz#1601212]
  - kvm-block-Allow-AIO_WAIT_WHILE-with-NULL-ctx.patch [bz#1601212]
  - kvm-block-Move-bdrv_drain_all_begin-out-of-coroutine-con.patch [bz#1601212]
  - kvm-block-ignore_bds_parents-parameter-for-drain-functio.patch [bz#1601212]
  - kvm-block-Allow-graph-changes-in-bdrv_drain_all_begin-en.patch [bz#1601212]
  - kvm-test-bdrv-drain-Test-graph-changes-in-drain_all-sect.patch [bz#1601212]
  - kvm-block-Poll-after-drain-on-attaching-a-node.patch [bz#1601212]
  - kvm-test-bdrv-drain-Test-bdrv_append-to-drained-node.patch [bz#1601212]
  - kvm-block-linux-aio-acquire-AioContext-before-qemu_laio_.patch [bz#1601212]
  - kvm-util-async-use-qemu_aio_coroutine_enter-in-co_schedu.patch [bz#1601212]
  - kvm-job-Fix-nested-aio_poll-hanging-in-job_txn_apply.patch [bz#1601212]
  - kvm-job-Fix-missing-locking-due-to-mismerge.patch [bz#1601212]
  - kvm-blockjob-Wake-up-BDS-when-job-becomes-idle.patch [bz#1601212]
  - kvm-aio-wait-Increase-num_waiters-even-in-home-thread.patch [bz#1601212]
  - kvm-test-bdrv-drain-Drain-with-block-jobs-in-an-I-O-thre.patch [bz#1601212]
  - kvm-test-blockjob-Acquire-AioContext-around-job_cancel_s.patch [bz#1601212]
  - kvm-job-Use-AIO_WAIT_WHILE-in-job_finish_sync.patch [bz#1601212]
  - kvm-test-bdrv-drain-Test-AIO_WAIT_WHILE-in-completion-ca.patch [bz#1601212]
  - kvm-block-Add-missing-locking-in-bdrv_co_drain_bh_cb.patch [bz#1601212]
  - kvm-block-backend-Add-.drained_poll-callback.patch [bz#1601212]
  - kvm-block-backend-Fix-potential-double-blk_delete.patch [bz#1601212]
  - kvm-block-backend-Decrease-in_flight-only-after-callback.patch [bz#1601212]
  - kvm-mirror-Fix-potential-use-after-free-in-active-commit.patch [bz#1601212]
  - kvm-blockjob-Lie-better-in-child_job_drained_poll.patch [bz#1601212]
  - kvm-block-Remove-aio_poll-in-bdrv_drain_poll-variants.patch [bz#1601212]
  - kvm-test-bdrv-drain-Test-nested-poll-in-bdrv_drain_poll_.patch [bz#1601212]
  - kvm-job-Avoid-deadlocks-in-job_completed_txn_abort.patch [bz#1601212]
  - kvm-test-bdrv-drain-AIO_WAIT_WHILE-in-job-.commit-.abort.patch [bz#1601212]
  - Resolves: bz#1601212
    (qemu coredumps on block-commit)
  - Resolves: bz#1610605
    (rbd json format of 7.6 is incompatible with 7.5)
  - Resolves: bz#1624012
    (allow using node-names with block-commit)
  - Resolves: bz#1626059
    (RHEL6 guest panics on boot if  hotpluggable memory (pc-dimm) is present  at boot time)
  - Resolves: bz#1628373
    (blockdev-backup does not accept bitmap parameter)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-17.el7
changelog:
  - kvm-aio-posix-fix-concurrent-access-to-poll_disable_cnt.patch [bz#1628191]
  - kvm-aio-posix-compute-timeout-before-polling.patch [bz#1628191]
  - kvm-aio-posix-do-skip-system-call-if-ctx-notifier-pollin.patch [bz#1628191]
  - Resolves: bz#1628191
    (~40% virtio_blk disk performance drop for win2012r2 guest when comparing qemu-kvm-rhev-2.12.0-9 with qemu-kvm-rhev-2.12.0-12)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-18.el7
changelog:
  - kvm-test-bdrv-drain-Fix-outdated-comments.patch [bz#1618584]
  - kvm-block-Use-a-single-global-AioWait.patch [bz#1618584]
  - kvm-test-bdrv-drain-Test-draining-job-source-child-and-p.patch [bz#1618584]
  - Resolves: bz#1618584
    (block commit aborts with "Co-routine was already scheduled")


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-3
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Resolves: #1570569


author: Jaroslav Mracek <jmracek@redhat.com> - 0.10.1-1
changelog:
  - Update to 0.10.1
  - It improves query performance with name and arch filters. Also nevra filter will now
    handle string with or without epoch.
  - Additionally for python bindings it renames NEVRA._has_just_name() to NEVRA.has_just_name() due
    to movement of code into c part of library.
  - Resolves: rhbz#1260242 - --exclude does not affect dnf remove's removal of requirements
  - Resolves: rhbz#1485881 - DNF claims it cannot install package, which have been already installed
  - Resolves: rhbz#1361187 - [abrt] python-ipython-console: filter_updown(): python3.5 killed by SIGABRT


author: Jaroslav Mracek <jmracek@redhat.com> - 0.11.1-1
changelog:
  - Rerelease of 0.11.1-1
  - Improvement query performance
  - Run file query in hy_subject_get_best_solution only for files (arguments that start with ``/`` or
    ``*/``)
  - Resolves: rhbz#1498207 - DNF crash during upgrade installation F26 -> F27


author: Miroslav Lichvar <mlichvar@redhat.com> 1.8-6
changelog:
  - add support for bonding to timemaster (#1549015)
  - improve timemaster to restart terminated processes (#1527170)
  - start ptp4l, timemaster and phc2sys after network-online target (#1541991)
  - don't forward management requests to UDS port (#1520366)


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-6
changelog:
  - fix 1283773 - segfault in rate_add_rate

    Jun 17 2014 Alejandro Pérez  <aeperezt@fedoraproject.org>
    fix 1109768 bad configuration logrotate
    Mar 02 2014 Alejandro Pérez  <aeperezt@fedoraproject.org>
    fix bug 1020552 - rpm report /var/lock/ipraf-ng is missing
    added missing file iptraf-nf-tmpfiles.conf
    Dec 03 2013 Nikola Pajkovsky <npajkovs@redhat.com>
    Fedora start using -Werror=format-security and iptraf-ng had some
    parts where error compilation was trigged.
    202b2e7b27a1 Makefile: add -Werror=format-security
    Resolved: #1037133


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-7
changelog:
  - Fixes error in patch Patch03 - this fixes 1283773 and 1539081
    1501821 - Upstream moved to https://github.com/iptraf-ng/iptraf-ng/
    1020552, 1372679 - fix missing /var/lock/iptraf-ng file
    Add BuildRequires:  gcc to spec file.
    1109768 - bad configuration logrotate


author: Martin Pitt <mpitt@redhat.com> 173-2
changelog:
  - Update to 173 release
  - Kubernetes: VM detail page
  - Realmd: Install on demand
  - Temporarily disable cockpit-kubernetes, until Go becomes available
    (RCM-38564)


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1234-1
changelog:
  - imalib: call memcmp with correct size
  - ektuils: check return of X509_gmtime_adj for notAfter adjustment
  - ekutils: fix null check in convertPemToX509
  - Rebase to 1234 release.
  resolves: rhbz#1571127


author: Jerome Marchand <jmarchan@redhat.com> - 0.6.1-1
changelog:
  - Rebase on v0.6.1
  - Fix tcpsubnet
  - Reinstate llcstat tool
  - Remove inject tool
  - Add NSS support to sslsniff
  - Fixes miscellaneous error uncovered by covscan


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.22-5
changelog:
  - Initial Load
  - removed -fno-lifetime-dse; rhel7 gcc to old (4.8.5)
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.22-8
changelog:
  - Adjust system NSS patch, RHBZ-1565658-system-nss-SunEC.patch, so
    as to filter -Wl,--as-needed from linker flags. Fixes FTBFS issue.
  - Resolves: rhbz#1570856


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-2
changelog:
  - jfr/*jfc files listed for all arches
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out
  - specfile slightly improved to allow srpm rebuild on rhel8/fedoras
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-6
changelog:
  - Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
    so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
    JDK-8210461.
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-7
changelog:
  - Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
    so as to disable log math intrinsic on aarch64. Work-around for
    JDK-8210858
  - Resolves: rhbz#1570856


author: Jan Vcelak <jvcelak@redhat.com> 1:2.3.43-3
changelog:
  - enhancement: build with hardening flags (RELRO)
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - drop unnecessary patches
  - clean configure flags


author: Matus Honek <mhonek@redhat.com> - 2.4.44-17
changelog:
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
  - Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
  - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-18
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1543955)
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)


author: Sumit Bose <sbose@redhat.com> - 0.8.1-5
changelog:
  - enable "Trust this computer for delegation to any service (Kerberos only)" [#1538730]
  - realm join fails with Insufficient permissions [#1542354]
  - adcli update option cannot add principals for computer object [#1545568]
  - adcli refuses to add service principals [#1547013]
  - [RFE] Support adding SPN of a different host [#1547014]
  - adcli segfaults during AD join RHEL 7.5 [#1575554]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-6
changelog:
  - Couldn't set service principals on computer account [#1608212]
  - additional fix #1547014 and #1593240


author: Ivan Devat <idevat@redhat.com> - 0.9.165-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508


author: Ivan Devat <idevat@redhat.com> - 0.9.165-2
changelog:
  - Fixed validation for an unaccessible resource inside a bundle 
  - Fixed test of watchdog devices
  - Fixed command `pcs cluster node add-outside`
  - Fixed large key files distribution
  - Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169


author: Ondrej Mular <omular@redhat.com> - 0.9.165-5
changelog:
  - Fixed `pcs stonith sbd watchdog test` error messages
  - Fixed avaliable watchdog devices listing
  - Resolves: rhbz#1475318


author: Ondrej Mular <omular@redhat.com> - 0.9.165-6
changelog:
  - Fix instance attributes setting for fence agents `fence_compute` and
    `fence_evacuate`
  - Resolves: rhbz#1623181


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-1
changelog:
  - dovecot updated to 2.2.36, pigeonhole to 0.4.24
  - fixed dsync not replicating sieve scripts (#1419426)
  - fix plugins incorrectly reporting epipe errors(#1489943)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630380)
  - update first/last_valid_gid range patch (#1630409)


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.11.1-1.gita4adfe5
changelog:
  - bump to v0.11.1
  - subpackage podman-docker
  - built libpod commit a4adfe5
  - built conmon from cri-o commit 464dba6


author: Akira TAGOH <tagoh@redhat.com> - 2.13.0-4.1
changelog:
  - Rebase to 2.13.0 (#1576501)
  - Rename fc-cache binary to fc-cache-{32,64} for multilib. (#1568968)
  - backport some fixes related to Flatpak.
  - Drop new syntax in config for compatibility.
  - Requires dejavu-sans-fonts instead of font(:lang=en) (#1484094)


author: Pingfan Liu <piliu@redhat.com> 2.0.15-14
changelog:
  - kdumpctl: Remove 'netroot' and 'iscsi initiator' entries from kdump cmdline
  - doc: remove btrfs from supported filesystems list
  - Update kdump anaconda addon
  - makedumpfile/arm64: Add '--mem-usage' support
  - Fix warning about persistent device name not found.
  - kdumpctl: Check the modification time of core_collector
  - kdump.sysconfig.x86_64: Remove 'notsc' from KDUMP_COMMANDLINE_REMOVE
  - makedumpfile: fix for hugepages filtering


author: Pingfan Liu <piliu@redhat.com> 2.0.15-15
changelog:
  - dracut-module-setup.sh: pass ip=either6 param for ipv6
  - dracut-module-setup.sh: install /etc/hosts when using fence_kdump
  - update kdump-anaconda-addon-003-29-g4c517c5.tar.gz


author: Pingfan Liu <piliu@redhat.com> 2.0.15-18
changelog:
  kdumpctl: Rebuild initramfs if loaded kernel modules changed
  dracut-module-setup.sh: don't include multipath-hostonly
  Add document to declare FCoE support (V2)
  Revert "Add document to declare FCoE support"
  Add document to declare FCoE support
  makedumpfile: fix makedumpfile Not tainted in 2nd kernel


author: Pingfan Liu <piliu@redhat.com> 2.0.15-20
changelog:
  - makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - dracut-module-setup: Fix test for inclusion of DRM modules


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.16.1
changelog:
  - Bump to 2.6.16 and u201b00.
  - Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
  - Resolves: rhbz#1633817


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.4-1
changelog:
  - Rebase to latest 0.3.4 upstream release. Still quite a few patches as
    there was no 0.3.5 release yet
    Resolves: rhbz#1584266


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12.el7_6.1
changelog:
  - v2v: update documentation regarding SHA-2 certificates in Windows 7 and
    Windows Server 2008 R2
    resolves: rhbz#1632788
  - v2v: fix rhev-apt firstboot command for Windows
    resolves: rhbz#1625216


author: Matej Marusak <mmarusak@redhat.com> - 2.1.11-51
changelog:
  - a-a-s-p-data: fix segfault if GPGKeysDir isn't configured
  - spec: turn on --enable-native-unwinder aarch64
  - plugins: a-a-g-machine-id use dmidecode command
  - spec: use dmidecode instead of python-dmidecode
  - Related: #1566707, #1566707, #1260074, #1591141


author: Marcel Plch <mplch@redhat.com> - 1.4.11-20
changelog:
  - Fix race condition when crontab is modified the same second
    before and after reading the crontab
  - Resolves: rhbz#1638691


author: Vojtech Trefny <vtrefny@redhat.com> - 2.7.3-7
changelog:
  - core: Add Encrypted.Resize method
    Resolves: rhbz#1567992
  - Fix checking for distribution and version in integration tests
    Resolves: rhbz#1508385
  - Do not skip integration tests on CentOS/RHEL
    Resolves: rhbz#1511974
  - Fix failing MDRAID integration test
    Resolves: rhbz#1511986


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-24
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with fixes from covscan
    resolves: rhbz#1531295
  - updated mmkubernetes patch with fixes from covscan
    resolves: rhbz#1539193
  - updated imjournal duplicates patch with fixes from covscan
    resolves: rhbz#1538372
  - updated omelastic enhancement patch with fixes from covscan
    resolves: rhbz#1565214


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-26
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch according to early testing
    resolves: rhbz#1531295
  - added patch fixing pid file name in manpage
    resolves: rhbz#1597264
  - updated json-parsing patch with one more bugfix
    resolves: rhbz#1565219


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-27
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch fixing last update regressions
    resolves: rhbz#1531295
  - added patch fixing deadlock in async logging
    resolves: rhbz#1559408
  - added patch fixing NULL access in worktable create
    resolves: rhbz#1600462
  - now putting release number into configure to have it present
    in error messages


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-28
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch fixing next round of regressions
    resolves: rhbz#1531295
    resolves: rhbz#1602156
  - updated mmkubernetes patch with NULL ret-check
    resolves: rhbz#1539193


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-30
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with next bugfix
    resolves: rhbz#1531295
  - updated imjournal duplicates patch making slower code optional
    and added corresponding doc patch
    resolves: rhbz#1538372


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-31
changelog:
  RHEL 7.6 ERRATUM
  - added new patch fixing ompipe dropping messages when pipe full
    resolves: rhbz#1591819
  - updated mmkubernetes patch to accept non-kubernetes containers
    resolves: rhbz#1539193
    resolves: rhbz#1609023
  - removed json-parsing patches as the bug is now fixed in liblognorm


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-32
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with no log on EACCES
    resolves: rhbz#1531295
  - removed now needless build-deps


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-33
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with extended symlink watching
    resolves: rhbz#1531295
  - updated mmkubernetes patch to accept dots in pod name
    resolves: rhbz#1539193


author: Dean Nelson <dnelson@redhat.com> - 20150619-3
changelog:
  - Remove acpitests-unix-%{version} directory from the build because it was a
    mistake that it was present and it complicated the fixing of the file
    permissions done related to RHBZ 1211328's requested rebase.


author: Al Stone <ahs3@redhat.com> - 20160527-2
changelog:
  - Corrected the use of percent signs in the change log and made sure
    they are all properly escaped.  Resolves: #1425899.


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-71
changelog:
  - Limit the number of CPU cores when building the package on power architectures
  Resolves: rhbz#1568974


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-72
changelog:
  - Fix CVE-2018-1060 and CVE-2018-1061
  Resolves: rhbz#1563454 and rhbz#1549192
  - Provide python2-libs from the python-libs subpackage
  Resolves: rhbz#1557460


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-74
changelog:
  - Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
    a one-to-one Pid -> process mapping
  Resolves: rhbz#1579432


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use Pegasus root/interop instead of root/PG_Interop
  - Enable System Z specific providers for s390 and s390x architecture
    Resolves: #1545811


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-1
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1538311 - Using a Netmask produces an odd
    entry in a certifcate (ftweedal)
  - Bugzilla Bug #1544843 - ExternalCA: Installation failed during
    csr generation with ecc (rrelyea, gkapoor)
  - Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
    upstream 10.5.x (RHEL) (mharmsen)
  - Bugzilla Bug #1580394 - CMC CRMF requests result in
    InvalidKeyFormatException when signing algorithm is ECC (cfu)
  - Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
    ACL configuration in AAclAuthz.java reverses rules that allow
    and deny access (ftweedal, cfu)
  - Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
    option to do no key archival (cfu)
  - Bugzilla Bug #1588655 - Cert validation for installation with
    external CA cert (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-2
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
    by CSR encoding (cfu)
  - Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
    certificate (ftweedal)
  - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
    SharedToken scenario's (cfu)
  - Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
  - Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
  - Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
  - Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
    authenticated through SharedToken (cfu)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-4
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1548203 - pki console configurations that involves ldap
    passwords leave the plain text password in signed audit logs (cfu)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1494591 - keyGen fails when only Identity


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-5
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
    with latest version (abokovoy)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-6
changelog:
  - Updated nuxwdog dependencies
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #673182 - ECC keys not supported for signing
    audit logs (cfu)
  - Bugzilla Bug #1593805 - Better understanding of
    NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
  - Bugzilla Bug #1601071 - Certificate generation happens with
    partial attributes in CMCRequest file (cfu)
  - Bugzilla Bug #1601569 - CC: Enable all config audit events
    (cfu)
  - Bugzilla Bug #1608375 - CMC Revocations throws exception
    with same reqIssuer & certissuer (cfu)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.1-7
changelog:
  - Fixed haproxy with TLS
    Resolves: rhbz#1370455
  - Fixed documentation about canonical maps
    Resolves: rhbz#1381871
  - Fixed build with kernel-4.*
    Resolves: rhbz#1575658


author: Thomas Haller <thaller@redhat.com> - 1:1.12.0-0.1
changelog:
  - Update to upstream release 1.11.90 (release candidate) (rh #1592311)
  - libnm: properly handle cancelling of async operations (rh #1555281)
  - libnm: support handling checkpoints (rh #1496739)
  - core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
  - core: rework and improve IPv4 address collission detection (rh #1507864)
  - wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
  - macsec: enable sending SCI by default and make it configurable (rh #1588041)
  - ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
  - wwan: improve failure reason for unsupported IP methods (rh #1459529)
  - tun: use netlink kernel API for tun devices if available (rh #1547213)
  - ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
  - dhcp: improve handling DHCP timeouts (rh #1573780)
  - dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
  - dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
  - dns: avoid updating resolv.conf when exiting (rh #1541031)
  - ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
  - ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
  - iface-helper: fix invalid reentrant call to platform (rh #1546656)
  - doc: various improvments to documentation (rh #1543832)


author: Thomas Haller <thaller@redhat.com> - 1:1.12.0-1
changelog:
  - Update to upstream 1.12.0 release (rh #1592311)
  - device: improve MTU handling for VLAN (rh #1586191)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-2
changelog:
  - device: disable rp_filter handling (rh #1593194)
  - ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.12.0-3
changelog:
  - cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
  - po: import Japanese translation (rh #1569438)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-6
changelog:
  - dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
  - initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
  - cli: fix parsing vpn secrets from password file (rh #1628946)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-7
changelog:
  - manager: accept non-null device for VPN activations (rh #1641174)
  - drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-7
changelog:
  Prevent crashes when client truncates SHM segment
    I've reverted the patch for 1459276 which is no longer needed as this
    is a proper fix.
    Resolves: rhbz#1473695


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-29
changelog:
  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14
changelog:
  - Replace CtrlL_Lock with Caps_Lock in generated us.map
    Resolves: #1441411
  - Improve man pages and usage messages quality and consistency
    Resolves: #949015


author: Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8
changelog:
  - Backported --sni-hostname option which allows overriding the hostname
    advertised to the peer (#1444792)
  - Improved counter-measures in TLS CBC record padding for lucky13 attack
    (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
  - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
    (CVE-2018-10846, #1589708)
  - Address p11tool issue in object deletion in batch mode (#1375307)
  - Backport PKCS#11 tests from master branch. Some tests were disabled due to
    unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
    generation without login, and certificates do not inherit ID from the private
    key)
  - p11tool explicitly marks certificates and public keys as NOT private objects
    and private keys as private objects
  - Enlarge buffer size to support resumption with large keys (#1542461)
  - Legacy HMAC-SHA384 cipher suites were disabled by default
  - Added DSA key generation to p11tool (#1464896)
  - Address session renegotiation issue using client certificate (#1434091)
  - Address issue when importing private keys into Atos HSM (#1460125)


author: <kwenning@redhat.com> - 1.3.0-3
changelog:
  - prevent creation of duplicate servants
  - check 2Node flag in corosync to support
    2-node-clusters with shared disk fencing
  - move disk-triggered reboot/off/crashdump
    to inquisitor to have sysrq observed by watchdog

    Resolves: rhbz#1413951


author: <kwenning@redhat.com> - 1.3.1-2
changelog:
  - rebase to upstream v1.3.1

    Resolves: rhbz#1499864
              rhbz#1468580
              rhbz#1462002


author: <kwenning@redhat.com> - 1.3.1-3
changelog:
  - mention timeout caveat with SBD_DELAY_START
    in configuration template
  - make systemd wait for sbd-start to finish
    before starting pacemaker or dlm

    Resolves: rhbz#1525981


author: <kwenning@redhat.com> - 1.3.1-7
changelog:
  - reenable sbd on upgrade so that additional
    links to make pacemaker properly depend on
    sbd are created

    Resolves: rhbz#1525981


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.2-23
changelog:
  - Redefine VSFTP_COMMAND_FD to 1
  - Resolves: rhbz#1443055
  - Document the relationship of text_userdb_names and chroot_local_user
  - Resolves: rhbz#1508021
  - Document allow_writeable_chroot in the man page
  - Resolves: rhbz#1508022
  - Improve documentation of ascii_* options
  - Resolves: rhbz#1517227
  - Add new filename generation algorithm for STOU command
  - Resolves: rhbz#1479237


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.2-25
changelog:
  - Add config option log_die allowing to pass error messages to syslog
  - Add config option bind_retries allowing to change the max number
  - of attempts to find a listening port for the PASV/EPSV command
  - Resolves: rhbz#1318198


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.2.6-9
changelog:
  - Python 2 binary package renamed to python2-subprocess32
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-3
changelog:
  - Fix patch fixing crash in EvMediaPlayerKeys
  - Fix building of comics backend with libarchive 3.1.2
  - Resolves: #1567186


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-4
changelog:
  - Change requires as requested by RPMDiff
  - Check returned size for negative value (CovScan)
  - Resolves: #1567186


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-10
changelog:
  - Fix memory leak when macsec MKA/PSK is used (rh #1500442)
  - Fix authentication failure when the MAC is updated externally (rh #1490885)
  - Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1434434)
  - Don't restart wpa_supplicant.service on package upgrade (rh #1505404)
  - Don't own a directory in /run/ (rh #1507919)


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:1.13.1-83.git07f3374
changelog:
  - built docker @projectatomic/docker-1.13.1-rhel commit 07f3374
  - built container-storage-setup commit 413b408
  - built docker-lvm-plugin commit 20a1f68
  - built docker-containerd commit 296f1f8
  - built docker-init commit fec3683
  - built libnetwork commit c5d66a0
  - built docker-runc @projectatomic/docker-1.13.1-rhel commit 5eda6f6


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-8
changelog:
  - removed version less provides
  - javadocdir moved to arched dir as it is no longer noarch
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-9
changelog:
  - Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
    RHBZ-1624122.
  - Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
    optimize compilation of libjsig.
  - Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - Reinstate filtering of opt flags coming from redhat-rpm-config.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.0.28-1
changelog:
  - Identify as GA version and no longer as early access (EA).
  - JDK 11 has been released for GA on 2018-09-25.


author: Jiri Denemark <jdenemar@redhat.com> - 4.4.0-1
changelog:
  - Rebased to libvirt-python-4.4.0 (rhbz#1563171)
  - The rebase also fixes the following bugs:
      rhbz#1542358, rhbz#1578337


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-48
changelog:
  - fix RTSP bad headers buffer over-read (CVE-2018-1000301)
  - fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
  - fix LDAP NULL pointer dereference (CVE-2018-1000121)
  - fix RTSP RTP buffer over-read (CVE-2018-1000122)
  - http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
  - doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
  - update certificates in the test-suite because they expire soon (#1572723)


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-50
changelog:
  - remove dead code, detected by Coverity Analysis
  - remove unused variable, detected by GCC and Clang


author: Rafael Aquini <aquini@redhat.com> - 2.16-13
changelog:
  - tests/stack_grow_into libhugetlbfs test fixes (#1422960)
  - PPC vm/hugepage/libhugetlbfs test fix (#1515365)


author: Frank Ch. Eigler <fche@redhat.com> - 3.3-2
changelog:
  - Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
  - Fix vfs.add_to_page_cache probe (rhbz1547238)
  - Fix foreach_limit.exp compilability (rhbz1591267)


author: Serhei Makarov <smakarov@redhat.com> - 3.3-3
changelog:
  - Add BPF left-operand fix (rhbz1560044) (x86-64 only)
  - Add stap.1 note on missing stapbpf.8 (rhbz1560044)
  - Fix RHEL-ALT build (rhbz1544689)


author: Phil Sutter <psutter@redhat.com> [0.8-9.el7]
changelog:
  - evaluate: explicitly deny concatenated types in interval sets (Phil Sutter) [1576426]
  - Deprecate add/insert rule 'position' argument (Phil Sutter) [1571968]
  - doc: reword insert position, this expects rule handle to insert, not a relative postition (Phil Sutter) [1571968]
  - nft.8: Fix reject statement documentation (Phil Sutter) [1571938]
  - netlink_delinearize: Fix resource leaks (Phil Sutter) [1504157]
  - netlink: Complain if setting O_NONBLOCK fails (Phil Sutter) [1504157]
  - hash: Fix potential null-pointer dereference in hash_expr_cmp() (Phil Sutter) [1504157]
  - evaluate: Fix memleak in stmt_reject_gen_dependency() (Phil Sutter) [1504157]
  - erec: Avoid passing negative offset to fseek() (Phil Sutter) [1504157]
  - cli: Drop pointless check in cli_append_multiline() (Phil Sutter) [1504157]
  - monitor: Make JSON/XML output respect output_fp (Phil Sutter) [1504157]
  - monitor: Make trace events respect output_fp (Phil Sutter) [1504157]
  - Review switch statements for unmarked fall through cases (Phil Sutter) [1504157]


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-6
changelog:
  - Kill session after user logs out
    Resolves: bz#1259757

    Build against Xorg 1.20
    Resolves: bz#1564061


author: Milind Changire <mchangir@redhat.com> - 3.12.2-10
changelog:
  - fixes bugs bz#1488120 bz#1565577 bz#1568297 bz#1570586 bz#1572043 
    bz#1572075 bz#1575840 bz#1575877


author: Milind Changire <mchangir@redhat.com> - 3.12.2-13
changelog:
  - fixes bugs bz#1493085 bz#1518710 bz#1554255 bz#1558948 bz#1558989 
    bz#1559452 bz#1567001 bz#1569312 bz#1569951 bz#1575539 bz#1575557 bz#1577051 
    bz#1580120 bz#1581184 bz#1581553 bz#1581647 bz#1582119 bz#1582129 bz#1582417 
    bz#1583047 bz#1588408 bz#1592666 bz#1594658


author: Milind Changire <mchangir@redhat.com> - 3.12.2-14
changelog:
  - fixes bugs bz#1547903 bz#1566336 bz#1568896 bz#1578716 bz#1581047 
    bz#1581231 bz#1582066 bz#1593865 bz#1597506 bz#1597511 bz#1597654 bz#1597768 
    bz#1598105 bz#1598356 bz#1599037 bz#1599823 bz#1600057 bz#1601314


author: Milind Changire <mchangir@redhat.com> - 3.12.2-16
changelog:
  - fixes bugs bz#1569657 bz#1608352 bz#1609163 bz#1609724 bz#1610825 
    bz#1611151 bz#1612098 bz#1615338 bz#1615440


author: Matěj Týč <matyc@redhat.com> - 1.2.17-1
changelog:
  - Rebased to the 1.2.17 upstream release (#1564900).
  - Fixed the offline scanning (#1547107, #1556988).
  - HTML Guide user experience improvements.
  - New options in HTML report "Group By" menu.
  - oscap-ssh supports --oval-results.
  - For more news, see https://github.com/OpenSCAP/openscap/releases/tag/1.2.17


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-8.ef769ef.git
changelog:
  - build for aarch64
    Resolves: rhbz#1422615
  - fix unconditional "dist" RPM macro reference in Release field
    Resolves: rhbz#1465933
  - ensure booth-arbitrator service will get restarted when it fails


author: Martin Pitt <mpitt@redhat.com> 169-3
changelog:
  - Rebase to version 169, drop all patches rhbz#1568728
  - Fix Subscriptions page hang when accessing as non-admin rhbz#1442540
  - Show an indicator on front page if updates are available rhbz#1495543
  - Properly localize "Log in" rhbz#1541454
  - Improve check for root privilege availability, to e. g. also work for FreeIPA
    admins rhbz#1574630


author: Martin Pitt <mpitt@redhat.com> 173-6
changelog:
  - Fix remote unauthenticated crash with crafted URLs rhbz#1627631
  - Fix off-by-one error in flow control rhbz#1626846


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.179-2
changelog:
  - Fix issue caused by udev considering device open in RW mode a change.
  - Fix leaks and buffer overflow.
  - boom: Update to new minor release.


author: Karel Zak <kzak@redhat.com> 2.23.2-54
changelog:
  - fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
  - fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
  - fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
  - fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
  - fix #1562125 - "setarch ppc<*>" fails with "Unrecognized architecture"
  - fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
  - fix #1528959 - rbind creates duplicate entries in /proc/mounts
  - fix #1538721 - mount man page says sync option has no effect for ext4
  - fix #1252764 - icrnl is not set when autologin is used
  - fix #1561200 - [RFE] - sulogin: improve support for locked root account
  - fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device


author: Karel Zak <kzak@redhat.com> 2.23.2-59
changelog:
  - fix #1618711 - exec option in mount unable to override the implicit noexec in user option
  - fix #1616264 - Login to emergency shell failed


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - show warning when "tasks" file can not be opened
  - extend description of "controllers" section in cgrules.conf man page
    resolves: #1561736


author: Sumit Bose <sbose@redhat.com> - 0.16.1-10
changelog:
  Use current Samba options and read NetBIOS name from keytab
  - Resolves: rhbz#1484072
  - Resolves: rhbz#1370457


author: Tomas Popela <tpopela@redhat.com> - 2.20.4-1
changelog:
  - Update to 2.20.4
  - Resolves: rhbz#1576544
  - WebKitWebProcess crashes when a11y is active
  - Resolves: rhbz#1591638


author: Tomas Popela <tpopela@redhat.com> - 2.20.4-2
changelog:
  - webkitgtk4: Crash on Google login page when a11y is active
  - Resolves: rhbz#1503624
  - Revert patch causing rendering glitches


author: Tomas Popela <tpopela@redhat.com> - 2.20.5-1
changelog:
  - Update to 2.20.5 - technically it was not necessary as the only difference
    between 2.20.4 and .5 was the revert of one change, that we already reverted
    while building 2.20.4. But it's better to stay with upstream.
  - Update the labels patch with the version that was pushed upstream.
  - Resolves: rhbz#1576544


author: Peter Jones <pjones@redhat.com> - 2.02-0.67
changelog:
  - Make the permissions on /boot/efi/... match the filesystem's requirements.
    Resolves: rhbz#1496952


author: Peter Jones <pjones@redhat.com> - 2.02-0.68
changelog:
  - More work on /boot/efi/... permissions
    Resolves: rhbz#1496952
  - Rework grubenv symlinks and handle them on upgrades
    Resolves: rhbz#1497918
  - Make grub2-setpassword -o work
    Resolves: rhbz#1512749


author: Peter Jones <pjones@redhat.com> - 2.02-0.71
changelog:
  - The change from 2.02-0.65.el7_4.2 never made it onto the main branch,
    so one more build to avoid the regression.
    Related: rhbz#1340893


author: Peter Jones <pjones@redhat.com> - 2.02-0.74
changelog:
  - Fix symlink issues with grubenv
    Resolves: rhbz#1602773
    Related: rhbz#1497918
  - Make the common subpackage only build on x86_64 to avoid timestamp
    mismatches.
    Related: rhbz#1602773
    Related: rhbz#1497918


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-30
changelog:
  - fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
  - fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
  - fix stack-based buffer overflow in exec.c:hashcmd() (CVE-2018-1071)
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - fix buffer overrun in xsymlinks (CVE-2017-18206)
  - fix NULL dereference in cd (CVE-2017-18205)
  - fix buffer overflow when scanning very long path for symlinks (CVE-2014-10072)
  - fix buffer overflow for very long fds in >& fd syntax (CVE-2014-10071)


author: Matej Habrnal <mhabrnal@redhat.com> - 0.13-13
changelog:
  - add support for Ruby
    - Related: #1334604
  - actualize list of normalization function in satyr
    - Related: #1332869
  - fix defects found by coverity
    - Related: #1336390


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-90
changelog:
  - fence_gce: new fence agent
    Resolves: rhbz#1568753
  - fence_rhevm: dont require --ssl parameter when using --ssl-insecure
    Resolves: rhbz#1544093
  - fence_mpath: fix preemptive abort
    Resolves: rhbz#1556857
  - fence-agents-all: dont show manpage-tags in metadata
    Resolves: rhbz#1553908
  - fence_scsi: dont write duplicates to .dev-file
    Resolves: rhbz#1575973
  - fence_impilan: add iLO5-support
    Resolves: rhbz#1579391


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-1
changelog:
  - rebase to v4.2.1
    Resolves: rhbz#1236395
  - fence_mpath: add watchdog support
    Resolves: rhbz#1504202


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-8
changelog:
  - fence_aliyun: add logging
    Resolves: rhbz#1568742
  - fence_gce: add stackdriver-logging support, improve logging and
    set default mode to cycle
    Resolves: rhbz#1568753


author: Mark Wielaard <mjw@redhat.com> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@redhat.com> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Jakub Martisko <jamartis@redhat.com> - 1.1.11-25
changelog:
  - add support for device names of the form /dev/srN
  - fix provided by Frantisek Kluknavsky
  - resolves:rhbz#1058446


author: Ian Kent <ikent@redhat.com> - 5.0.7-89
changelog:
  - bz1548922 - automount crashes due to segfault
    - and fix incorrect month in changelog entries.
  -Related: rhbz#1548922


author: Ian Kent <ikent@redhat.com> - 5.0.7-90
changelog:
  - bz1536526 - Ignore trailing slashes at the end of executable maps
    in auto.master config file
    - add man page note about extra slashes in paths.
  -Related: rhbz#1536526


author: Ian Kent <ikent@redhat.com> - 5.0.7-92
changelog:
  - bz1581502 - PID file never created or disappears
    - add units After line to include statd service.
    - use systemd sd_notify() at startup.
  -Resolves: rhbz#1581502


author: Ian Kent <ikent@redhat.com> - 5.0.7-93
changelog:
  - bz1581502 - PID file never created or disappears
    - add missing BuildRequires: systemd-devel.
    - fix changelog entry revision.
  -Related: rhbz#1581502


author: Ian Kent <ikent@redhat.com> - 5.0.7-94
changelog:
  - bz1609128 - autofs reload is unable to activate new map entries,
    it is autofs restart which shows new map entries.
    - fix update_negative_cache() map source usage.
  - Resolves: rhbz#1609128


author: Ian Kent <ikent@redhat.com> - 5.0.7-95
changelog:
  - bz1612914 - [autofs]Removed entries still can be accessed
    - mark removed cache entry negative.
  - Resolves: rhbz#1612914


author: Ian Kent <ikent@redhat.com> - 5.0.7-96
changelog:
  - bz1598640 - Server availability probe broke tunneling nfs via localhost
    - remove some redundant rpc library code.
    - add port parameter to rpc_ping().
    - dont probe NFSv2 by default.
    - add version parameter to rpc_ping().
  - Resolves: rhbz#1598640


author: Ian Kent <ikent@redhat.com> - 5.0.7-97
changelog:
  - bz1358887 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1358887


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1627502 - after upgrading to autofs-5.0.7-83.el7.x86_64 on RHEL 7 clients,
    amd maps /defaults key mount options are no longer working
    - fix amd parser opts option handling.
  - Resolves: rrhbz#1627502


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1630189 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  -Resolves: rhbz#1630189


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-1.el7
changelog:
  - Rebase to 2.12.0 base [bz#1562218]
  - Resolves: bz#1562218
    (Rebase qemu-guest-agent for RHEL-7.6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-2.el7
changelog:
  - qemuga-qemu-ga-make-get-fsinfo-work-over-pci-bridges.patch [bz#1567041]
  - qemuga-qga-fix-driver-leak-in-guest-get-fsinfo.patch [bz#1567041]
  - Resolves: bz#1567041
    (qemu-guest-agent does not parse PCI bridge links in "build_guest_fsinfo_for_real_device" (q35))


author: Bob Relyea <rrelyea@redhat.com> 0.6.2.29
changelog:
  - Coverity and compilier warning fixes
  - Use the PKIX validator
  - Fix crash when ldap connection fails and debugging is enabled.


author: Chris Lumens <clumens@redhat.com> - 0.26.4-5
changelog:
  - Update patch to allow building python2 or python3 bindings, depending on the setting
    in the spec file.


author: David Cantrell <dcantrell@redhat.com> - 0.26.4-6
changelog:
  - Drop python2 patch; not needed for lorax on EL7
  - Adjust spec to guard python3 building conditionally
  - Exclude vala files unless python3 bindings can build


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Resolves: rhbz#1633822


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72
changelog:
  - Fix automatic selinux boolean named_write_master_zones (#1569466)
  - Allow starting named with readonly home again


author: Dave Anderson <anderson@redhat.com> - 7.2.3-1
changelog:
  - Rebase to upstream version 7.2.3
    Resolves: rhbz#1559460
  - eBPF support with new bpf command
    Resolves: rhbz#1559758


author: Dave Anderson <anderson@redhat.com> - 7.2.3-2
changelog:
  - Work around rhel-7.6 s390/s390x ptrace.h incompatiblity FTBFS issue
  - Rebase to github commit 46d21219
    Resolves: rhbz#1559460


author: Dave Anderson <anderson@redhat.com> - 7.2.3-5
changelog:
  - Rebase to github commits b9d76838 to c79a11fa
    Resolves: rhbz#1559460
  - Fix ppc64/ppc6le stacksize calculation
    Resolves: rhbz#1589685


author: Dave Anderson <anderson@redhat.com> - 7.2.3-7
changelog:
  - Support ppc64 increased VA range
  - Fix ppc64 "bt" command failure reporting invalid NIP value
    Resolves: rhbz#1617936


author: Dave Anderson <anderson@redhat.com> - 7.2.3-8
changelog:
  - Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
    Resolves: rhbz#1617936


author: Jan Grulich <jgrulich@redhat.com> - 0.23-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1568618


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-1
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
    Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
    Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-2
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-35
changelog:
  - Add fsync to prevet data lose on power failure (#1520761)
  - Add ZFS support (#1533943)
  - Fix man page (#1537460)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-293
changelog:
  - Add SSL support to Net::SMTP (bug #1557574)
  - Do not overload ".." in Math::BigInt (bug #1497734)
  - Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.139-1
changelog:
  - installclasses/rhelah: Allow LVM thin and dm-crypt (walters)
    Resolves: rhbz#1546252
  - Ask for a default passphrase if required (vponcova)
    Resolves: rhbz#1436304
  - Add support for setting different types of passwords in TUI (vponcova)
    Related: rhbz#1436304


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.140-1
changelog:
  - Preserve the boot option zfcp.allow_lun_scan (vponcova)
    Resolves: rhbz#1561662
  - Don't display "Alternate Architectures" in product name (rvykydal)
    Resolves: rhbz#1488558


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.143-1
changelog:
  - Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
    Resolves: rhbz#1280500
  - Add UI feedback for disk repopulating after nvdimm reconfiguration.
    (rvykydal)
    Resolves: rhbz#1280500
  - Use only devices specified by nvdimm command for installation. (rvykydal)
    Resolves: rhbz#1280500
  - Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
    Resolves: rhbz#1280500
  - Allow only devices in sector mode to be selected. (rvykydal)
    Resolves: rhbz#1280500
  - Add nvdimm devices to Advanced Storage spoke. (rvykydal)
    Resolves: rhbz#1280500
  - Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
    Resolves: rhbz#1280500


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.144-1
changelog:
  - Don't allow unlocking and using of LUKS2 devices (vponcova)
    Resolves: rhbz#1608251
  - Fix glade accelerator conflicts (rvykydal)
    Related: rhbz#1602436
  - Add nvdimm files to POTFILES.in (rvykydal)
    Related: rhbz#1602436
  - Support nvdimm only on x86_64 (rvykydal)
    Resolves: rhbz#1602436


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.146-1
changelog:
  - Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
    Resolves: rhbz#1618408


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-4.git4391e5c
changelog:
  - Explicitly disable build of java bindings
    Resolves: #1540723
  - Add support for ECDH key exchange algorithm
    Resolves: #1547144


author: Peter Jones <pjones@redhat.com> - 17-2
changelog:
  - Try to make covscan actually complete the scan...
    Related: rhbz#1570032
    Related: rhbz#1558937
    Related: rhbz#1520533


author: Doug Ledford <dledford@redhat.com> - 3.3.5-2
changelog:
  - Drop libibmad as it didn't soname bump, and also remove the lower level
    opensm libs, libosm{comp,vendor} as they didn't soname bump either
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 3.3.5-3
changelog:
  - Change the file spec so we don't accidentally pick up the debug files in
    the base package on 32bit arches
  - Resolves: bz732495


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-87
changelog:
  - fence_azure_arm: add network-fencing
    Resolves: rhbz#1553904
  - fence_compute/fence_evacuate: fix parameters
    Resolves: rhbz#1559977


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.42-1
changelog:
  - rhel-autorelabel: set UEFI boot order (BootNext) same as BootCurrent
  - network-functions: use tr to upper case strings rather than awk
  - sysconfig/readonly-root: Clarify the usage of readonly-root
  - network-functions: add error messages for bonding installation
  - sysctl.conf.s390: drop SHMALL and SHMMAX
  - network.service: 'reload' removed
  - rhel-readonly.service: target name for random seed fixed
  - init.d/functions: fix sourcing for ksh


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.45-1
changelog:
  - network: parsing of /proc/mounts returned (bug #1572659)
  - netconsole: LSB header added (bug #1508489)
  - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.55
changelog:
  - mountstats: use correct RDMA terminology (bz 1527938)
  - nfs-server: restart gssproxy when the server is restarted. (bz 1527653)
  - nfsd: Set default minor versions (bz 1436977)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.56
changelog:
  - exportfs: move ro/rw option back to secinfo_flag_displaymap table (bz 1532688)
  - nfsdcltrack: getopt_long() fails on a non x86_64 archs (bz 1551903)
  - Fixed typo in nfsmount.conf (bz 1592235)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.57
changelog:
  - rpc.gssd: truncates 32-bit UIDs/GIDs to 16 bits architectures (bz 1602836)
  - Added back lockd vars to nfs-utils_env.sh and sysconfig (bz 1413272)
  - Document nfs v4 mounts will use Kerberos we available (bz 1334510)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-19
changelog:
  - documentation fixes (#1292820)
  - usermod: make password unlocking compatible with passwd (#1185425)
  - usermod: disallow ':' in raw password setting (#1292815)
  - improve the gid and uid allocation mechanism (#1279321)
  - lastlog: add options to unexpire unused accounts (#1285547)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-25
changelog:
  - prevent creating users ".." or "." or with all numeric usernames (#1373645)
  - raise limit for passwd and shadow entry length but also prevent
    writing longer entries (#1422497)
  - consider also supplementary group membership in newgrp (#1425078)


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-6.20160601gitf9185e5
changelog:
  - Fix License field capitalization
  - Resolves: rhbz#1577175
  - Add detection of AMD Ryzen w/ Vega graphics
  - Resolves: rhbz#1569542
  - Fix issues found by Coverity Scan
  - Resolves: rhbz#1578007


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - Update to 1.6.0
  - Adds Modulemd.ModuleStream object, deprecating Modulemd.Module
  - Adds Modulemd.Translation and Modulemd.TranslationEntry objects
  - Adds Modulemd.ImprovedModule object that collects streams, defaults and
    translations together
  - Adds new Modulemd.index_from_*() funtions to get a hash table of
    Modulemd.ImprovedModule objects for easier searching
  - Moves function documentation to the public headers
  - Corrects the license headers to MIT (they were incorrectly listed as MITNFA
    in previous releases)
  - Makes the "eol" field optional for Modulemd.ServiceLevel
  - Clean up HTML documentation
  - Fixes a type error on 32-bit systems


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - Update to 1.6.3
  - Drop upstreamed patch
  - Don't return ModuleStream objects from modulemd_module_new_all_from_*_ext()
  - Ensure that Component buildorder property is signed
  - Work around optimization bug
  - Don't crash dumping translation events without summary or desc
  - Remove Obsoletes: python-modulemd from EPEL


