# changelog

author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-5
changelog:
  - weak-modules: handle versions with + and other special regex symbols
  - weak-modules: fix misleading message when cannot find dracut.
    Resolves: rhbz#1609372.


author: Eugene Syromiatnikov <esyr@redhat.com> - 25-6
changelog:
  - weak-modules: check also for /lib/modules/$krel/symvers.gz as a possible
    symvers file path.
    Resolves: rhbz#1614119.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-7
changelog:
  - weak-modules: use is_kernel_installed wrapper in update_modules_for_krel.
  - weak-modules: more abstract symvers search implementation.
  - weak-modules: use additional paths for System.map file.
    Resolves: rhbz#1621306.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-8
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1622990.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-10
changelog:
  - weak-modules: group modules on add-kernel
  - weak-modules: do not make groups if there are no extra modules
    Resolves: rhbz#1649211


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.1.1-4
changelog:
  - remove utils subpackage and place mmdblookup into devel subpackage
  - remove Group from the spec file
  - move NOTICE and Changes.md to devel subpackage


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-6
changelog:
  - Adding libmaxminddb as a new package to RHEL-8 (rhbz#1607927)
  - Adding Recommends tag for geolite2 databases


author: Karel Zak <kzak@redhat.com> - 2.32-3
changelog:
  - sync spec file with Fedora
  - move /etc/adjtime config from initscripts to util-linux
  - fix #1560642 - uuidd.service does not start
  - remove unused build option --enable-libmount-force-mountinfo (it's default now)
  - disable assert code


author: Karel Zak <kzak@redhat.com> 2.32.1-4
changelog:
  - fix #1614364 - losetup: /dev/loop1: failed to set up loop device
  - fix #1614852 - mount man page says sync option has no effect for ext4
  - fix #1614843 - Man page of logger is missing -S option


author: Karel Zak <kzak@redhat.com> 2.32.1-7
changelog:
  - fix #1656437 - Failing tests from testsuite
  - fix #1653781 - unable to umount by loop backing file
  - fix #1655650 - RHEL8.0 - fdisk -l shows the conflicting partitions name for the mpath
  - fix #1653413 - blkid: add --no-part-details to not return metadata from empty partitions


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release (#1614972)
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - backends: RISCV and M68K now have backend implementations to
      generate CFI based backtraces.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403
      (#1623754, #1625052, #1625057).


author: Mark Wielaard <mjw@redhat.com> - 0.174-4
changelog:
  - Add elfutils-0.174-size-rec-ar.patch
    CVE-2018-18520 (#1646479)
  - Add elfutils-0.174-ar-sh_entsize-zero.patch
    CVE-2018-18521 (#1646484)


author: Mark Wielaard <mjw@redhat.com> - 0.174-5
changelog:
  - Add elfutils-0.174-x86_64_unwind.patch (#1650114).
  - Add elfutils-0.174-gnu-property-note.patch (#1650120).
  - Add elfutils-0.174-version-note.patch.
  - Add elfutils-0.174-gnu-attribute-note.patch (#1650125).


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.6-8
changelog:
  - Python 2 binary package renamed to python2-cracklib
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.9.6-10
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Richard Hughes <richard@hughsie.com> 0.2.10-1
changelog:
  - New upstream version
  - Correctly detect removed devices when rescanning
  - Fix a memory leak when using control tranfers
  - Fix symbol version table up to version 0.2.9


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-6
changelog:
  - Add tss user if doesn't currently exist - PR#1 from Jerry Snitselaar
  - Removed source tarball and cleared it from .gitignore


author: Javier Martinez Canillas <javierm@redhat.com> - 2.0.0-1
changelog:
  - Download the distributed tarball instead of the source code tarball
  - Update URLs to point to the new project location
  - Update to 2.0.0 release


author: Richard Hughes <rhughes@redhat.com> - 0.99.5-1
changelog:
  - New upstream release
  - Add BatteryLevel property for devices with a finite number of power levels
  - Add support for pausing and resuming of the daemon poll
  - Do not spin in a loop when /proc/timer_stats cannot be written
  - Fix reading and writing the keyboard brightness level
  - Get a serial number for device batteries
  - Refresh devices after waking up from sleep
  - Lower initial power usage when iDevice isn't accessible


author: Richard Hughes <rhughes@redhat.com> - 0.99.6-1
changelog:
  - New upstream release
  - Detect joysticks as gaming input devices
  - Fix crash when '@' is present in the device name
  - Grab the model name from device if unavailable from battery


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  + upower-0.99.7-1
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate


author: Björn Esser <fedora@besser82.io> - 0.3.3-12
changelog:
  - Rebuilt for /lib64/libglog.so: undefined reference to
    'gflags::FlagRegisterer::FlagRegisterer'-madness


author: Pavel Raiskup <praiskup@redhat.com> - 1.2.11-1
changelog:
  - latest upstream release (rhbz#1409372)
  - cleanup rpmlint
  - revert fix for rhbz#985344
  - requires with %_isa tag
  - drop zlib Z_BLOCK flush patch (rhbz#1417355)


author: Nikola Forró <nforro@redhat.com> - 0.2.20-12
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Enable optimizations for all LAPACK sources
    resolves: #1624156


author: Nikola Forró <nforro@redhat.com> - 0.2.20-13
changelog:
  - Fix detection of generic ARMv8 CPUs
  - Get rid of executable stack in libRblas.so
    related: #1624156


author: Kalev Lember <klember@redhat.com> - 1.12-9
changelog:
  - Remove lib64 rpaths
  - Disable strict aliasing as it's not strict-aliasing clean on ppc64el
  - Don't redefine licensedir


author: Peter Robinson <pbrobinson@fedoraproject.org> 2.0.0-1
changelog:
  - Update to upstream 2.0.0
  - Fixes the following CVEs plus others
  - CVE-2017-6440 CVE-2017-6439 CVE-2017-6438 CVE-2017-6437 CVE-2017-6436
  - CVE-2017-6435 CVE-2017-5836 CVE-2017-5835 CVE-2017-5834 CVE-2017-5545
  - CVE-2017-5209


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.0.0-4
changelog:
  - Python 2 binary package renamed to python2-libplist
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 2.0.0-10
changelog:
  + libplist-2.0.0-10
  - The Python3 Cython binary is now called "cython" not "cython3"
  - Resolves: #1611726


author: Andreas Schneider <asn@redhat.com> - 1.0.1-1
changelog:
  - Update to version 1.0.1:
    * Added a macro for assert_ptr_equal().
    * Fixed test_realloc() if 0 size is passed.
    * Fixed objects packaging bug.
    * Fixed building with newer gcc versions.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.0-1
changelog:
  - Update to version 1.1.0
      * Added support to catch multiple exceptions
      * Added support to verify call ordering
      * Added support to pass initial data to test cases
      * Added will_return_maybe() for ignoring mock returns
      * Added subtests for groups using TAP output
      * Added support to write multiple XML files for groups
      * Improved documentation
      * Fixed XML output generataion
      * Fixed Windows builds with VS2015


author: Adam Jackson <ajax@redhat.com> - 18.3.0-0.2
changelog:
  - Mesa 18.3.0 RC2
  - Drop python3 build system backport
  - Drop no-longer-necessary big-endian build fix
  - Re-enable 10bpc fbconfigs


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-14
changelog:
  - storage: Remove secretPath from _virStorageBackendQemuImgInfo (rhbz#1645459)
  - storage: Allow for inputvol to have any format for encryption (rhbz#1645459)
  - storage: Allow inputvol to be encrypted (rhbz#1645459)
  - access: Modify the VIR_ERR_ACCESS_DENIED to include driverName (rhbz#1631608)
  - docs: Enhance polkit documentation to describe secondary connection (rhbz#1631608)
  - qemu: Don't ignore resume events (rhbz#1634758, rhbz#1643338)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-15
changelog:
  - virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1634782)
  - qemu: Ignore nwfilter binding instantiation issues during reconnect (rhbz#1648544)
  - qemu: Set identity for the reconnect all thread (rhbz#1648546)
  - Revert "access: Modify the VIR_ERR_ACCESS_DENIED to include driverName" (rhbz#1631608)
  - access: Modify the VIR_ERR_ACCESS_DENIED to include driverName (rhbz#1631608)
  - qemu: add vfio-ap capability (rhbz#1508146)
  - qemu: vfio-ap device support (rhbz#1508146)
  - qemu: Extract MDEV VFIO PCI validation code into a separate helper (rhbz#1508146)
  - conf: Move VFIO AP validation from post parse to QEMU validation code (rhbz#1508146)
  - qemu: Fix post-copy migration on the source (rhbz#1649169)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-16
changelog:
  - util: Don't overflow in virRandomBits (rhbz#1655586)
  - virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1655586)
  - spec: remove libcgroup and cgconfig (rhbz#1602407)
  - qemu: Drop duplicated code from qemuDomainDefValidateFeatures() (rhbz#1647822)
  - tests: Add capabilities data for QEMU 3.1.0 on ppc64 (rhbz#1647822)
  - qemu: Introduce QEMU_CAPS_MACHINE_PSERIES_CAP_NESTED_HV (rhbz#1647822)
  - conf: Parse and format nested-hv feature (rhbz#1647822)
  - qemu: Format nested-hv feature on the command line (rhbz#1647822)
  - qemu: Add check for whether KVM nesting is enabled (rhbz#1645139)
  - secret: Add check/validation for correct usage when LookupByUUID (rhbz#1656255)
  - cpu: Add support for "stibp" x86_64 feature (rhbz#1655032)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-17
changelog:
  - virsh: Strip XML declaration when extracting CPU XMLs (rhbz#1659048)
  - RHEL: qemu: Add ability to set sgio values for hostdev (rhbz#1582424)
  - RHEL: qemu: Add check for unpriv sgio for SCSI generic host device (rhbz#1582424)
  - qemu: Alter @val usage in qemuSetUnprivSGIO (rhbz#1656362)
  - qemu: Alter qemuSetUnprivSGIO hostdev shareable logic (rhbz#1656362)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-18
changelog:
  - conf: correct false boot order error during domain parse (rhbz#1630393)
  - qemu: Remove duplicated qemuAgentCheckError (rhbz#1665000)
  - qemu: require reply from guest agent in qemuAgentGetInterfaces (rhbz#1665000)
  - qemu: Filter non SCSI hostdevs in qemuHostdevPrepareSCSIDevices (rhbz#1665244)
  - util: remove const specifier from nlmsghdr arg to virNetlinkDumpCallback() (rhbz#1583131)
  - util: add a function to insert new interfaces to IPv6CheckForwarding list (rhbz#1583131)
  - util: use nlmsg_find_attr() instead of an open-coded loop (rhbz#1583131)
  - util: check accept_ra for all nexthop interfaces of multipath routes (rhbz#1583131)
  - util: make forgotten changes suggested during review of commit d40b820c (rhbz#1583131)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-19
changelog:
  - qemu: Fix logic error in qemuSetUnprivSGIO (rhbz#1666605)
  - tests: qemuxml2argv: Add test case for empty CDROM with cache mode (rhbz#1553255)
  - qemu: command: Don't format image properties for empty -drive (rhbz#1553255)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-21
changelog:
  - docs: Drop /dev/net/tun from the list of shared devices (rhbz#1665400)
  - qemu: conf: Remove /dev/sev from the default cgroup device acl list (rhbz#1665400)
  - qemu: cgroup: Expose /dev/sev/ only to domains that require SEV (rhbz#1665400)
  - qemu: domain: Add /dev/sev into the domain mount namespace selectively (rhbz#1665400)
  - security: dac: Relabel /dev/sev in the namespace (rhbz#1665400)
  - qemu: caps: Use CAP_DAC_OVERRIDE for probing to avoid permission issues (rhbz#1665400)
  - qemu: caps: Don't try to ask for CAP_DAC_OVERRIDE if non-root (rhbz#1665400)
  - Revert "RHEL: Require firewalld-filesystem for firewalld rpm macros" (rhbz#1650320)
  - Revert "RHEL: network: regain guest network connectivity after firewalld switch to nftables" (rhbz#1650320)
  - configure: change HAVE_FIREWALLD to WITH_FIREWALLD (rhbz#1650320)
  - util: move all firewalld-specific stuff into its own files (rhbz#1650320)
  - util: new virFirewallD APIs + docs (rhbz#1650320)
  - configure: selectively install a firewalld 'libvirt' zone (rhbz#1650320)
  - network: set firewalld zone of bridges to "libvirt" zone when appropriate (rhbz#1650320)
  - network: allow configuring firewalld zone for virtual network bridge device (rhbz#1650320)
  - util: remove test code accidentally committed to virFirewallDZoneExists (rhbz#1650320)
  - qemu: command: Don't skip 'readonly' and throttling info for empty drive (rhbz#1670337)


author: Robert Scheck <robert@fedoraproject.org> 1.1.6-7
changelog:
  - Run autoreconf to recognize aarch64 (#925813)
  - Conditionalized usage of %{_lib} vs %{_libdir} for RHEL < 7
  - Tight run-time dependencies between sub-packages via %{?_isa}


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.903-2
changelog:
  - drop libinput replay, this tool requires libevdev-python which we don't
    have in RHEL and it's a debugging-tool only.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.8.3-20
changelog:
  - Python 2 binary package renamed to python2-gpod
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.6-20
changelog:
  - Fixed installation of multiple drivers and text tables in Dracut module
    if environment variables are used


author: Neal Gompa <ngompa13@gmail.com> - 1.8.0-3
changelog:
  - Add patch to fix gmock segfaults (rhbz#1513522)
  - Add patch to properly version the libraries
  - Move the documentation to the right place
  - Drop unneeded ldconfig scriptlets:
      https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets
  - Some clean up


author: Paul Howarth <paul@city-fan.org> - 0.05-10
changelog:
  - Classify buildreqs by usage
  - Simplify find commands using -empty and -delete
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1:0.65-1
changelog:
  - Update to 0.65
    - Prevent warning about unused variables (GH#59)
    - Clarify documentation about exported functions


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.67-1
changelog:
  - Update to 0.67
    - Support standard tags !!str, !!map and !!seq instead of dying (GH#67)
    - Support JSON::PP::Boolean and boolean.pm via $YAML::XS::Boolean (GH#66)


author: Paul Howarth <paul@city-fan.org> - 1:0.68-1
changelog:
  - Update to 0.68
    - Fix regex roundtrip (GH#69, GH#70)
    - Fix loading of many regexes (GH#64, GH#71)


author: Paul Howarth <paul@city-fan.org> - 1:0.69-1
changelog:
  - Update to 0.69
    - Security fix: Add $LoadBlessed option to turn on/off loading objects
      (GH#73, GH#74)


author: Paul Howarth <paul@city-fan.org> - 1:0.70-1
changelog:
  - Update to 0.70
    - Fix format specifier/argument mismatch (GH#79)
    - Travis CI: Test on Perl 5.26 (GH#80)
    - Fix a C90-compatibility issue (GH#81)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 0.28-10
changelog:
  - Classify buildreqs by usage
  - Use %license where possible
  - Simplify find commands using -empty and -delete


author: Lubomir Rintel <lkundrak@v3.sk> - 1.6.12-1
changelog:
  - Update to 1.6.12 release
  - Require libmbim and libqmi we were built with (rh #1534945)
  - Restore the scriptlets where they are needed


author: Björn Esser <besser82@fedoraproject.org> - 0.13-3
changelog:
  - Add upstream patch for adding size_t json_c_object_sizeof()
  - Enable partial multi-threaded support


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Update to 1.6.2
  - Make buildorder a signed integer to match modulemd specification
  - Obsolete unsupported pythonX-modulemd packages


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-0.beta2
changelog:
  - Update to 2.0.0beta2
  - Better validation of stored content during read and write operations
  - ModuleIndex now returns FALSE if any subdocument fails
  - Fix tests on 32-bit platforms
  - Make unknown keys in YAML maps non-fatal for libmodulemd1
  - Make unknown keys in YAML maps optionally fatal for libmodulemd 2.x
  - Fix RPM version requirements for libmodulemd1


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 final
  - Assorted fixes for validation
  - Add modulemd-validator tool based on v2 code
  - Fix a crash when merging defaults
  - Add missing BuildRequires


author: Harald Hoyer <harald@redhat.com> - 16-1
changelog:
  - libvarlink 16
  - fixed coverity issues
  - Resolves: #1638294 - Interface name validation rule update


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.8-3
changelog:
  - BuildRequire rdma-core-devel on s390(x).
  - Install the hwloc-dump-hwdata.service systemd service on x86/x86_64.


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.9-1
changelog:
  - Update to 1.11.9.
  - BuildRequire gcc, gcc-c++. Drop Group tags.
  - BuildRequire numactl-devel on s390x too.


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Fix handling carriage return after c-indicator (CPAN RT#41141)
    - Fix CHECK_UTF8 SEGV with empty len=0 strings (CPAN RT#61562)
    - Add missing function declarations
    - Tighten the TODO tests; no passing TODOs now, but still JSON
    - SingleQuote and \/ and \u roundtrips do fail
  - Drop EL-5 support
    - Drop Group: and BuildRoot: tags
    - Drop buildroot cleaning in %install
    - Drop explicit %clean section


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.9-1
changelog:
  - update to 1.0.9
  - use license macro
  - tighten file list wildcards
  - switch to https for source URL


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-1
changelog:
  - rebase to latest upstream version, which contains important CVE fixes
  - additional ZER0-DAY fixes added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.25-1
changelog:
  - rebase to latest upstream version to fix issues discovered in previous CVE fixes (bug #1631701 and #1626997)


author: Martin Osvald <mosvald@redhat.com> - 9.25-2
changelog:
  - Resolves: #1652937 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c
  - Resolves: #1642586 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1642580 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1642941 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1656336 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)
  - Resolves: #1660571 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660830 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661280 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)
  - Resolves: #1668891 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators (700317)


author: Till Maas <opensource@till.name> - 10.2-19
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: James Antill <james@fedoraproject.org> - 1.0.4-20
changelog:
  - Move doc/ustr-devel-<version> to doc/ustr-devel. BZ 993940.
  - Use -fgnu89-inline workaround for gcc5.


author: Adam Jackson <ajax@redhat.com> - 7.7-24
changelog:
  - Make -devel Require the base package, so the pc file will point to an
    xkbcomp that actually exists.


author: Milan Crha <mcrha@redhat.com> - 3.28.5-3
changelog:
  - Add patch for RH bug #1624835 (Quoting of plain text mail into HTML mode mangles deeper levels)
  - Add patch for RH bug #1624867 (Extra new line added in front of long URLs)


author: Nils Philippsen <nils@tiptoe.de> - 2.1.2-1
changelog:
  - version 2.1.2
  - tidy up spec file
  - use %license for license file
  - require same arch main from devel package


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.1.10-28
changelog:
  - Python 2 binary package renamed to python2-gamin
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 12.10.0-17
changelog:
  - Python 2 binary package renamed to python2-appindicator
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: David King <amigadave@amigadave.com> 5.1.0-1
changelog:
  - Update to 5.1.0 (#1164434)
  - Drop libxml2 patch (fixed upstream)
  - Use pkgconfig for BuildRequires


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 1.14.1-2
changelog:
  - ExclusiveArch: i686, x86_64
    Related: rhbz#1615874
  - BuildRequires: python3-devel
    Related: rhbz#1615874


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.6-15
changelog:
  - Fix source URL and switch to xz tarball (the only one available)
  - Do not own %{_localstatedir}/lib/rpm-state (#907618)
  - Ship gsettings-schema-convert manpage only in -devel (#893767)
  - Install COPYING as %license where available
  - Fix bogus dates in %changelog


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.4.46-2
changelog:
  - Perl 5.28 rebuild
  - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1564161)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-3
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1598103)
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-6
changelog:
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
  - Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7-12
changelog:
  - use %make_build %ldconfig_scriptlets %license
  - %build: --enable-shared=yes --enable-static=no --disable-silent-rules


author: Michal Sekletár <msekleta@redhat.com> - 0.7-19
changelog:
  - make sure we get compiled with -fstack-protector-strong (#1624099)
  - fix issues reported by coverity (#1602449)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.4-6
changelog:
  - Python 2 binary package renamed to python2-gupnp-igd
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kalev Lember <klember@redhat.com> - 0.2.5-1
changelog:
  - Update to 0.2.5
  - Update inter-package dependencies after python2-gupnp-igd rename
  - Tighten deps with the _isa macro
  - Update source URLs
  - Use license macro for COPYING


author: Bastien Nocera <bnocera@redhat.com> - 0.2.5-3
changelog:
  + gupnp-igd-0.2.5-3
  - Remove python2-gupnp-igd sub-package, nothing uses it in Fedora
    and gobject-introspection supports both Python2 and Python3


author: Petr Pisar <ppisar@redhat.com> - 2.52.2-2
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Tomáš Mráz <tmraz@redhat.com> 1.4.0-1
changelog:
  - Do not try to check presence of too short username in password
  - Make the user name check optional (via usercheck option)
  - Add an 'enforcing' option to make the checks to be warning-only
    in PAM
  - The difok = 0 setting will disable all old password similarity
    checks except new and old passwords being identical
  - Updated translations from Zanata


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-4
changelog:
  - Python 2 binary package renamed to python2-pwquality
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Karsten Hopp <karsten@redhat.com> - 3.20.0-6
changelog:
  - apply upstream patch from Jonh Wendell to fix g_ptr_array_find types and make it
    build with latest glib2


author: Brian C. Lane <bcl@redhat.com> - 3.2-29
changelog:
  - Add support for NVDIMM devices (sparschauer)
  - libparted/labels: link with libiconv if needed (arnout)


author: Brian C. Lane <bcl@redhat.com> - 3.2-33
changelog:
  - Switch gpt-header-move and msdos-overlap to python3 (bcl)
    Resolves: rhbz#1595810
  - Modify gpt-header-move and msdos-overlap to work with py2 or py3 (bcl)
    Related: rhbz#1595810


author: Brian C. Lane <bcl@redhat.com> - 3.2-34
changelog:
  - Fix the length of several strncpy calls (bcl)
    Related: rhbz#1602652
  - parted.c: Always free peek_word (bcl)
    Related: rhbz#1602652
  - parted.c: Make sure dev_name is freed (bcl)
    Related: rhbz#1602652
  - t6100-mdraid-partitions: Use v0.90 metadata for the test (bcl)
  - Fix msdos-overlap to work correctly with py2 or py3 (bcl)
    Related: rhbz#1595810


author: Brian C. Lane <bcl@redhat.com> - 3.2-35
changelog:
  - Use python3-devel in buildroot
    Resolves: rhbz#1615576
  - linux.c: Use sys/sysmacros.h for major/minor
    Resolves: rhbz#1615592


author: Richard W.M. Jones <rjones@redhat.com> - 0.7-0.1.alpha
changelog:
  - New upstream version 0.7alpha.
  - No tarball was uploaded so temporarily use tarball from github.
  - Fixes CVE-2018-14679 libmspack: off-by-one error in the CHM PMGI/PMGL
    chunk number validity checks


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0.2h-1
changelog:
  - Synced with native openssl-1.0.2h-1
  - Fixes RHBZ #1332591 #1332589 #1330104 #1312861 #1312857 #1307773 #1302768


author: Christophe Fergeau <cfergeau@redhat.com> - 1.0.2k-1
changelog:
  - Sync with rhel 7.6 OpenSSL 1.0.2k+patches in order to get the latest security
    fixes
  - Related: rhbz#1615874


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-1
changelog:
  - 1.13.1
  - use %ldconfig_scriptlets %make_build %make_install
  - fix rpath in gst-p-bad-cleanup.sh
  - tighten subpkg deps with %{?_isa}
  - -gtk subpkg now empty.  FIXME


author: Wim Taymans <wtaymans@redhat.com> - 1.14.0-3
changelog:
  - Remove obsolete liboil BR (#1588303)
  - Only build extras on Fedora
  - bluez is not in extras
  - vdpau is in extras


author: Kalev Lember <klember@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Drop manual requires that are automatically handled by pkgconfig dep gen
  - Use license macro for COPYING
  - Tighten -devel subpackage deps with the _isa macro
  - Use make_install macro


author: Cole Robinson <crobinso@redhat.com> - 1.18.0-2
changelog:
  - Fix rdma deps and don't restrict archs
  - Add --disable-werror to fix gcc8 build (bz #1556044)
  - Spec file cleanups (bz #1483290)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-5.el8
changelog:
  - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
  - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
  - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
  - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
  - libiscsi-avoid-fallthrough.patch [bz#1634541]
  - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
  - Resolves: bz#1634541
    (Fix important coverity issues (libiscsi))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
  - Resolves: bz#1597942
    (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)


author: Dominik Mierzejewski <rpm[AT]greysector.net> 1.0.17-1
changelog:
  - update to 1.0.17 (#1465878)
  - ease future updates by better macro use
  - drop obsolete patch hunks
  - fix missing prototype for fchown warning


author: Dominik Mierzejewski <rpm[AT]greysector.net> 1.0.17-5
changelog:
  - ensure binaries are linked with Fedora LDFLAGS (#1548532)
  - use ldconfig_scriptlets macro
  - add proper man links for tcat and untoast


author: Karsten Hopp <karsten@redhat.com> - 2.0.0-37git}
changelog:
  - use versioned build requirement on pkgconfig(openssl) to prevent using
    compat-openssl10-devel instead of openssl-devel


author: Simone Caronni <negativo17@gmail.com> - 2:2.0.0-39.20180314gitf8baeb7
changelog:
  - Update to latest snapshot.
  - Fixes connection to RDP servers with the latest Microsoft patches:
    https://github.com/FreeRDP/FreeRDP/issues/4449


author: Brian C. Lane <bcl@redhat.com> - 0.26.5-1
changelog:
  - Rebase to 0.26.5 (CVE-2018-11235, CVE-2018-10887, CVE-2018-10888)
  - Disable SSH so that libssh2 is not required
  - Use python3 when building
  - Add README.rhel8 explaining why SSH is disabled


author: Josef Ridky <jridky@redhat.com> - 2.0.25-1
changelog:
  - New upstream release 2.0.25 (#1568194)
  - Replace Python2 with Python3
  - Drop OpenIPMI-python2 and set it as Obsolete
  - Introduce new OpenIPMI-python3 package
  - use ldconfig macros
  - remove old systemd dependencies
  - use autosetup


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-1
changelog:
  - updated to 1.0.28
  - fix possible buffer overflow when parsing crafted ID3 tags (#1440758, CVE-2017-7586)
  - fix possible buffer overflow when parsing crafted flac file (#1440756, CVE-2017-7585)


author: Caolán McNamara <caolanm@redhat.com> - 0.2.8.4-49
changelog:
  - Resolves: rhbz#1388451 (CVE-2016-9011) check max claimed record len
              against max seekable position


author: Caolán McNamara <caolanm@redhat.com> - 0.2.9-1
changelog:
  - Resolves: rhbz#1602602 new version with covscan warnings fixed
  - all cve fixes merged to that new upstream


author: Paul Howarth <paul@city-fan.org> - 1.7.0-5
changelog:
  - Revert parts of previous change that broke EL-5 compatibility
  - Include NEWS in docs package, it's much more than RELEASE-NOTES


author: Paul Howarth <paul@city-fan.org> - 1.8.0-1
changelog:
  - Update to 1.8.0
    - Added a basic dockerised test suite
    - crypto: Add support for the mbedTLS backend
    - See RELEASE-NOTES for details of bug fixes


author: Paul Howarth <paul@city-fan.org> - 1.8.0-5
changelog:
  - scp: Do not NUL-terminate the command for remote exec (#1489736, GH#208)
  - Make devel package dependency on main package arch-specific
  - Drop EL-5 support
    - noarch sub-packages always available now
    - Drop legacy Group: and BuildRoot: tags
    - Drop explicit buildroot cleaning
    - %{__isa_bits} always defined now


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 8.38-1
changelog:
  - Update to 8.38
  - Fixes various CVE's:
    RHBZ #1236660, #1249905, #1250947, #1256453, #1256454, #1287616,
    RHBZ #1287619, #1287626, #1287628, #1287631, #1287634, #1287640,
    RHBZ #1287642, #1287648, #1287650, #1287656, #1287658, #1287661,
    RHBZ #1287663, #1287668, #1287670, #1287673, #1287675, #1287692,
    RHBZ #1287694, #1287698, #1287700, #1287704, #1287706, #1287720,
    RHBZ #1287722


author: Robert Scheck <robert@fedoraproject.org> 0.9.12-15
changelog:
  - Added patch to avoid a /usr/@DATADIRNAME@/locale/ directory
  - Use %{_udevrulesdir} macro rather /etc/udev/rules.d/ (#1226681)


author: Nicolas Chauvet <kwizart@gmail.com> - 0.15.1b-15
changelog:
  - Don't use multiarch patch when the result is not hardcoded
  - Update FPM
  - Add patches from lp#534287 and lp#534287


author: Jeff Moyer <jmoyer@redhat.com> - 1.4-4
changelog:
  - Get rid of SuSe conditionals (Jeff Moyer)
  - Remove the %check section. (Jeff Moyer)
  - Resolves: rhbz#1580829


author: Jeff Moyer <jmoyer@redhat.com> - 1.4-5.el8
changelog:
  - use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection
  - Resolves: rhbz#1630611


author: Jeff Moyer <jmoyer@redhat.com> - 1.5-1.el8
changelog:
  - rebase to pmdk-1.5, and rename to nvml (Jeff Moyer)
  - broken libpmemcto was removed
  - c++ bindings were moved to a separate project/package
  - Fix library requires to be =n-v-r instead of >= (Jeff Moyer)
  - resolves: rhbz#1488828


author: Rex Dieter <rdieter@fedoraproject.org> - 5:2.0.14-7
changelog:
  - avoid linking all guile-devel consumers to libgc
  - BR: gcc
  - use %{make_build},%{make_install}
  - %check: make non-fatal


author: Steve Dickson <steved@redhat.com> 2.3.3-6
changelog:
  - Changed /var/lib/nfs/rpc_pipefs to have 555 permissions (bz 1583489)
  - Removed tcp wrappers support from man pages (bz 1642596) 
  - Reload not restart gssproxy in nfs-server.service (bz 1592660)


author: Steve Dickson <steved@redhat.com> 2.3.3-8
changelog:
  - Update junction code with latest upstream code (1543126)
  - Make sure /etc/sysconfig/nfs is immutabl (1639432)


author: Steve Dickson <steved@redhat.com> 2.3.3-12
changelog:
  - Change nfsconvert.sh not to set the immutable bit (bz 1673685)
  - Change nfsconvert.py not to create the new dummy /etc/sysconfig/nfs (bz 1673685)


author: Tomas Popela <tpopela@redhat.com> - 2:3.28.1-3
changelog:
  - Add the Quit entry to the app menu
  - Handle Ctrl+Q shortcut for quitting the application
  - Resolves: rhbz#1638876


author: Tomáš Mráz <tmraz@redhat.com> - 0.12-0.50.pre6
changelog:
  - drop disablement of TLS1.0 on second attempt to connect,
    it would not work correctly anyway and the code does not build
    with OpenSSL-1.1.0


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.51.pre6
changelog:
  - fix compatibility with OpenSSL 1.1 (#1423519)
  - make configure.ac recognize recent versions of GCC
  - apply patches automatically to ease maintenance


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.55.pre6
changelog:
  - drop support for JS engine that is no longer maintained
  - always build verbosely, drop outdated doc files


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-8
changelog:
  - Add %_isa to -devel base package dependency.
  - Headers get installed by "make install", copying them from the HTML
    doc headers dir is not necessary.
  - Configure build with --disable-static.
  - Drop unneeded spec stuff (buildroot def, removal, clean, pkgconfig dep).
  - Using %defattr is not needed anymore.
  - Deduplicate documentation files in unversioned docdir (#1001276).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Kalev Lember <klember@redhat.com> - 0.6.9-1
changelog:
  - Update to 0.6.9
  - Use make_install macro
  - Mark COPYING and COPYING.LIB as %license
  - Tighten -devel subpackage deps


author: Madison Kelly <mkelly@alteeve.ca> - 1.1-4
changelog:
  - Removed leading spaces from descriptions.
  - Added the (commented out) %check tests.
  - Updated the changelog macro references to have two percent signs.
  - Dropped the redundant libknet1-devel license files.
  - Changed 'GPLv2+ + LGPLv2+' to 'GPLv2+ and LGPLv2+'.
  - Updated %ldconfig_scriptlets call.
  - Clarified the kronosnet protocol version in the summary.


author: Madison Kelly <mkelly@alteeve.ca> - 1.1-8
changelog:
  - Changed pkgconfig() to normal package names to help avoid the wrong
    package being pulled in to satisfy dependencies.


author: Honggang Li <honli@redhat.com> - 1.6.7-5
changelog:
  - Update source URL
  - Disable support for ARM32
  - Disable support for s390 as rdma-core is unavailable for s390
  - Remove rdma-ndd as it had been merged into rdma-core
  - Resolves: bz1484155


author: Josef Ridky <jridky@redhat.com> - 3.4.1-1
changelog:
  - Spec clean up (remove Group tag, add ldconfig scriptlets, escape macros in comments)
  - Remove unused patch
  - Add gcc and gcc-c++ requirements
  - Rebase to version 3.4.1


author: Sérgio Basto <sergio@serjux.com> - 3.4.1-2
changelog:
  - Enable VA
  - Do not use -f on rm because it silences errors
  - Opencv sub-package don't need ldconfig because don't have any so


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Reformatted Changes to follow basic format in CPAN::Changes::Spec
    - Make tests pass without . in @INC


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-1
changelog:
  - New version 2.6.2
  - Contains fixes for CVE-2018-14339, CVE-2018-14340, CVE-2018-14341, CVE-2018-14342, CVE-2018-14343, CVE-2018-14344, CVE-2018-14367, CVE-2018-14368, CVE-2018-14369, CVE-2018-14370


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-7
changelog:
  - Resolves: #1642919 - CVE-2018-12086, CVE-2018-18225, CVE-2018-18226, CVE-2018-18227
  - Resolves: #1656342 - CVE-2018-19623
  - Resolves: #1657634 - CVE-2018-19625
  - Resolves: #1657211 - CVE-2018-19626
  - Resolves: #1657184 - CVE-2018-19627
  - Resolves: #1657190 - CVE-2018-19628
  - fixes CVE-2018-19622, CVE-2018-19624


author: Caolán McNamara <caolanm@redhat.com> 1.14.29-6
changelog:
  - Resolves: rhbz#1202683 thumbnails not created in absence of ImageMagick
    because gdk-pixbuf2-devel not present at build time


author: Martin Gansser <martinkg@fedoraproject.org> - 1:0.9.57-1
changelog:
  - Update to 0.9.57
  - Dropped dependency on libgcrypt
  - Dropped dependency on openssl
  - Update tarball link to "https:"
  - Add examples from doc/examples


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.12-22
changelog:
  - Python 2 binary package renamed to python2-libdnet
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Marek Polacek <polacek@redhat.com> 8.2.1-1.3
changelog:
  - change the default -march on s390x to z13 with tuning for z14 (#1571124)
  - use --disable-multilib on s390x


author: Jeff Law <law@redhat.com 8.2.1-3.4
changelog:
  - Backport PPC string inlines from trunk which allow for valgrind's
    memcheck to work properly (#1652929)
  - Backport bugfix for clz pattern on s390 affecting jemalloc (#1652016)


author: Laine Stump <laine@redhat.com>
changelog:
  - Improve performance with large number of interfaces
     (Bug 1268384, Bug 1271341)
   - recognize bond devices with no slaves


author: Paul Howarth <paul@city-fan.org> - 2:1.44-1
changelog:
  - Update to 1.44
    - Added a stringify() method, which does exactly the same thing as
      stringification overloading does (GH#58)
    - Added an is_last_day_of_month() method to indicate whether or not an object
      falls on the last day of its month (GH#60)


author: Paul Howarth <paul@city-fan.org> - 2:1.46-1
changelog:
  - Update to 1.46
    - Fixed the formatting for the CLDR "S" symbol, which in some cases would
      round up to 1 instead of truncating a value, e.g. the "SSS" symbol would
      format 999,999,999 nanoseconds as "1.000" (GH#71)


author: Paul Howarth <paul@city-fan.org> - 2:1.47-1
changelog:
  - Update to 1.47
    - DateTime::Duration->multiply now only allows integer multipliers (GH#73)
    - Added is_last_day_of_quarter() and is_last_day_of_year() methods (GH#72)
    - When an exception was thrown while adding a duration, the object could be
      left in a broken state with the duration partially applied; subsequent
      addition or subtraction would produce the wrong results (GH#74)
  - Add patch to support use without Sub::Util (GH#77, GH#78)


author: Paul Howarth <paul@city-fan.org> - 2:1.48-1
changelog:
  - Update to 1.48
    - The last release would die if Sub::Util was not available, but this should
      just be an optional requirement (GH#77, GH#78)


author: Paul Howarth <paul@city-fan.org> - 2:1.49-1
changelog:
  - Update to 1.49
    - Updated the ppport.h with the latest version of Devel::PPPort, which fixes
      a compilation warning when compiling with 5.27.11 (GH#81)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 2:1.50-1
changelog:
  - Update to 1.50
    - The %F strftime pattern incorrectly zero-padded numbers less than four
      digits; according to POSIX::strftime, this should output the year as-is
      without padding (GH#83)


author: Kalev Lember <klember@redhat.com> - 2.38.1-1
changelog:
  - Update to 2.38.1
  - Use make_install macro
  - Set minimum versions for required libraries
  - Tighten -devel deps with the _isa macro


author: Matěj Týč <matyc@redhat.com> - 1.3.0-4
changelog:
  - Fixed a sudo regression in oscap-ssh.
  - Updated test to work with newer versions of procps.
  - Updated the man page.


author: Gabriel Becker <ggasparb@redhat.com> - 1.3.0-6
changelog:
  - Removed containers package as RHEL-8.0.0 will not support it.
  - Removed oscap-chroot binary and manpage from utils package as RHEL-8.0.0 will not support it.


author: Gabriel Becker <ggasparb@redhat.com> - 1.3.0-7
changelog:
  - Removed oscap-vm binary and manpage files from build as they will not be supported by RHEL-8.0.0.
  - Explicitly specify which files should be in openscap-utils subpackage.


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-4
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Fixes CVE-2018-10733
  - Resolves: #1576113


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-5
changelog:
  - Fix integer overflow in png decoder
  - Clear the error before trying to load an image again
  - Resolves: #1524378


author: Michal Schmidt <mschmidt@redhat.com> - 1.3.8-6
changelog:
  - Fix FTBFS with current autotools (#1083627)
  - Drop tpm-tools-1.3.7-build.patch, the package builds without it (#952372)


author: Michal Schmidt <mschmidt@redhat.com> - 1.3.9-1
changelog:
  - Upstream release 1.3.9.
  - Add fixes for build errors with OpenSSL 1.1.
  - Add fixes for NULL cipher context use in seal/unseal.
  - spec file modernization.


author: Bastien Nocera <bnocera@redhat.com> - 1.22.0-6
changelog:
  + libpeas-1.22.0-6
  - Remove python2 loader, all GNOME apps using libpeas were ported to Python3
    when ported to GTK+ 3.x, and obsolete libpeas-loader-python
  - Resolves: #1559090


author: Debarshi Ray <rishi@fedoraproject.org> - 0.19.0-1
changelog:
  - 0.19.0
  - Fix License
  - Explicitly enable JPEG and OpenMP support to avoid surprises
  - Tighten %files, mostly so api/soname changes will no longer be a surpise
  - Use %make_build %ldconfig_scriptlets
  Resolves: #1633708


author: Paul Howarth <paul@city-fan.org> - 0.21-5
changelog:
  - Fix FTBFS due to missing buildreq perl-devel
  - Simplify find command using -empty and -delete
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.015-1
changelog:
  - Update to 0.015
    - Port to Perl 5.19.4, where the C type of array indices has changed
    - Update to accommodate PERL_OP_PARENT builds of Perl 5.21.11 or later
      (which is the default from Perl 5.25.1)
    - Trigger custom op generation via Devel::CallChecker rather than by hooking
      the underlying op checker
    - Update test suite not to rely on . in @INC, which is no longer necessarily
      there from Perl 5.25.7
    - No longer include a Makefile.PL in the distribution
    - Correct dynamic_config setting to 0
    - Use boolSV() where appropriate in XS code
    - Use cBOOL() where appropriate
    - Consistently use THX_ prefix on internal function names
    - Include META.json in distribution
    - Add MYMETA.json to .cvsignore
    - Convert .cvsignore to .gitignore
    - Update for changed S_croak_xs_usage() prototype in ExtUtils::ParseXS 3.30,
      requiring the new version of that module in order to build the XS
      implementation
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - Correctly classify ExtUtils::ParseXS dependency as a recommendation rather
      than a requirement
    - Avoid some compiler warnings
  - Classify buildreqs by usage
  - Drop legacy spec file elements: %defattr and Group: tag
  - Make %files list more explicit


author: Jan Grulich <jgrulich@redhat.com> - 0.26-9
changelog:
  - Security fix for CVE-2017-17723, CVE-2017-17725, CVE-2018-10958, CVE-2018-10998,
    CVE-2018-11531, CVE-2018-12264, CVE-2018-12265, CVE-2018-14046, CVE-2018-5772,
    CVE-2018-8976, CVE-2018-8977, CVE-2018-9144


author: Jens Petersen <petersen@redhat.com> - 2.0.6-4
changelog:
  - link executable statically to its Haskell deps for portability (#1657278)
  - add common subpackage for shared data files


author: Thomas Haller <thaller@redhat.com> - 1.8.10-2
changelog:
  - fix double-free handling VPN data in nm-applet (rh #1541565)
  - fix certificate chooser for no available modules (bgo #785674)


author: Honggang Li <honli@redhat.com> - 10.2.103_1-1
changelog:
  - Rebase to latest upstream master branch.
  - Fix build failures caught by gcc 7.x.
  - Resolves: bz1423872


author: - 10.3.8-5
changelog:
  - Fix partial injection of Fedora build flags.
  - Double the sizeof array fdesc to fix a gcc compiling issue.
  - Resolves: bz1556062


author: Kalev Lember <klember@redhat.com> - 1.55.2-1
changelog:
  - Update to 1.55.2
  - Drop /usr/bin/env shebang patch as the brp scripts now handle this correctly
  - Remove ldconfig scriptlets


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc3-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc3
  - resolves: #1554753 - Fix CVE-2018-1050
  - resolves: #1617912 - Fix CVE-2018-10858
  - resolves: #1617913 - Fix CVE-2018-10918
  - resolves: #1617914 - Fix CVE-2018-10919
  - resolves: #1617915 - Fix CVE-2018-1139
  - resolves: #1612522 - Manpage fixes


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc5-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc5
  - resolves: #1610909 - Re-enable glubsterfs vfs module
  - resolves: #1624170 - Build with -fstack-protectore-strong if available
  - resolves: #1602685 - Fixed issues found by covscan


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.1-3
changelog:
  - Temporarily remove smbtorture from samba-test due to Python 2 linkage
  - related: #1609661 - samba-test package cannot be installed due to unresolved dependencies


author: Andreas Schneider <asn@redhat.com> - 4.9.1-5
changelog:
  - resolves: #1644327 - Segfault if wrong 'passdb backend' is configured
  - resolves: #1647959 - Segfault in the debug system with hardended build


author: Andreas Schneider <asn@redhat.com> - 4.9.1-6
changelog:
  - resolves: #1642092 - Harden [homes] share export
  - resolves: #1648846 - Fix out of bound array access in ctdb
  - resolves: #1657266 - Fix tmp directory creation in /run


author: Andreas Schneider <asn@redhat.com> - 4.9.1-7
changelog:
  - resolves: #1658690 - Add smbc_setOptionProtocols()
  - resolves: #1658678 - Fix spoolss client operations against Windows


author: Daiki Ueno <dueno@redhat.com> - 0.1.24-1
changelog:
  - Update to 0.1.24
  - Apply patch from upstream, which fixes scim-thai FTBFS with GCC6 (Closes: #1308117)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 4.19.6-3
changelog:
  - Python 2 binary packages renamed to python2-sip and python2-sip-devel
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomas Hoger <thoger@redhat.com> - 0.1.13-11
changelog:
  - Add conditional for building with(out) gst010 / GStreamer 0.10 support.
  - Disable gst010 plugin by default.


author: Stefan Becker <chemobejk@gmail.com> - 0.1.14-3
changelog:
  - update to 0.1.14-70-gfb2f1f7 with alternate server fixes for SIPE
  - add autoreconf build step
  - remove examples subpackage as examples are no longer installed


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-4.20171128gitfb2f1f7
changelog:
  - enable make check again
  - make tests pass in Koji
  - disable test-new-dribble that sometimes hangs indefinitely
  - make tests compile on i686
  - make the package build on armv7hl
  - make the package build on Fedora 28
  - avoid build failure if gstreamer-plugins-base-devel is installed
  - move autoreconf invocation to %prep
  - use Name Version Release that explicitly identifies an SCM snapshot (#1541646)


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-6.20171128gitfb2f1f7
changelog:
  - temporarily make the upstream test-suite run on Intel arches only
  - disable test-send-recv, which fails in Koji


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-7.20180504git34d6044
changelog:
  - component: accept TURN in nice_component_verify_remote_candidate() (#1541646)
  - update to 0.1.14-85-g34d6044 (#1541646)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.34-1
changelog:
  - dovecot updated to 2.2.34, pigeonhole updated to 0.4.22
  - fixes CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be reached
    and the process restarted. This happens only if Dovecot config has
    local_name { } or local { } configuration blocks and attacker uses
    randomly generated SNI servernames.
  - fixes CVE-2017-14461: Parsing invalid email addresses may cause a crash or
    leak memory contents to attacker. For example, these memory contents
    might contain parts of an email from another user if the same imap
    process is reused for multiple users.
  - fixes CVE-2017-15132: Aborted SASL authentication leaks memory in login
    process.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630383)
  - update first/last_valid_gid range patch (#1630410)


author: Robert Scheck <robert@fedoraproject.org> - 8.15.2-27
changelog:
  - Use SSL_CTX_use_certificate_chain_file() to handle intermediate
    certificates passed additionally in confSERVER_CERT (#1565341)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-30
changelog:
  - Dropped sysvinit support
    Resolves: rhbz#1610287
  - Dropped hesiod support
    Resolves: rhbz#1638491


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.1-1
changelog:
  - the latest release, per release notes:
    https://groups.google.com/forum/#!topic/libarchive-discuss/jfc7lBfrvVg


author: Josef Ridky <jridky@redhat.com> - 3.19.1-1
changelog:
  - Update to 3.19.1
  - Add patch to use libtirpc
  - Add BR gcc-c++
  - Resolves: #1580754 - FTBFS in RHEL-8


author: David King <amigadave@amigadave.com> - 1.3.5-1
changelog:
  - Update to 1.3.5 (#1197923)
  - Use license macro for COPYING
  - Tighten subpackage dependencies
  - Use make_install and make_build macros
  - Use pkgconfig for BuildRequires
  - Remove unnecessary Requires from devel subpackage
  - Remove obsolete Obsoletes


author: Kalev Lember <klember@redhat.com> - 3.12.2-1
changelog:
  - Update to 3.12.2
  - Use desktop-file-validate instead of desktop-file-install
  - Update download URLs


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.7-1
changelog:
  - Update Source to 0.7.7
    * Previous patches 0001-0009 & 0016 are included in this commit
  - Add upstream patches since 0.7.7
    * patches 0001-0012 are from upstream commits since 0.7.7
  - Add 0013-libmultipath-print-correct-default-for-delay_-_check.patch
    * fix minor configuration printing issue. posted upstream
  - Add 0014-multipath.conf.5-clarify-property-whitelist-handling.patch
    * clarify property blacklist_excecptions handling in man page
      posted upstream
  - Add 0015-mpathpersist-add-all_tg_pt-option.patch
    * add new all_tg_pt multpiath.conf option. posted upstream
  - Add 0016-libmultipath-remove-rbd-code.patch
    * remove unused rbd code. posted upstream
  - Add 0017-mpathpersist-fix-aptpl-support.patch
    * add ":aptpl" suffix for reservation_key to fix aptpl support.
      posted upstream
  - Add 0018-multipath-don-t-check-timestamps-without-a-path.patch
    * fix multipath null dereference crash. posted upstream
  - Add 0019-libmultipath-fix-detect-alua-corner-case.patch
    * fix alua detection with retain_hardware_handler set to off. posted
      upstream
  - Add 0020-multipath-fix-setting-conf-version.patch
    * multipath wasn't setting the kernel version correctly. posted
      upstream
  - Add 0028-RH-reset-default-find_mutipaths-value-to-off.patch
    * default to RHEL7 and older device detection style. Redhat specific,
      to keep customer experience the same.
  - Rename files
    * Previous patches 0010-0015 & 0017 are now patches 0021-0027
  - Modify 0021-RH-fixup-udev-rules-for-redhat.patch
    * Fix spurious compile warning with redhat compile options
  - Modify 0022-RH-Remove-the-property-blacklist-exception-builtin.patch
    * clarify changes in man page


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.7-2.gitef6d98b
changelog:
  - Update Source to latest upstream commit
    * Previous patches 0001-0018 are included in this commit
  - Rename files
    * Previous patches 0019-0028 are now patches 0002-0003 & 0012-0019
  - Add 0001-libmultipath-remove-last-of-rbd-code.patch
  - Add 0004-mpathpersist-add-param-alltgpt-option.patch
    * mpathpersist now accepts --param-alltgpt
  - Add 0005-libmutipath-remove-unused-IDE-bus-type.patch
  - Add 0006-multipathd-add-new-protocol-path-wildcard.patch
    * multipathd show paths format now accepts %PATCH for the path protocol/transport
  - Add 0007-libmultipath-add-protocol-blacklist-option.patch
    * You can now use the "protocol" blacklist section parameter to blacklist
      by protocol/transport
  - Add 0008-libmultipath-remove-_filter_-blacklist-functions.patch
  - Add 0009-multipath-tests-change-to-work-with-old-make-version.patch
  - Add 0010-multipath-tests-add-blacklist-tests.patch
  - Add 0011-mpathpersist-add-missing-param-rk-usage-info.patch
  - Refresh 0013-RH-Remove-the-property-blacklist-exception-builtin.patch
  - Modify 0016-RH-add-mpathconf.patch
    * improve usage message and man page
  - Modify device-mapper-multipath.spec
    * updated dependencies


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-1
changelog:
  - Update Source to upstream version 0.7.8
    * Previous patches 0001-0011 are included in this version
  - Rename files
    * Previous patches 0012-0019 are now patches 0007-0014
  - Add 0001-multipath-tweak-logging-style.patch
  - Add 0002-multipathd-check-for-NULL-udevice-in-cli_add_path.patch
  - Add 0003-libmultipath-remove-max_fds-code-duplication.patch
  - Add 0004-multipathd-set-return-code-for-multipathd-commands.patch
  - Add 0005-mpathpersist-fix-registration-rollback-issue.patch
  - Add 0006-libmultipath-timeout-on-unresponsive-tur-thread.patch
    * The above 6 patches have been submitted upstream
  - Resolves: bz #1606947, #1631883


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-2
changelog:
  - Add 0015-libmultipath-free-allocated-value-in-set_int.patch
  - Add 0016-kpartx-fix-new-memory-leak-in-dm_find_part.patch
  - change hardcoded /usr/lib/udev/rules.d to _udevrulesdir
  - Resolves: bz #1606947


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-3
changelog:
  - Add 0017-BZ-1648397-fix-mpp-hwe-handling-when-paths-are-freed.patch
    * Fix crash by deleting in use hardware entry list pointer
  - Add 0018-libmultipath-cleanup-pthread_cleanup_pop-call.patch
    * Fix compiler warning
  - Add 0019-libmultipath-fix-false-removes-in-dmevents-polling-c.patch
    * The above 3 patches have been accepted upstream
  - Resolves: bz #1648397


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-5
changelog:
  - Add 0021-BZ-1673167-Fix-miscounting-active-paths.patch
  - Add 0022-BZ-1673167-ignore-failed-wwid-recheck.patch
  - Resolves: bz #1673167


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-6
changelog:
  - Fix multipath_conf_syntax CI test
    * need to wait for udev to settle before removing multipath device
  - Resolves: bz #1673167


author: Than Ngo <than@redhat.com> - 3.10.0-3
changelog:
  - Resolves: #1657683, can't establish libica token in FIPS mode
  - Resolves: #1652856, EP11 token fails when using Strict-Session mode or VHSM-Mode


author: Paul Howarth <paul@city-fan.org> - 7.14-1
changelog:
  - Update to 7.14
    - Fix a crash bug in AnyEvent::Handle with openssl 1.1.0
    - AnyEvent::Handle->keepalive was documented (and defined) twice
    - AnyEvent::Socket::tcp_bind/tcp_server would immediately unlink a unix
      listening socket unless a guard is used; change this so that no clean-up
      will be performed unless a guard is used and document this more clearly
    - Make tcp_bind/tcp_server error messages more regular
    - Fix building on Perl without '.' in @INC
    - Add TCP_FASTOPEN/MSG_FASTOPEN and MSG_NOSIGNAL/MSG_MORE/MSG_DONTWAIT to
      constants
    - Update warnings to common::sense 3.74 standards


author: Miro Hrončok <mhroncok@redhat.com> - 5.33-3
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build)


author: Kamil Dudka <kdudka@redhat.com> - 5.33-4
changelog:
  - do not classify shared libraries as pie executables (#1581343)
  - seccomp: fix build failure due to missing syscalls


author: Kamil Dudka <kdudka@redhat.com> - 5.33-7
changelog:
  - show details about ppc swap partition (#1224668)
  - support longer version strings for clamav database (#1539107)


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-71.el8]
changelog:
  - [pci] pci/quirks: Add quirk to reset nvgpu at boot for the Lenovo ThinkPad P50 (Lyude Paul) [1677022]
  - [arm64] arm64, vmcoreinfo : Append 'MAX_USER_VA_BITS' to vmcoreinfo (Bhupesh Sharma) [1672962]
  - [md] dm thin: fix bug where bio that overwrites thin block ignores FUA (Mike Snitzer) [1679211]
  - [pci] PCI: Fix "try" semantics of bus and slot reset (Myron Stowe) [1662901]
  - [acpi] acpi/nfit: Fix bus command validation (Jeff Moyer) [1673958]
  - [pci] PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() (Myron Stowe) [1667773]
  - [fs] NFS: Don't use page_file_mapping after removing the page (Benjamin Coddington) [1664190]
  - [fs] NFS: Fix up return value on fatal errors in nfs_page_async_flush() (Benjamin Coddington) [1664190]
  - [md] md: fix raid10 hang issue caused by barrier (Xiao Ni) [1630921]
  - [md] md/raid1: don't clear bitmap bits on interrupted recovery. (Xiao Ni) [1677360]
  - [virt] kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974) (Paolo Bonzini) [1673843] {CVE-2019-6974}
  - [block] blk-mq: fix a hung issue when fsync (Ming Lei) [1674399]
  - [block] Revert "block: cover another queue enter recursion via BIO_QUEUE_ENTERED" (Ming Lei) [1673966]
  - [tools] perf tools: Check for null when copying nsinfo. (Jiri Olsa) [1676451]
  - [iommu] iommu/amd: Fix IOMMU page flush when detach device from a domain (Suravee Suthikulpanit) [1672476]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-73.el8]
changelog:
  - [net] tun: forbid iface creation with rtnl ops (Sabrina Dubroca) [1680969]
  - [net] revert "bridge: do not add port to router list when receives query with source 0.0.0.0" (Hangbin Liu) [1679896]
  - [net] sctp: walk the list of asoc safely (Marcelo Leitner) [1679920] {CVE-2019-8956}
  - [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1677647]
  - [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1677647]
  - [net] netfilter: nf_tables: fix flush after rule deletion in the same batch (Phil Sutter) [1677672]
  - [net] gro_cell: add napi_disable in gro_cells_destroy (Stefano Brivio) [1674408]
  - [net] sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment (Xin Long) [1669386]
  - [net] ipvs: fix dependency on nf_defrag_ipv6 (Andrea Claudi) [1660808]
  - [net] sctp: check and update stream->out_curr when allocating stream_out (Xin Long) [1651877]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-74.el8]
changelog:
  - [x86] revert "cpu/hotplug: Add SMT policy options" (Josh Poimboeuf) [1683690]
  - [crypto] net: crypto set sk to NULL when af_alg_release (Neil Horman) [1679450] {CVE-2019-8912}
  - [drm] drm/i915/gvt: update force-to-nonpriv register whitelist (Paul Lai) [1643972]
  - [kernel] MODSIGN: Also check platform keyring in mod_verify_sig() (Lenny Szubowicz) [1568532]
  - [kernel] Fix for module sig verification (Lenny Szubowicz) [1568532]
  - [security] efi: Lock down the kernel if booted in secure boot mode (Lenny Szubowicz) [1568532]
  - [firmware] efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode (Lenny Szubowicz) [1568532]
  - [x86] Copy secure_boot flag in boot params across kexec reboot (Lenny Szubowicz) [1568532]
  - [fs] debugfs: Restrict debugfs when the kernel is locked down (Lenny Szubowicz) [1568532]
  - [mm] x86/mmiotrace: Lock down the testmmiotrace module (Lenny Szubowicz) [1568532]
  - [kernel] Lock down module params that specify hardware parameters (eg. ioport) (Lenny Szubowicz) [1568532]
  - [tty] Lock down TIOCSSERIAL (Lenny Szubowicz) [1568532]
  - [pcmcia] Prohibit PCMCIA CIS storage when the kernel is locked down (Lenny Szubowicz) [1568532]
  - [acpi] acpi: Disable ACPI table override if the kernel is locked down (Lenny Szubowicz) [1568532]
  - [acpi] acpi: Ignore acpi_rsdp kernel param when the kernel has been locked down (Lenny Szubowicz) [1568532]
  - [acpi] ACPI: Limit access to custom_method when the kernel is locked down (Lenny Szubowicz) [1568532]
  - [x86] x86/msr: Restrict MSR access when the kernel is locked down (Lenny Szubowicz) [1568532]
  - [x86] x86: Lock down IO port access when the kernel is locked down (Lenny Szubowicz) [1568532]
  - [pci] PCI: Lock down BAR access when the kernel is locked down (Lenny Szubowicz) [1568532]
  - [kernel] uswsusp: Disable when the kernel is locked down (Lenny Szubowicz) [1568532]
  - [kernel] hibernate: Disable when the kernel is locked down (Lenny Szubowicz) [1568532]
  - [kernel] kexec_load: Disable at runtime if the kernel is locked down (Lenny Szubowicz) [1568532]
  - [char] Restrict /dev/{mem, kmem, port} when the kernel is locked down (Lenny Szubowicz) [1568532]
  - [kernel] MODSIGN: Enforce module signatures if the kernel is locked down (Lenny Szubowicz) [1568532]
  - [security] Add a SysRq option to lift kernel lockdown (Lenny Szubowicz) [1568532]
  - [security] Add the ability to lock down access to the running kernel image (Lenny Szubowicz) [1568532]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-75.el8]
changelog:
  - [netdrv] net: hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1676771]
  - [netdrv] net: hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1676771]
  - [netdrv] net: hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1676771]
  - [netdrv] net: hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1676771]
  - [net] netfilter: nf_nat_snmp_basic: add missing length checks in ASN.1 cbs (Florian Westphal) [1676602]
  - [char] ipmi: fix use-after-free of user->release_barrier.rda (Xiaojun Tan) [1677550]
  - [char] ipmi: Prevent use-after-free in deliver_response (Xiaojun Tan) [1677550]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-76.el8]
changelog:
  - [security] revert "Add a SysRq option to lift kernel lockdown" (Lenny Szubowicz) [1684348]
  - [s390] s390/setup: fix boot crash for machine without EDAT-1 (Philipp Rudo) [1677357]
  - [s390] s390/setup: fix early warning messages (Philipp Rudo) [1677357]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-77.el8]
changelog:
  - [firmware] efi: Reduce the amount of memblock reservations for persistent allocations (Bhupesh Sharma) [1682988]
  - [firmware] efi: Permit multiple entries in persistent memreserve data structure (Bhupesh Sharma) [1682988]
  - [kernel] cpu/hotplug: Create SMT sysfs interface for all arches (Josh Poimboeuf) [1686068]
  - [net] netfilter: nft_set_hash: bogus element self comparison from deactivation path (Florian Westphal) [1678574]
  - [net] netfilter: nft_set_hash: fix lookups with fixed size hash on big endian (Florian Westphal) [1678574]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-79.el8]
changelog:
  - [firmware] drivers/firmware: psci_checker: stash and use topology_core_cpumask for hotplug tests (Josh Poimboeuf) [1687101]
  - [arm64] arm64: topology: re-introduce numa mask check for scheduler MC selection (Josh Poimboeuf) [1687101]
  - [arm64] arm64: topology: rename llc_siblings to align with other struct members (Josh Poimboeuf) [1687101]
  - [arm64] arm64: smp: remove cpu and numa topology information when hotplugging out CPU (Josh Poimboeuf) [1687101]
  - [arm64] arm64: topology: restrict updating siblings_masks to online cpus only (Josh Poimboeuf) [1687101]
  - [arm64] arm64: topology: add support to remove cpu topology sibling masks (Josh Poimboeuf) [1687101]
  - [arm64] arm64: numa: separate out updates to percpu nodeid and NUMA node cpumap (Josh Poimboeuf) [1687101]
  - [arm64] arm64: topology: refactor reset_cpu_topology to add support for removing topology (Josh Poimboeuf) [1687101]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.el8]
changelog:
  - [arm64] revert "arm64: tlb: Avoid synchronous TLBIs when freeing page tables" (Christoph von Recklinghausen) [1685697]


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.18.2-4
changelog:
  - remove support for no longer supported Fedora versions (<=25)
  - fix: add %{_libdir}/cmake/OpenAL directory to devel
  - fix: s/_datarootdir/_datadir/ as this package does not uses datarootdir
    but datadir
  - fix: add %{_datadir}/openal to main package as well and to %exclude
    %{_datadir}/openal/{alsoftrc.sample,presets/presets.txt} as those files
    are not needed
  - removed Group fields
    (https://fedoraproject.org/wiki/Packaging:Guidelines#Tags_and_Sections)
  - add use more macros (%autosetup, %make_build, %make_install)


author: Hans de Goede <hdegoede@redhat.com> - 1.18.2-5
changelog:
  - Allow pulseaudio to move openal-soft output streams (rhbz#1544381)
  - Fix release -4 not building (rhbz#1544012)
  - Drop unnecessary qt-devel BuildRequires (we also BuildRequire qt5-devel)


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-54.el8
changelog:
  - kvm-s390x-tcg-avoid-overflows-in-time2tod-tod2time.patch [bz#1653569]
  - kvm-s390x-kvm-pass-values-instead-of-pointers-to-kvm_s39.patch [bz#1653569]
  - kvm-s390x-tod-factor-out-TOD-into-separate-device.patch [bz#1653569]
  - kvm-s390x-tcg-drop-tod_basetime.patch [bz#1653569]
  - kvm-s390x-tcg-properly-implement-the-TOD.patch [bz#1653569]
  - kvm-s390x-tcg-SET-CLOCK-COMPARATOR-can-clear-CKC-interru.patch [bz#1653569]
  - kvm-s390x-tcg-implement-SET-CLOCK.patch [bz#1653569]
  - kvm-s390x-tcg-rearm-the-CKC-timer-during-migration.patch [bz#1653569]
  - kvm-s390x-tcg-fix-locking-problem-with-tcg_s390_tod_upda.patch [bz#1653569]
  - kvm-hw-s390x-Include-the-tod-qemu-also-for-builds-with-d.patch [bz#1653569]
  - kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1653569]
  - kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1653569]
  - kvm-migration-discard-non-migratable-RAMBlocks.patch [bz#1539285]
  - kvm-vfio-pci-do-not-set-the-PCIDevice-has_rom-attribute.patch [bz#1539285]
  - kvm-memory-exec-Expose-all-memory-block-related-flags.patch [bz#1539285]
  - kvm-memory-exec-switch-file-ram-allocation-functions-to-.patch [bz#1539285]
  - kvm-configure-add-libpmem-support.patch [bz#1539285]
  - kvm-hostmem-file-add-the-pmem-option.patch [bz#1539285]
  - kvm-mem-nvdimm-ensure-write-persistence-to-PMEM-in-label.patch [bz#1539285]
  - kvm-migration-ram-Add-check-and-info-message-to-nvdimm-p.patch [bz#1539285]
  - kvm-migration-ram-ensure-write-persistence-on-loading-al.patch [bz#1539285]
  - Resolves: bz#1539285
    ([Intel 8.0 Bug] [KVM][Crystal Ridge] Lack of data persistence guarantee of QEMU writes to host PMEM)
  - Resolves: bz#1653569
    (Stress guest and stop it, then do live migration, guest hit call trace on destination end)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-55.el8
changelog:
  - kvm-block-Don-t-inactivate-children-before-parents.patch [bz#1659395]
  - kvm-iotests-Test-migration-with-blockdev.patch [bz#1659395]
  - Resolves: bz#1659395
    (src qemu core dump when do migration ( block device node-name changed after change cdrom) - Slow Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-56.el8
changelog:
  - kvm-Run-iotests-as-part-of-the-build-process.patch [bz#1661026]
  - kvm-Introduce-the-qemu-kvm-tests-rpm.patch [bz#1601107]
  - Resolves: bz#1601107
    (qemu-kvm packaging: make running qemu-iotests more robust)
  - Resolves: bz#1661026
    (Run iotests as part of build process)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-58.el8
changelog:
  - kvm-block-Update-flags-in-bdrv_set_read_only.patch [bz#1644996]
  - kvm-block-Add-auto-read-only-option.patch [bz#1644996]
  - kvm-rbd-Close-image-in-qemu_rbd_open-error-path.patch [bz#1644996]
  - kvm-block-Require-auto-read-only-for-existing-fallbacks.patch [bz#1644996]
  - kvm-nbd-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-file-posix-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-curl-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-gluster-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-iscsi-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-block-Make-auto-read-only-on-default-for-drive.patch [bz#1644996]
  - kvm-qemu-iotests-Test-auto-read-only-with-drive-and-bloc.patch [bz#1644996]
  - kvm-block-Fix-update-of-BDRV_O_AUTO_RDONLY-in-update_fla.patch [bz#1644996]
  - kvm-qemu-img-Add-C-option-for-convert-with-copy-offloadi.patch [bz#1623082]
  - kvm-iotests-Add-test-for-qemu-img-convert-C-compatibilit.patch [bz#1623082]
  - Resolves: bz#1623082
    ([rhel.8.0]Target files for 'qemu-img convert' do not support thin_provisoning with iscsi/nfs backend)
  - Resolves: bz#1644996
    (block-commit can't be used with -blockdev)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-59.el8
changelog:
  - kvm-hw-scsi-cleanups-before-VPD-BL-emulation.patch [bz#1639957]
  - kvm-hw-scsi-centralize-SG_IO-calls-into-single-function.patch [bz#1639957]
  - kvm-hw-scsi-add-VPD-Block-Limits-emulation.patch [bz#1639957]
  - kvm-scsi-disk-Block-Device-Characteristics-emulation-fix.patch [bz#1639957]
  - kvm-scsi-generic-keep-VPD-page-list-sorted.patch [bz#1639957]
  - kvm-scsi-generic-avoid-out-of-bounds-access-to-VPD-page-.patch [bz#1639957]
  - kvm-scsi-generic-avoid-invalid-access-to-struct-when-emu.patch [bz#1639957]
  - kvm-scsi-generic-do-not-do-VPD-emulation-for-sense-other.patch [bz#1639957]
  - Resolves: bz#1639957
    ([RHEL.8] scsi host device passthrough limits IO writes - slow train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-60.el8
changelog:
  - kvm-ne2000-fix-possible-out-of-bound-access-in-ne2000_re.patch [bz#1636784]
  - kvm-rtl8139-fix-possible-out-of-bound-access.patch [bz#1636784]
  - kvm-pcnet-fix-possible-buffer-overflow.patch [bz#1636784]
  - kvm-net-ignore-packet-size-greater-than-INT_MAX.patch [bz#1636784]
  - kvm-net-drop-too-large-packet-early.patch [bz#1636784]
  - kvm-net-hub-suppress-warnings-of-no-host-network-for-qte.patch [bz#1636784]
  - kvm-virtio-net-test-accept-variable-length-argument-in-p.patch [bz#1636784]
  - kvm-virtio-net-test-remove-unused-macro.patch [bz#1636784]
  - kvm-virtio-net-test-add-large-tx-buffer-test.patch [bz#1636784]
  - kvm-s390x-Return-specification-exception-for-unimplement.patch [bz#1668261]
  - kvm-cpus-ignore-ESRCH-in-qemu_cpu_kick_thread.patch [bz#1665844]
  - Resolves: bz#1636784
    (CVE-2018-17963 qemu-kvm: Qemu: net: ignore packets with large size [rhel-8])
  - Resolves: bz#1665844
    (Guest quit with error when hotunplug cpu)
  - Resolves: bz#1668261
    ([RHEL8] Backport diag308 stable exception fix (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-61.el8
changelog:
  - kvm-qemu-ga-make-get-fsinfo-work-over-pci-bridges.patch [bz#1666952]
  - kvm-qga-fix-driver-leak-in-guest-get-fsinfo.patch [bz#1666952]
  - Resolves: bz#1666952
    (qemu-guest-agent does not parse PCI bridge links in "build_guest_fsinfo_for_real_device" (q35))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-62.el8
changelog:
  - kvm-slirp-check-data-length-while-emulating-ident-functi.patch [bz#1669069]
  - Resolves: bz#1669069
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-63.el8
changelog:
  - kvm-scsi-generic-avoid-possible-out-of-bounds-access-to-.patch [bz#1668162]
  - Resolves: bz#1668162
    (CVE-2019-6501 qemu-kvm: QEMU: scsi-generic: possible OOB access while handling inquiry request [rhel-8])


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.6.3-6.git4391e5c
changelog:
  - Python 2 binary package renamed to python2-openwsman
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-8.git4391e5c
changelog:
  - Spec file clean up (removed RPM Groups tags, removed obsolete chkconfig/initscripts
    dependencies, improved readability, fixed indentation)
  - Updated openssl-1.1 patch to support builds with older openssl versions


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-1
changelog:
  - Update to openwsman-2.6.5
  - Simplify python binding build and drop python2 subpackage
  - Fix malformed HTTP 200 status line


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-3
changelog:
  - Fix wrong SSL_CTX_set_cipher_list() retval check
  - Explicitly disable build of java bindings (build fails if java-devel is installed)


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-14
changelog:
  - Add only extra flags to default RPM LDFLAGS
  - Fix multilib conflict of ldns-config (#1463423)
  - Make primary python3 in primary build, python2 in optional


author: Petr Pisar <ppisar@redhat.com> - 8.41-5
changelog:
  - Fix out-of-bounds read for partial matching of /./ against an empty string
    when the newline type is CRLF (upstream bug #2226)


author: Petr Pisar <ppisar@redhat.com> - 8.41-6
changelog:
  - Fix returning unset groups in POSIX interface if REG_STARTEND has a non-zero
    starting offset (upstream bug #2244)


author: Petr Pisar <ppisar@redhat.com> - 8.42-2
changelog:
  - Fix handling UTF and start-of-pattern options in C++ wrapper
    (upstream bug #2283)
  - Fix an error message and locale handling in pcregrep tool


author: Petr Pisar <ppisar@redhat.com> - 8.42-3
changelog:
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 256
    (bug #1619228)


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18
    - Support binary and unicode symbol names (PR#8)
    - Fixed parsing error where the name contains a single colon but the last
      separator is ::


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
    - Fix occasional segmentation fault on OpenBSD when malloc randomization
      causes nameptr to be at the beginning of the page (CPAN RT#117072)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-5
changelog:
  - QOpenGLShaderProgram: glProgramBinary() resulting in LINK_STATUS=FALSE not handled properly (QTBUG-66420)


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-8
changelog:
  - Check for stream before calling stream methods
  - when saving an embedded file
  - Resolves: #1649438


author: Milind Changire <mchangir@redhat.com> - 3.12.2-33
changelog:
  - fixes bugs bz#1350745 bz#1362129 bz#1541568 bz#1597252 bz#1599220 
    bz#1633177 bz#1637564 bz#1639476 bz#1639568 bz#1643370 bz#1645480 bz#1648296 
    bz#1648893 bz#1651040 bz#1651460 bz#1652466 bz#1652537 bz#1653224 bz#1653613 
    bz#1654103 bz#1654161 bz#1655385 bz#1655578 bz#1656357 bz#1659439


author: Paul Howarth <paul@city-fan.org> - 0.007-1
changelog:
  - Update to 0.007
    - Adapt to dot no longer being in @INC
    - Adapt to unicode syswrite being deprecated
  - Drop redundant Group: tag


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-3
changelog:
  - Fix CVEs 2018-7725, 2018-7726, 2018-7727, 2018-6484, 2018-6869 
  - Resolves: 1555082
  - Resolves: 1545818


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-6
changelog:
  - Fix multilib regression by adding a 32bit version of the multilib patch
  - Properly bump the release number in the previous changelog message
  - Resolves: #1638337


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-1
changelog:
  - New upstream release
  - Add OpenSSL 1.0 compatibility package, due to issues with OpenSSL 1.1
  - Remove libtool files
  - Run ldconfig after un/installation to update *.so files
  - Add -devel subpackage to handle include files and examples


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-2
changelog:
  - Adjusted docbook xsl path to match the correct stylesheet
  - Remove only *.la files, considering there aren't any *.a files


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-3
changelog:
  - Add OpenSSL 1.1 API support for the package, avoiding the need of
    compat-openssl10-devel package


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Support for OpenSSL 1.1 was added directly to the source code in upstream,
    thus removing specific patch for it
  - Docbook xsl stylesheet updated to a local path


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.1-2
changelog:
  - Remove libtool files
  - Run ldconfig scriptlets after un/installing
  - Add -devel subpackage to handle include files and examples
  - Disable any static file in the package


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 1.1-3
changelog:
  - Solve memory leaks pointed by covscan tool
  - Add optimization flag O2 during compilation to satisfy annocheck tool


author: David Tardon <dtardon@redhat.com> - 0.1.5-5
changelog:
  - fix char background color in some cases
  - fix handling of bitmaps in Windows Bitmap format that contain a color
    palette


author: Richard Hughes <richard@hughsie.com> 1.4.0-1
changelog:
  - New upstream version
  - Port to the Meson build system
  - Correctly build the ICC transfer curve for Rec709
  - Do not spin the Huey LEDs when the sensor is embedded
  - Do not use /tmp to create profiles
  - Use a different Huey unlock code on the W700 laptop


author: Richard Hughes <richard@hughsie.com> 1.4.1-1
changelog:
  - New upstream version
  - Include all the files in the GIR target
  - Include the correct file when using Colord-1.0.gir
  - Use gio-2.0 when generating the VAPI


author: Richard Hughes <richard@hughsie.com> 1.4.2-1
changelog:
  - New upstream version
  - Avoid buffer overflow when reading profile_id
  - Fix the detection of duplicate EDIDs
  - Set cd-create-profile date to SOURCE_DATE_EPOCH


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Josef Ridky <jridky@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6 (#1468062)
  - Fix issue with capital letters in commands in manpage (#1468984)


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to version 1.2.0
    * Added privilege checks for all set*uid and set*gid functions.
    * Added a lot more and accurate tests which work as root.
    * Fixed some minor issues


author: Nils Philippsen <nils@redhat.com> - 1.2.1-3
changelog:
  - drop requirements on cmake, pkgconfig and rather own the directories for the
    files augmenting these packages


author: Andreas Schneider <asn@redhat.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2:
    * Added support for fork'ed and then exec'ed processes
    * Added support for Alpha


author: Andreas Schneider <asn@redhat.com> - 1.2.4-1
changelog:
  - Update to version 1.2.4
    * Added deadlock workaround for glibc < 2.24
    * Fixed a possible deadlock bug if uid_wrapper is turned off
    * Logging is always turned on now
    * Fixed a memory leak
    * Limited number of groups during fork+exec


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.3-6
changelog:
  - Rebase to libguestfs 1.36 in RHEL 7.4.
    resolves: rhbz#1359086
  - v2v: always use names for libvirt pools
    resolves: rhbz#1141631
  - v2v: correctly find GRUB in RHEL UEFI guests
  - v2v: uninstall VMware tools packages from guests
    resolves: rhbz#1155150
  - v2v: install RHEV-APT only when using -o rhev/-o vdsm
    resolves: rhbz#1161019
  - New API: btrfs-filesystem-show
    resolves: rhbz#1164765
  - p2v: always enable debugging when running virt-v2v
    resolves: rhbz#1167623
  - libguestfs prefers virtio-pci on aarch64
    resolves: rhbz#1237250
  - v2v: make sure to copy all the driver files on Windows
    resolves: rhbz#1255610
  - Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
    Requires to >= 1.3.10-5.8.el7
    resolves: rhbz#1311890
  - v2v: ignore all the environment variables for proxy when exporting from
    vCenter
    resolves: rhbz#1354507
  - virt-sysprep can deal with full-LUKS encrypted guests
    resolves: rhbz#1362649
  - All the tools have bash completion scripts.
    resolves: rhbz#1367738
  - v2v: do not remove Processor and Intelppm nodes in Windows guests
    resolves: rhbz#1372668
  - Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
    regular expression in file_contexts file
    resolves: rhbz#1374232
  - v2v: set all the properties on creation when exporting to Glance
    resolves: rhbz#1374405
  - v2v: set hw_video_model when exporting to Glance
    resolves: rhbz#1374651
  - v2v: fix OVA conversion as root using the libvirt backend
    resolves: rhbz#1375157
  - Various improvements and fixes to the documentation
    resolves: rhbz#1377081
    resolves: rhbz#1390876
    resolves: rhbz#1398070
    resolves: rhbz#1425306
  - v2v: support <listen type='socket'> and <listen type='none'>
    resolves: rhbz#1378022
  - v2v: allow libvirt >= 2.1.0 for vCenter conversions
    resolves: rhbz#1379240
  - p2v: enable mnemonics in the GUI
    resolves: rhbz#1379289
  - Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
    resolves: rhbz#1382275
  - Correctly parse mount options in btrfs entries in /etc/fstab.
    resolves: rhbz#1383517
  - Read secrets from libvirt domains, when inspecting them
    resolves: rhbz#1392798
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1400205
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1401474
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1402301
  - resize: allow URIs for the output disk
    resolves: rhbz#1404182
  - Disable EDD when launching the appliance
    resolves: rhbz#1404287
  - v2v: increase the memory allocated to the appliance
    resolves: rhbz#1418283
  - p2v: switch from GTK+ 2 to GTK+ 3
  - p2v: add dbus-devel as BuildRequires to disable suspension during the
    conversion
  - libguestfs-java: bump the java-headless Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1364518
  - Do not try to use/write to /var/cache/yum & /var/log/yum.log
  - Bump ocaml-findlib-devel BuildRequires to >= 1.3.3-7.el7, because of
    RHBZ#1403897
  - v2v: remove --dcpath & --dcPath from --help output too
    resolves: rhbz#1429430
  - v2v: force VNC as display for -i disk, as SDL is not supported
    resolves: rhbz#1372671
  - v2v, p2v: rename rhvm network to ovirtmgmt
    resolves: rhbz#1429491
  - v2v: when exporting to local disk, check that UEFI firmware is installed
    before conversion
    resolves: rhbz#1429506
  - dib: actually generate SHA256 checksums when using --checksum
    resolves: rhbz#1430184
  - v2v: do not mention SUSE Xen hosts as supported
    resolves: rhbz#1430203
  - v2v: depend on OVMF/AAVMF, for converting EFI guests
    resolves: rhbz#1429643
  - v2v: use absolute path when using an OVA as backing file
    resolves: rhbz#1430680
  - v2v: support Debian/Ubuntu guests
    resolves: rhbz#1387213
  - sysprep: remove DHCP_HOSTNAME entries
    resolves: rhbz#1427529
  - v2v: avoid repeated "run virt-v2v -v -x" message on error
    resolves: rhbz#1167623
  - bash-completion: add script for virt-v2v-copy-to-local
    resolves: rhbz#1367738
  - v2v: fix virtio block driver installation for Windows 10 and Windows 2016
    resolves: rhbz#1434737
  - Replace the libosinfo dependency with osinfo-db, since we are only using
    the osinfo database.
  - v2v: fix virtio driver installation for Windows 8 UEFI
    resolves: rhbz#1431579
  - v2v: new 'vmx' import method
    resolves: rhbz#1441197
  - v2v: properly identify Windows 2016 guests when exporting them to RHV-M
    resolves: rhbz#1447202
  - Run pvresize in non-interactive mode
    resolves: rhbz#1460692
  - resize: make sure the input disk is read-only
    resolves: rhbz#1463714
  - Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
    resolves: rhbz#1463646


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.10-6
changelog:
  - Rebase to libguestfs 1.36.10 in RHEL 7.5.
    resolves: rhbz#1472272
  - Build against OCaml 4.05
    resolves: rhbz#1447981
  - Enable the copyonread flag when running the appliance using libvirt.
    resolves: rhbz#1466563
  - Make sure kernel-rt is never used as Requires.
    resolves: rhbz#1471651
  - v2v: disable unconfiguration of manually installed VMware tools.
    resolves: rhbz#1477905
  - v2v: prefer pigz or pxz for uncompressing OVA files, if available
    resolves: rhbz#1448739
  - resize: handle empty UUIDs for swap partitions
    resolves: rhbz#1482737
  - v2v: remove mention of --dcpath in an error message
    resolves: rhbz#1486197
  - Disables the QEMU image file locking when opening disks as read-only
    resolves: rhbz#1417306
    resolves: rhbz#1503497
  - Briefly document the format used for URIs
    resolves: rhbz#1450325
  - v2v: deal with grub2 configurations without a default set
    resolves: rhbz#1472288
  - v2v: warn when a guest has passthrough devices
    resolves: rhbz#1472719
  - v2v: fix three regular expressions
    resolves: rhbz#1494555
  - v2v: enable conversion of full-disk LUKS-encrypted Linux guests
    resolves: rhbz#1451665
  - v2v: new 'vddk' import method
    resolves: rhbz#1477912
    resolves: rhbz#1513884
  - Enable libguestfs to work on z Systems
    resolves: rhbz#1479526
  - p2v: fx check for sudo requiring a password
    resolves: rhbz#1500673
  - v2v: handle disks with snapshots in vCenter
    resolves: rhbz#1172425
  - rescue: backport improved version
    resolves: rhbz#1438710
  - v2v: improve bootloader detection
    resolves: rhbz#1508299
  - v2v: parse MAC address of network interfaces in OVF files
    resolves: rhbz#1506572
  - Unconditionally depend on libvirt-daemon-kvm >= 3.9.0-1, which will always
    pull the right qemu-kvm too, and thus remove the unversioned dependencies
    on it
    resolves: rhbz#1500870
  - v2v: fix RPM file owned test
    resolves: rhbz#1503958
  - Do not open read-only disks using <shareable/> in the libvirt backend
    resolves: rhbz#1518517
  - v2v: handle better when grubby does not report any default kernel
    resolves: rhbz#1519204
  - v2v: enhance vmx import method to access via SSH
    resolves: rhbz#1523767
  - builder: fix caching of templates when using --cache-all-templates
    resolves: rhbz#1523650


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Richard W.M. Jones <rjones@redhat.com> - 1.7.4-2
changelog:
  - Add all upstream patches since 1.7.4, including fixes for OCaml 4.07.
  - Use autosetup.
  - Remove obsolete old patch.


author: Marian Csontos <mcsontos@redhat.com> - 2.02.181-1
changelog:
  - Reject conversions on raid1 LVs with split tracked SubLVs.
  - Reject conversions on raid1 split tracked SubLVs.
  - Fix dmstats list failing when no regions exist.
  - Reject conversions of LVs under snapshot.
  - Limit suggested options on incorrect option for lvconvert subcommand.
  - Add vdo plugin for monitoring VDO devices.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.00-0.2
changelog:
  - New upstream release.
  - Deduplication and compression - support for VDO volumes.
  - Dropped lvmetad, clvmd and liblvm2app.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-1
changelog:
  - Fix libdevmapper-event linking issue.
  - Fix missing proper initialization of pv_list struct when adding pv.
  - Fix (de)activation of RaidLVs with visible SubLVs.
  - Prohibit mirrored 'mirror' log via lvcreate and lvconvert.
  - Use sync io if async io_setup fails, or use_aio=0 is set in config.
  - Fix more issues reported by coverity scan.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-3
changelog:
  - Fix handling of exported VGs lvmdbusd.
  - Restore missing man info lvcreate --zero for thin-pools.
  - Drop misleadning comment for metadata minimum_io_size for VDO segment.
  - Ensure migration_threshold for cache is at least 8 chunks.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-4
changelog:
  - Introduce LVM_SUPPRESS_SYSLOG to suppress syslog usage by generator.
  - Fix generator querying config options missing from lvm.conf.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-6
changelog:
  * Thu Feb 07 2019 Marian Csontos <mcsontos@redhat.com> - 2.03.02-5
  - Improve -lXXX%VG modifier which improves cache segment estimation.


author: Than Ngo <than@redhat.com> - 7:20180414-12
changelog:
  - texconfig is needed in texconfig-sys, added Requirement texlive-texconfig
  - multilib issue detected by rpmdiff
  - drop obsoleted patch for poppler-0.58
  - XML validity issue
    Related: #1602712


author: mosquito <sensor.wen@gmail.com> - 1.22.2-7
changelog:
  - Add GL_ARB_shader_texture_lod and copy_sub_image support (#1421055)
  - Add pkgconfig(egl) BReq for rawhide
  - Move BReqs to pkgconfig


author: Ray Strode <rstrode@redhat.com> - 2.56.1-4
changelog:
  - Ensure shared-mime-info is installed during testing
  - Ensure test suite runs as unprivileged user
  - Ensure test suite works when debugging is enabled
  - Ensure echo-script from spawn test is marked executable
    Related: #1625683


author: Phil Sutter <psutter@redhat.com> [4.18.0-2.el8]
changelog:
  - bridge/mdb: fix missing new line when show bridge mdb (Phil Sutter) [1625500]
  - ip-route: Fix segfault with many nexthops (Phil Sutter) [1625358]
  - Update kernel headers (Phil Sutter) [1615915]
  - tc/flower: Add match on encapsulating tos/ttl (Phil Sutter) [1615915]
  - tc/act_tunnel_key: Enable setup of tos and ttl (Phil Sutter) [1615915]
  - iprule: Fix destination prefix output (Phil Sutter) [1623503]
  - ip: Add missing -M flag to help text (Phil Sutter) [1612704]
  - man: ss.8: Describe --events option (Phil Sutter) [1612704]
  - rtmon: List options in help text (Phil Sutter) [1612704]
  - man: rtacct.8: Fix nstat options (Phil Sutter) [1612704]
  - man: ifstat.8: Document --json and --pretty options (Phil Sutter) [1612704]
  - genl: Fix help text (Phil Sutter) [1612704]
  - man: devlink.8: Document -verbose option (Phil Sutter) [1612704]
  - devlink: trivial: Make help text consistent (Phil Sutter) [1612704]
  - bridge: trivial: Make help text consistent (Phil Sutter) [1612704]
  - man: bridge.8: Document -oneline option (Phil Sutter) [1612704]


author: Phil Sutter <psutter@redhat.com> [4.18.0-4.el8]
changelog:
  - iplink_vxlan: take into account preferred_family creating vxlan device (Phil Sutter) [1626321]
  - ip-addrlabel: Fix printing of label value (Phil Sutter) [1639412]
  - bridge: fdb: Fix for missing keywords in non-JSON output (Phil Sutter) [1636532]


author: Phil Sutter <psutter@redhat.com> [4.18.0-5.el8]
changelog:
  - utils: fix get_rtnl_link_stats_rta stats parsing (Phil Sutter) [1626306]
  - uapi: add snmp header file (Phil Sutter) [1626306]
  - macsec: fix off-by-one when parsing attributes (Phil Sutter) [1628428]
  - json: make 0xhex handle u64 (Phil Sutter) [1628428]


author: Phil Sutter <psutter@redhat.com> [4.18.0-6.el8]
changelog:
  - Update kernel headers (Phil Sutter) [1637440]
  - tc_util: Add support for showing TCA_STATS_BASIC_HW statistics (Phil Sutter) [1637440]
  - tc: Remove pointless assignments in batch() (Phil Sutter) [1602555]
  - tipc: Drop unused variable 'genl' (Phil Sutter) [1602555]
  - ip-route: Fix parse_encap_seg6() srh parsing (Phil Sutter) [1602555]
  - rdma: Don't pass garbage to rd_check_is_filtered() (Phil Sutter) [1602555]
  - ip-route: Fix for memleak in error path (Phil Sutter) [1602555]
  - rdma: Fix for ineffective check in add_filter() (Phil Sutter) [1602555]
  - devlink: Fix error reporting in cmd_resource_set() (Phil Sutter) [1602555]
  - libnetlink: fix use-after-free of message buf (Phil Sutter) [1602555]
  - libnetlink: don't return error on success (Phil Sutter) [1602555]
  - libnetlink: fix leak and using unused memory on error (Phil Sutter) [1602555]
  - tc: htb: Print default value in hex (Phil Sutter) [1641053]


author: Phil Sutter <psutter@redhat.com> [4.18.0-7.el8]
changelog:
  - ip-route: Fix nexthop encap parsing (Phil Sutter) [1625358]
  - man: ip-route.8: Document nexthop limit (Phil Sutter) [1625358]


author: Phil Sutter <psutter@redhat.com> [4.18.0-11.el8]
changelog:
  - tc: m_tunnel_key: Add tunnel option support to act_tunnel_key (Phil Sutter) [1654761]
  - tc: f_flower: add geneve option match support to flower (Phil Sutter) [1654761]
  - l2tp: Fix printing of cookie and peer_cookie values (Phil Sutter) [1643805]


author: Andreas Schneider <asn@redhat.com> - 1.1.5-1
changelog:
  - Update to version 1.1.5
    o Added support for TCP_NODELAY in setsockopt/getsockopt
    o Fixed cmsg space calculation


author: Andreas Schneider <asn@redhat.com> - 1.1.6-1
changelog:
  - Update to version 1.1.6
    * Added a wrapper for write()
    * Added support for automatic binding of ephemeral ports
    * Fixed recvmsg() with UDP
    * Fixed AF_NETLINK sockets


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
    * Added support for accept4()
    * Added support for OpenBSD
    * Fixed sendto() with UDP and a connected socket
    * Fixed AF_RAWLINK sockets


author: Andreas Schneider <asn@redhat.com> - 1.1.8-1
changelog:
  - Update to version 1.1.8
    * Added support for openat()
    * Added support for open64() and fopen64()
    * Always enabled logging support
    * Increased maximum for wrapped interfaces to 64
    * Improved fd duplication code
    * Fixed strict-aliasing issues
    * Fixed some use after free issues
    * Fixed issues on ppc64le


author: Olivier Fourdan <ofourdan@redhat.com> - 3.28.3-11
changelog:
  - Fix a new crash in recordwindow related to behavior changes in
    recent backport additions (rhbz#1657661)


author: Ray Strode <rstrode@redhat.com> - 3.28.3-12
changelog:
  - Drop "Always update monitor for non user op" patch. It's already
    in tree and getting misapplied
    Related: #1663440
  - Fix suspend and resume corruption on NVidia
    Resolves: #1663440


author: Ray Strode <rstrode@redhat.com> - 3.28.3-17
changelog:
  - Fix bug in suspend/resume corruption patch leading to inhibit fd
    not getting fetched
    Related: #1663440


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-13
changelog:
  - 1602470 - covscan fixes from upstream
  - 1632268 - cups-filters needs to obsolete ghostscript-cups and foomatic-filters
  - 1626996 - cups-filters: Sticky EOF behavior in glibc breaks descriptor concatenation using dup2


author: Björn Esser <besser82@fedoraproject.org> - 52.5.0-3
changelog:
  - SpiderMonkey tests do not fail on any arch
  - Basic JIT tests are failing on s390 arches, only
  - Use macro for ppc64 arches
  - Run tests using Python2 explicitly
  - Simplify %check
  - Use the %{major} macro consequently
  - Replace %define with %global


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.31.1-43
changelog:
  - Enabled pstoedit backend
  - Fixed out of bounds write when using pstoedit backend
    Resolves: CVE-2016-7392
  - Fixed hardcoded version on source URL
  - Fixed bogus date in changelog (best effort)


author: David Brown <david.brown@pnnl.gov> - 4.2.10-9
changelog:
  - Resolve dependencies for rawhide (#1308192)
  - Fix port and args environment variables for el5/6 (#1254301)


author: Kalev Lember <klember@redhat.com> - 1.26-1
changelog:
  - Update to 1.26
  - Don't own /usr/share/gtk-doc/html/ -- packages that drop files in there need
    to co-own the directory, instead of depending on gtk-doc


author: Tomas Orsava <torsava@redhat.com> - 1:6.0.6.1-8
changelog:
  - Resolves: rhbz#1619153 Require the Python interpreter directly instead of
    relying on the package name


author: Caolán McNamara <caolanm@redhat.com> - 1:6.0.6.1-11
changelog:
  - Resolves: rhbz#1649251 impress webpreview doesn't work without graphicfilter
  - Resolves: rhbz#1648949 fix docx missing date forms


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-2
changelog:
  - reset pointer after free in cil_strpool_destroy()
  - cil: Add ability to redeclare types[attributes]
  - cil: Keep attributes used by generated attributes in neverallow rules
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - fix memory leak in sepol_bool_query()
  - cil: drop wrong unused attribute
  - cil: fix -Wwrite-strings warning
  - cil: __cil_post_db_neverallow_attr_helper() does not use extra_args


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - cil: Create new keep field for type attribute sets
  - build: follow standard semantics for DESTDIR and PREFIX
  - cil: show an error when cil_expr_to_string() fails


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - Prevent freeing unitialized value in ibendport handling
  - Add support for the SCTP portcon keyword
  - Export sepol_polcap_getnum/name functions


author: Omair Majid <omajid@redhat.com> - 2.8.1-9
changelog:
  - Build with standard distro-wide optimization flags even on s390 and s390x
  - Resolves: rhbz#1630591


author: Paul Howarth <paul@city-fan.org> - 0.116-1
changelog:
  - Update to 0.116
    - Changes rephrasing
    - Restore 5.6 compatibility
    - Replace docs with a link to Ref::Util


author: Paul Howarth <paul@city-fan.org> - 0.116-2
changelog:
  - Incorporate package review feedback (#1450440)
    - Drop EL6-isms as we need Test::More 0.94, which EL-6 will never have


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117
    - Allow the custom OPs to be deparsed with B::Deparse
    - Optimize the shared object size by moving common call checker logic into a
      function


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version.
  - Install the cd-convert utility
  - Do not link against the unused gio-unix-2.0


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1.6-14
changelog:
  - build with hardening LDFLAGS (#1548717)
  - remove obsolete macro and comments
  - add gcc to build requirements


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 5.1.1-1
changelog:
  - Update to 5.1.1
  - Remove format security patch - not needed anymore
  - Edit patches to be version specific
  - Renamed patch4 to be consistent with others
  - Minor spec file housekeeping


author: Kalev Lember <klember@redhat.com> - 1.0.0-1
changelog:
  - Update to 1.0.0
  - Don't set group tags
  - Rely on pkgconfig depgen instead of manually specifying -devel requires
  - Tighten subpackage deps with the _isa macro
  - Use make_install macro


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-1
changelog:
  - Update to 1.9.2 (#961876).
  - Modernize spec file.
  - Makefile.am handles mmx and sse flags well, so no need patch 01 and sed anymore.
  - Patch 02 disabled, I hope we already have asm fixed on X86_64.


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-2
changelog:
  - Add license tag.
  - Add back sed on -O3 .
  - Not modify soundtouch_config.h because looks correct, just have one line !.


author: Robert Scheck <robert@fedoraproject.org> 1.4.4-1
changelog:
  - Update to upstream 1.4.4 (#1352496)
  - Reworked spec file to build libburn1 for RHEL >= 6 (#750009)


author: Rex Dieter <rdieter@fedoraproject.org> - 7.6.2-1
changelog:
  - 7.6.2 (#1531008)
  - libgc soname bump
  - -devel: include all docs here (ie, remove README's from main too)


author: Rex Dieter <rdieter@fedoraproject.org> - 2.7-4
changelog:
  - %files: less globs, use %license
  - tighten subpkg deps
  - -devel: use %doc
  - use %version in Source URL
  - simplify %setup
  - %check: make check


author: Richard Hughes <richard@hughsie.com> 0.7.8-1
changelog:
  - New upstream release
  - Add as_version_string() for fwupd
  - Add support for component agreements
  - Correctly compare version numbers like '1.2.3' and '1.2.3a'
  - Don't include the path component in the name when parsing the package filename
  - If the launchable is specified don't guess it when composing
  - Never add more than one component to the AppStream store when composing


author: Richard Hughes <richard@hughsie.com> 0.7.9-1
changelog:
  - New upstream release
  - Convert local icons found in metainfo files
  - Follow the Debian tilde usage when ordering versions
  - Use the launchable to find the desktop filename


author: Richard Hughes <richard@hughsie.com> 0.7.10-1
changelog:
  - New upstream release
  - Do not parse firmware files anymore
  - Do not require a release transaction when validating in relaxed mode
  - Extract release descriptions and agreement sections for translation


author: Richard Hughes <richard@hughsie.com> 0.7.11-1
changelog:
  - New upstream release
  - Add AS_APP_QUIRK_DEVELOPER_VERIFIED
  - Escape quotes in attributes
  - Provide async variants of store load functions


author: Richard Hughes <richard@hughsie.com> 0.7.13-1
changelog:
  - New upstream release
  - Do not restrict the maximum number of releases allowed
  - Throw an error when a launchable desktop-id is invalid


author: Richard Hughes <richard@hughsie.com> 0.7.14-1
changelog:
  - New upstream release
  - Add new API for gnome-software
  - Set the AppStream ID from the X-Flatpak desktop key


author: Tomáš Mráz <tmraz@redhat.com> 0.3.13-4
changelog:
  - Split libtspi to a trousers-lib subpackage (#1225062)
  - Fix FTBFS with current gcc (drop inline keyword when bogus)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.4.8-4
changelog:
  - Remove KDE bits
  - Provide: mkisofs (as genisoimage does)
  - Increase alternative priority to win over genisoimage
  - Update RHEL conditionals for lib{isofs,burn} renaming to match those packages


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.5.0-4
changelog:
  - Python 2 binary package renamed to python2-sanlock
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.4-2
changelog:
  - Rebuilt with https://github.com/google/snappy/archive/1.1.4.tar.gz since
    %{source0} contains different and buggy code.
    https://groups.google.com/forum/#!topic/snappy-compression/uhELq553TrI


author: Parag Nemade <pnemade AT redhat DOT com> - 20161012-6
changelog:
  - Resolves:rh#1429574 - [abrt] fontforge: PyFF_OpenFont(): fontforge killed by signal 6
  - Added patch to fix python module for python3.6


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-1
changelog:
  - update to 1.34 (CVE-2017-14062)
  - include soname in file list
  - use macros for ldconfig
  - add gcc to build requirements


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-2
changelog:
  - fix ABI compatibility with libidn-1.33 and earlier (#1566414 #1573961)
  - add texinfo to build requirements


author: Björn Esser <besser82@fedoraproject.org> - 4.0.1-5
changelog:
  - Add patch to update to recent development branch
  - Re-enable SUNMD5 support as it is BSD licensed now
  - Build compatibility symbols for glibc only
  - Skip failing testsuite once


author: Paul Howarth <paul@city-fan.org> - 0.61-1
changelog:
  - Update to 0.61
    - Avoid relying on current working directory being in @INC
    - Documentation typo fixes
  - Drop redundant Group: tag
  - Simplify find commands using -empty and -delete


author: Milan Crha <mcrha@redhat.com> - 3.28.5-4
changelog:
  - Add patch for RH bug #1653232 ([CalDAV/CardDAV] Can add component to local cache with incomplete info)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-5
changelog:
  - Add patch for RH bug #1654203 (Make tests retry when factory doesn't know about added ESource yet)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-7
changelog:
  - Add patch for RH bug #1654720 (Correct use-after-free in e_vcard_attribute_remove_param_value())
  - Add patch for RH bug #1654783 (test-cal-client-get-revision could fail due to delayed D-Bus property change notification)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-8
changelog:
  - Add patch for RH bug #1655030 (Make EVCardAttribute/EVCardAttributeParam structures ref-counted internally)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-9
changelog:
  - Update patch for RH bug #1654203 (Make tests retry when factory doesn't know about added ESource yet)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.9.11-2
changelog:
  - libvncclient sets +SRP in priority string (#1449605)
  - libvncserver blocks gtk-vnc clients >= 0.7.0 (#1451321)


author: Petr Pisar <ppisar@redhat.com> - 0.9.11-9
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662997)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - New upstream release - 2.1.14
  - Patch the waf script to explicitly call python2 as "env python" doesn't
    yield py2 anymore


author: Jerry James <loganjerry@gmail.com> - 3.1-23.20170329cvs
changelog:
  - Add gcc BR
  - Build verbosely
  - Drop obsolete --enable-widec configure option
  - Fix "unused direct shared library dependency" warning from rpmlint again
  - Fix man page error due to BSD nroff macro that is not available on Linux
  - Drop explicit R on pkgconfig from the -devel package, autogenerated


author: Paul Howarth <paul@city-fan.org> - 2.2-1
changelog:
  - Update to 2.2
    - Convert to PERL_NO_GET_CONTEXT
      https://github.com/robinhouston/PadWalker/pull/2
  - Explicitly BR: perl-devel, needed for EXTERN.h


author: Paul Howarth <paul@city-fan.org> - 2.3-1
changelog:
  - Update to 2.3
    - Make tests work with -Ddefault_inc_excludes_dot (CPAN RT#120421)
  - Simplify find commands using -empty and -delete
  - Drop legacy Group: tag


author: Daniel P. Berrangé <berrange@redhat.com> - 4.5.0-4
changelog:
  - Fix typed parameter memory handling (rhbz #1602346)
  - Fix missing NWFilterBinding module (rhbz #1615841)


author: Dan Winship <danw@redhat.com> - 0.4.15-5.1
changelog:
  - Drop python2 subpackage (#1559092)
  - Drop PAC runner based on the "pacrunner" package (#1569023)
  - Replace pacrunner-crash-fix patch with version from RHEL7
  - Drop kde subpackage (#1538147)


author: Dave Anderson <anderson@redhat.com> - 7.2.3-12
changelog:
  - Address covscan issues
    Resolves: rhbz#1602466
  - Fix for x86_64 5-level pagetable vmalloc range expansion
    Resolves: rhbz#1637125


author: Dave Anderson <anderson@redhat.com> - 7.2.3-16
changelog:
  - Resurrect "dev -p" option.
  - Fix "dev -[dD]" options to account for request_queue.in_flight[] removal.
    Resolves: rhbz#1662039
  - Command line input fixes
    Resolves: rhbz#1664061


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.1.24-19
changelog:
  - remove old stuff https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4-2
changelog:
  - Fix broken reference following when the reference is split to
    more than one line
  - Fix possible incorrect selection of already loaded file when
    following cross reference
    Resolves: #1383057


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-9
changelog:
  - Do not use combined characters on preedit for compose keys
  - Fixed an infinite loop of extension preedit with xterm


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-14
changelog:
  - Fixed Man page scan results for ibus
  - Added IBUS_DISCARD_PASSWORD env variable for password dialog in firefox
  - Added history annotation for previous emojis


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-3
changelog:
  - Fix Bug SEGV Choose an emoji by mouse from the emoji category list
  - Fix Bug 1618682 - SEGV with ASCII on emojier in Wayland
  - Support Shift-Space on emojier preedit
  - Do not move Emojier popup with the active candidate in Xorg
  - Do not clear Unicode data when emoji annotation lang is changed


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Jarod Wilson <jarod@redhat.com> - 3.1.2-1
changelog:
  - Update to upstream 3.1.2 bug fix release
  - Fix some paths in module file, strip out python2 bits
  - Related: rhbz#1623441


author: Jarod Wilson <jarod@redhat.com> - 3.1.2-4
changelog:
  - Further tweaks to compile/linker flag usage
  - Related: rhbz#1624157
  - Move modulefiles under /etc like our other suppored mpi providers
  - Resolves: rhbz#1632399


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Richard W.M. Jones <rjones@redhat.com> - 7.0-2
changelog:
  - Resync against Rawhide package (ntfs-3g 2013.1.13).
  - Drop HAL file since HAL is dead.
    resolves: rhbz#819939


author: Richard W.M. Jones <rjones@redhat.com> - 7.1-2
changelog:
  - New package for RHEL 7.1
  - Rebase to ntfs-3g 2014.2.15
    resolves: rhbz#1100319
  - Change the package so it works with supermin5.
  - Remove dependency on external FUSE.


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-2
changelog:
  - Fix for handling guest filenames with invalid or incomplete
    multibyte or wide characters
    resolves: rhbz#1301593


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-1
changelog:
  - Rebase to 2017.3.23.
  - Remove patches which are now upstream.
  - Resynch with Fedora package.
  - Enable all architectures for RHEL 8.


author: Kalev Lember <klember@redhat.com> - 0.27.1-1
changelog:
  - Update to 0.27.1
  - Switch to the meson build system
  - Don't set group tags
  - Remove obsolete rpm scriptlets
  - Fix gtk-doc directory ownership
  - Tighten soname glob


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-2
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Related: #1570569


author: Olivier Fourdan <ofourdan@redhat.com> - 0.28.0-3
changelog:
  - Backport fix for emission of spurious changed signals
  - for all keys at once crashing gnome-shell
  - Resolves: #1666176


author: Kalev Lember <klember@redhat.com> - 2.24.5-1
changelog:
  - Update to 2.24.5
  - Use license macro for COPYING
  - Don't set group tags
  - Tighten -devel requires with the _isa macro


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-0.27.20111007git
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - Explicitly include <sys/sysmacros.h> due to glibc-headers changes.
  Definition of major and minor macros is no longer transitively included
  through <sys/types.h>, hence make it explicit.
  Ref:
  https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=NEWS;hb=HEAD


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Michael Simacek <msimacek@redhat.com> - 2.13.02-1
changelog:
  - Update to upstream version 2.13.02
  - Resolves: CVE-2017-17810, CVE-2017-17811, CVE-2017-17812, CVE-2017-17813,
    CVE-2017-17814, CVE-2017-17815, CVE-2017-17816, CVE-2017-17817,
    CVE-2017-17818, CVE-2017-17819, CVE-2017-17820


author: Matias Kreder <mkreder@gmail.com> - 1.6.2-34
changelog:
  - Removed uuid-php subpackage since php(api) is no longer provided on
  - PHP 7 and there is a replacement (pecl/uuid extension)


author: Thomas Haller <thaller@redhat.com> - 1:1.14.0-6
changelog:
  - dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)
  - dhcp: revert letting internal DHCP generate default client-id based on MAC address (rh #1640464)
  - dhcp: support "duid" setting for ipv4.dhcp-client-id
  - dhcp: support "${MAC}" identifier for connection.stable-id
  - dhcp: support dhcp-plugin device spec for matching devices in NetworkManager.conf
  - dhcp: install configuration snippet in config-server package for ipv4.dhcp-client-id=mac (rh #1640494)
  - dns: remove limitation for six DNS search entries (rh #1649704)
  - libnm: fix crash cancelling activation from within callback (rh #1643085)


author: Thomas Haller <thaller@redhat.com> - 1:1.14.0-9
changelog:
  - dhcp: fix default client-id for NetworkManager-config-server (rh #1658057)
  - connectivity: fix crash and portal detection (rh #1658217)
  - core: combine secret-key with machine-id for host identity (rh #1642023)
  - SR-IOV related fixes (rh #1651578, rh #1651576, rh #1651979)
  - core: fix updating agent-owned secrets (rh #1658771)
  - core: no longer set rp_filter sysctl (rh #1651097)
  - device: don't take device down when changing MAC address (rh #1659063)
  - doc: use pregenerated manual pages and gtk-doc from source tarball


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.14.0-10
changelog:
  - ifcfg-rh: fix reading SR-IOV settings
  - dhcp: support client-id and DUID for infiniband (rh #1658057)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.14.0-11
changelog:
  - device: ensure IP configuration is restored when link goes up (rh #1636715)
  - dhcp: fix client-id and DUID for infiniband (rh #1658057)
  - dhcp: change internal DHCP plugin's ipv4.dhcp-client-id setting to "mac" (rh #1661165)


author: Pino Toscano <ptoscano@redhat.com> - 1.10.1-3
changelog:
  - Backport some upstream commits to fix few memory leaks, and potential
    memory issues (RHBZ#1602446)


author: Pino Toscano <ptoscano@redhat.com> - 1.10.1-4
changelog:
  - Grub: better handle invalid grub.conf files (RHBZ#1649262)
  - Sudoers: handle "always_query_group_plugin" option (RHBZ#1649299)


author: Pino Toscano <ptoscano@redhat.com> - 1.10.1-6
changelog:
  - Semanage: new lens (RHBZ#1652840)
  - Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
    (RHBZ#1653768)


author: Owen Taylor <otaylor@redhat.com> - 2.4.2-4
changelog:
  - Make manpage installation agnostic of compression
    https://fedoraproject.org/wiki/Packaging:Guidelines#Manpages


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.0.4-1
changelog:
  - New version
    Resolves: rhbz#1468785
    Resolves: CVE-2017-10965
    Resolves: CVE-2017-10966
  - Dropped allow-negative-values-in-settings patch (not needed)


author: Ben Crocker <bcrocker@redhat.com> - 1.20.3-4
changelog:
  - Add Eric Anholt's patch e50c85f4ebf559 from upstream:
  - Fix segfault on probing a non-PCI platform device on a system with PCI
  - NOTE: also pertains on a system with no PCI, e.g. s390x.
    Resolves: #1652013


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-36
changelog:
  - Move SSL certificates to more convenient place, update related scripts
    and README.RedHat.SSL
    Related: #1308809


author: Bastien Nocera <bnocera@redhat.com> - 1.2.0-12
changelog:
  + libimobiledevice-1.2.0-12
  - Replace patches with a single mega-patch
  - Fixes usbmuxd for iOS 11 devices


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.3-1
changelog:
  - rebase to stable 5.2.3 per release notes:
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00285.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.4-1
changelog:
  - rebase to 5.2.4 (rhbz#1574039), per release notes:
    https://www.mail-archive.com/xz-devel@tukaani.org/msg00295.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.4-2
changelog:
  - drop ppc64p7 hack, per fedora devel list discussion:
    https://lists.fedoraproject.org/archives/list/
    devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
  - don't explicitly set _FILE_OFFSET_BITS, package uses AC_SYS_LARGEFILE


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.2.1-2
changelog:
  - Update $modincdir in mpifort after moving .mod files (#1301533)
  - Move compiler wrappers to mpich-devel (#1353621)
  - Remove bogus rpath (#1361586)


author: Jarod Wilson <jarod@redhat.com> - 3.2.1-8
changelog:
  - Remove python2 bits entirely, fix mpi lib dependencies
  - Remove obsolete Provides/Obsoletes for mpich2
  - Resolves: rhbz#1628628


author: Rex Dieter <rdieter@fedoraproject.org> - 0.2.8-5
changelog:
  - BR: libgs-devel (f28+)
  - .spec cleanup/cosmetics (drop deprecated tags, use %autosetup/%license, tighten subpkg dep)


author: Daniel P. Berrange <berrange@redhat.com> - 3.6.0-2
changelog:
  - Rename sub-RPMs to python2-libvirt & python3-libvirt
  - Re-add py3 conditionals for benefit of RHEL/CentOS builds


author: Michael Simacek <msimacek@redhat.com> - 2.0.6-12
changelog:
  - Repack tarball without bundled jars
  - The repacked jar contains slightly different source (force push by upstream?)
  - Correct license tag


author: Matej Muzila <mmuzila@redhat.com> 1:1.5.3-3
changelog:
  - Backport upstream patch making dejagnu not to kill wrong process due to
    PID-reuse races
  - Resolves rhbz#1258142


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.9.2-1
changelog:
  - Update to upstream version 1.9.2
  - Remove legacy Provides/Obsoletes for jakarta-commons-beanutils
  - Remove RPM bug workaround


author: Paul Howarth <paul@city-fan.org> - 0.95-1
changelog:
  - Update to 0.95
    - Enable Travis-CI integration for IPC::Run
    - Use q{} and qq{} to fix problems with quotation in cmd.exe
    - Sync $VERSION across all files to address kwalitee
    - Stop side effect of altering flushing of STDOUT and STDERR (CPAN RT#109243)
    - CHILD_HANDLE should be closed with 'Close' to prevent a warning
    - Require Win32API::File on Windows
    - Better timer error message plus an additional unit test
    - Catching previously non-detected malformed time strings
    - Let Timer accept all allowable perl numbers
    - Allow the OS to choose the ephemeral port to use
    - Don't use version.pm to parse the perl version in Makefile.PL
    - perltidy
    - Do not import POSIX into local namespace (it's a memory hog)
    - Skip infinity test on perl below 5.8.9
    - Spelling fixes
    - Documentation fix: full_result returns $?, not $? >> 8
    - Fix check for reaped PID in reap_nb
    - Re-remove unnecessary use of UNIVERSAL
  - Remove redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.97-1
changelog:
  - Update to 0.97
    - Update meta and POD to point to GitHub issues not RT
    - Update README with pod changes
    - Fix variable name in synopsis (GH#47)
    - Fix t/run.t to work on "perl in space" (GH#100)


author: Paul Howarth <paul@city-fan.org> - 0.98-1
changelog:
  - Update to 0.98
    - Switch to using $!{EINTR}
    - Honor umask for user/group permissions on a +rw file
    - Remove commented code from CPAN RT#50739
    - Fix _write on invalid objects (GH#63)
    - Make slave the controlling terminal so more programs can be called from
      IPC::Run reliably (GH#54)
    - Prevent Not a GLOB reference in close_terminal by untieing before close
      (GH#53)
    - Fix '&' closing the stdin of the right process (GH#46)
    - Do POSIX::_exit not ::exit (GH#41)
    - Ensure child Win32 processes have same priority as parent (GH#40)
    - Add unit test for passing use of Readonly.pm (GH#38)
    - Fix GLOB test in IPC::Run::IO->new (GH#39)
    - Fix for memory leak (GH#86, CPAN RT#57990)
    - MANIFEST was updated; new tests may start shipping now


author: Paul Howarth <paul@city-fan.org> - 0.99-1
changelog:
  - Update to 0.99
    - Fixes for Windows unit tests so they skip or pass
      - t/autoflush.t
      - t/readonly.t
      - t/run_stdin-callback-return-array.t


author: Jerome Marchand <jmarchan@redhat.com> - 0.6.0-6
changelog:
  - llcstat: print a nicer error message on virtual machine
  - Add NSS support to sslsniff
  - Fixes miscellaneous error uncovered by covscan


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.18.1-1
changelog:
  - Update to upstream version 3.18.1
  - Remove workaround for rpm bug, can be removed in F-18
  - Update to current packaging guidelines


author: Paul Howarth <paul@city-fan.org> - 2.13-1
changelog:
  - Update to 2.13
    - Not all information was extracted from the Apache tables
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 2.14-1
changelog:
  - Update to 2.14
    - MojoX should not die on missing types (CPAN RT#123298)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 2.16-1
changelog:
  - Update to 2.16
    - Collecting of IANA info had stalled: logic rewritten
    - Moved to git and GitHub
    - Move scripts and source files into MANIFEST.extra
    - Update types and extensions


author: Paul Howarth <paul@city-fan.org> - 2.17-1
changelog:
  - Update to 2.17
    - When picking a preferred type for an extension, prefer the type with the
      same minor-name
    - Remove IANA obsoleted types


author: Peter Hutterer <peter.hutterer@redhat.com> 2.24-3
changelog:
  - Remove high-keycode removal patches, xkbcomp 1.4.2 has been in stable for
    long enough (related #1587998)


author: Paul Howarth <paul@city-fan.org> - 0.011-1
changelog:
  - Update to 0.011
    - No longer include a Makefile.PL in the distribution
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - In META.json, specify type of public repository
  - Drop redundant %{?perl_default_filter}
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.1011-1
changelog:
  - Update to 0.1011
    - Fixed POD typos
  - Package CONTRIBUTING.mkdn
  - Update to working source URL, unfortunately author-specific
  - Drop redundant Group: tag
  - Expand %description
  - Make %files list more explicit


author: Java SIG <java-devel@lists.fedoraproject.org> - 0:1.0-0.10.a7
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Mat Booth <mat.booth@redhat.com> - 1.10.19-10
changelog:
  - Explicitly import more cglib packages in OSGi metadata to prevent mockito
    failing under certain circumstances during Eclipse test suites


author: Mat Booth <mat.booth@redhat.com> - 6.11-1
changelog:
  - Update to latest upstream release
  - Continue building with maven for now, instead of moving to gradle due to
    rhbz#1467724


author: Dominik Mierzejewski <dominik@greysector.net> - 1.1.13-2
changelog:
  - Use https source URL
  - Drop obsolete spec elements
  - Use license macro
  - Update libusbx-devel build dependency
  - Drop ancient (F15) Obsoletes:
  - Tighten file list


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.0.0-4
changelog:
  - Remove legacy obsoletes/provides
  - Remove dependency on junit-addons
  - Remove build-dependency on maven-invoker-plugin


author: Michael Simacek <msimacek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream version 3.2.2
  - Merge two javadoc subpackages
  - Install with XMVn
  - Specfile cleanup


author: Mat Booth <mat.booth@redhat.com> - 3.2.2-8
changelog:
  - Allow testframework to still be built even with tests disabled, which is
    needed by other packages


author: Paul Howarth <paul@city-fan.org> - 0.14-1
changelog:
  - Update to 0.14
    - A couple of minor optimizations (GH#8)
  - BR: perl-generators
  - Simplify find command using -delete


author: Robert Scheck <robert@fedoraproject.org> 1.4.2-3
changelog:
  - Move large documentation into -doc subpackage (#744416)
  - Reworked spec file to build libisofs1 for RHEL >= 6 (#744416)


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
    - Remove useless use of UNIVERSAL::isa (CPAN RT#105948)
  - Classify buildreqs by usage
  - Drop obsoletes/provides for old tests sub-package
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Don't use macros for common commands
  - Make %files list more explicit


author: Josef Ridky <jridky@redhat.com> - 8.6.10-0.1.20180605git986f99d
changelog:
  - New upstream version with Python3 support - asciidoc-py3 (commit 986f99d)
  - Update versioning, Source and Url label information


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - No longer include a Makefile.PL in the distribution
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - Convert .cvsignore to .gitignore
  - Classify buildreqs by usage
  - Don't need to remote empty directories from the buildroot
  - Make %files list more explicit
  - Drop legacy Group: tag


author: Petr Viktorin <pviktori@redhat.com> - 2.0.0-10
changelog:
  - Drop dependency on python3-funcsigs
    (funcsigs functionality is in the Python 3 standard library -- inspect)
  - Drop dependency on python2-unittest2
    (Not available in the distro)

  - Fix python2 requires names


author: Petr Viktorin <pviktori@redhat.com> - 2.0.0-11
changelog:
  - Remove the Python 2 subpackage
    https://bugzilla.redhat.com/show_bug.cgi?id=1590793
  - Re-enable tests


author: Michael Simacek <msimacek@redhat.com> - 0:6.1.3-1
changelog:
  - Update to upstream version 6.1.3
  - Use new upstream location
  - Generate scripts with jpackage_script


author: Michal Srb <msrb@redhat.com> - 0-0.14.20090319svn
changelog:
  - Install license file with javadoc subpackage (Resolves: rhbz#975411)
  - Add file containing link to CC-BY license text


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.0.0-1
changelog:
  - Update to upstream version 3.0.0
  - Remove legacy obsoletes/provides
  - Update to current packaging guidelines


author: Javier Peña <jpena@redhat.com> - 1.0.1-8.20180316git
changelog:
  - Update to commit ebe84efc1a869da8d5689c706cdcf6ea864f0d9b
  - Fix build with Sphinx 1.7 (bz#1578132)


author: Brian C. Lane <bcl@redhat.com> - 0.26.4-1
changelog:
  - Update to libgit2-glib-0.26.4
  - Switch to using meson build system
  - Disable SSH so that libssh2 is not required
  - Add README.rhel8 explaining why SSH is disabled


author: Nils Philippsen <nils@tiptoe.de> - 0.1.9-1
changelog:
  - version 0.1.9
  - change license to BSD (2-clause)
  - require gcc, alsa-lib-devel, fftw-devel for building


author: Paul Howarth <paul@city-fan.org> - 0.37-1
changelog:
  - Update to 0.37
    - Fix spurious warning in taint mode (GH#12)
  - Update patch for building with old Test::More versions
  - No documentation for Package::Stash::Conflicts in this release
  - Classify buildreqs by usage
  - Use %license where possible
  - Don't try to run the extra tests for EL builds as we won't have the
    dependencies


author: gil cattaneo <puntogil@libero.it> 0:1.7-18
changelog:
  - fix FTBFS rhbz#1240035
  - fix BR list, change log4j with log4j12
  - set javac source/target to 1.6
  - disable Java8doc doclint
  - remove werken-xpath Import/Export refences in manifest file
  - resolve some rpmlint problems
  - remove zero-length file
  - introduce license macro


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.10.1-11
changelog:
  - Python 2 binary package renamed to python2-lesscpy
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.55-1
changelog:
  - Upstream update.
  - Reflect upstream URL-having changed.
  - Update BRs.
  - Spec cosmetics.
  - Introduce %license.


author: Petr Pisar <ppisar@redhat.com> - 0.28-2
changelog:
  - Break build cycle: perl-Path-Tiny → perl-Unicode-UTF8 →
    perl-Module-Install-ReademFromPod → perl-IO-All → perl-File-MimeInfo


author: gil cattaneo <puntogil@libero.it> 31-4
changelog:
  - remove enforcer plugin support
  - related to rhbz#1308237,1308238
  - use BRs mvn()-like
  - introduce license macro


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19
    - More Makefile.PL updates
    - Makefile.PL now checks for a working compiler using ExtUtils::HasCompiler
      (inlined into the build) rather than ExtUtils::CBuilder (CPAN RT#113685)
  - Simplify find command using -delete
  - Fix EPEL conditional - only currently buildable for EPEL 7 onwards
  - Drop BR: for Test::Pod::No404s, which breaks koji builds


author: Paul Howarth <paul@city-fan.org> - 0.3.0-1
changelog:
  - Update to 0.3.0
    - Converted the build system to Dist-Zilla
  - Switch to ExtUtils::MakeMaker-based flow


author: Paul Howarth <paul@city-fan.org> - 0.3.1-1
changelog:
  - Update to 0.3.1
    - Fixed an issue with tracking the depth of the inodes when detecting a
      symlink loop


author: Paul Howarth <paul@city-fan.org> - 0.3.2-1
changelog:
  - Update to 0.3.2
    - Made the version number consistent across the .pm files
      (https://bitbucket.org/shlomif/perl-file-find-object/issues/1/wrong-version-number)


author: Paul Howarth <paul@city-fan.org> - 1.122-1
changelog:
  - Update to 1.122
    - Added $Test::Deep::LeafWrapper to control the behavior of simple values in
      the "expected" definition
    - Documentation improvements
    - Avoid a few evals, localize $@ in a few places where eval is used
    - Goodbye tabs, hello spaces
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.123-1
changelog:
  - Update to 1.123
    - Remove test suite reliance on "." appearing @INC
    - When an object with stringification overloading fails to match a "re" test,
      its stringification is included in the diagnostics


author: Paul Howarth <paul@city-fan.org> - 1.124-1
changelog:
  - Update to 1.124
    - Avoid an uninitialized warning when array_each() compares to a
      non-reference


author: Paul Howarth <paul@city-fan.org> - 1.126-1
changelog:
  - Update to 1.126
    - If objects in the "expected" structure have an as_test_deep_cmp method, it
      will be called and its return (which should be a Test::Deep::Cmp object)
      will be used as the test for that location in the structure
    - Internal undocumented class_base routine has been replaced with a
      different, clearly private routine
    - The LeafWrapper is also used for objects with an unknown reftype (like
      LVALUE or other weird ones)


author: Paul Howarth <paul@city-fan.org> - 1.127-1
changelog:
  - Update to 1.127
    - Do not eagerly convert simple scalars into tests in the all, any and none
      tests; this was breaking LeafWrapper application
  - Drop EL-5-isms
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3-22
changelog:
  - Elimitate race condition when injecting JAR manifest
  - Resolves: rhbz#1495234
  - Remove bogus hamcrest-text JAR


author: Paul Howarth <paul@city-fan.org> - 0.421-1
changelog:
  - Update to 0.421
    - Fix a lot of potential memory leaks when callbacks throw exceptions
    - Add some new functions: qsort, binsert, bremove, listcmp, arrayify
      (CPAN RT#17230), samples (CPAN RT#77562), minmaxstr (CPAN RT#106401),
      lower_bound, upper_bound, equal_range, frequencies, occurances, mode
      (CPAN RT#91991), zip6 (CPAN RT#42921), reduce_0, reduce_1, reduce_u
    - Improve tests
    - Make List::MoreUtils::XS independent from List::MoreUtils
      Note that List::MoreUtils::XS doesn't guarantee API stability: this
      feature is only provided through List::MoreUtils as frontend
    - Improve configure toolchain to use Config::AutoConf 0.315
    - Speed up some inner loops by hinting the expected result
    - Fix mind screwed up issue in upper_bound and reduce elements visited in
      equal_range
    - Correct license in META (CPAN RT#122702)
    - Fix issues with -DPERL_IMPLICIT_SYS on Windows with Strawberry-Perl


author: Paul Howarth <paul@city-fan.org> - 0.422-1
changelog:
  - Update to 0.422
    - Rename 'occurances' into 'occurrences' (CPAN RT#91991, CPAN RT#122806)
    - Add DESCRIPTION to Pod clarifying the role of List::MoreUtils::XS
    - Improve Makefile.PL regarding some build artifacts


author: Paul Howarth <paul@city-fan.org> - 0.423-1
changelog:
  - Update to 0.423
    - Fix dealing with lists with one element on bremove/binsert (GH#2)
    - Add support for compilers before C99
    - Fix some 32-bit compiler warnings
    - Add support for compilers without statement expression feature


author: Paul Howarth <paul@city-fan.org> - 0.426-1
changelog:
  - Update to 0.426
    - Fix broken format in part (GH#4)
    - Fix gcc 4.7 sequence point warning (GH#5)
    - Fix incorrect padname resolving for perl > 5.21.6 (CPAN RT#122883)
    - Fix compiling issue on CentOS 4 and CentOS 5


author: Paul Howarth <paul@city-fan.org> - 0.428-1
changelog:
  - Update to 0.428
    - Fix build fails on perl ≥ 5.27.4 with -DDEBUGGING (CPAN RT#123613)
    - Update ppport.h to 3.37 for improved blead support
    - Fix context arg to croak() (CPAN RT#123869)
    - Fix one() returning true on empty list (CPAN RT#123870)
    - Pamper $a/$b/$_ refcounting bugs (CPAN RT#123868)


author: Pavel Raiskup <praiskup@redhat.com> - 2.13-34
changelog:
  - don't ship broken (and ancient) autoscan (rhbz#1194568)
  - drop explicit 'Requires: perl' (related rhbz#1194568)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 3.5.0-3
changelog:
  - Always use full tar.gz for installed files and
    keep using gem file for gem spec (ref: bug 1425220)


author: Petr Pisar <ppisar@redhat.com> - 0.09-10
changelog:
  - Break build cycle when bootstrapping (Test::CleanNamespaces →
    Package::Stash → Module::Implementation)


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.06-15
changelog:
  - Add Test-Taint-1.06-Test-taintedness-on-X-instead-of-environment-variabl.patch.
    (Address RHBZ#1413022, F26FTBFS)


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-1
changelog:
  - Rebase to upstream release 5.2.4
  - Add workaround for broken info generation (upstream bug
    https://sourceforge.net/p/gnuplot/bugs/1963/) from Debian
  - Use explicit path for texdir
  - Correct the description of command line options in manpage, bz#1612690
  - Install gnuplot-qt and gnuplot-wx manpage links, bz#1612690


author: Paul Howarth <paul@city-fan.org> - 0.23-1
changelog:
  - Update to 0.23
    - Trying to create a validator for positional parameters where a required
      param came after one with a default did not throw an exception
    - A positional params validator with a slurpy type that had coercions did not
      return the coerced values; it returned the original values instead


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - The source_for() exported by Params::ValidationCompiler did not work at all
      (GH#16)


author: Paul Howarth <paul@city-fan.org> - 0.25-1
changelog:
  - Update to 0.25
    - All exceptions now include a stack trace by default when treated as a
      string; this makes finding where validation failed a lot easier (GH#18)
    - The name for a subroutine is now used in some exception messages, even if
      Sub::Util cannot be installed


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - The exceptions.t test would fail if Sub::Util was not installed (GH#19)
    - Fix test failures on Windows (GH#20)


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Fixed a bug with inlining Moose types: if a type's parent needed
      environment variables, those would not get closed over (GH#22)
    - Added a debug option to dump the source of the subroutine before it is
      eval'd


author: Mat Booth <mat.booth@redhat.com> - 6.1.1-1
changelog:
  - Update to latest upstream relase for Java 10 support
  - Switch to maven build
  - Now executing test suites


author: Dan Horák <dan[at]danny.cz> - 3.3.5-3
changelog:
  - Update BRs so nss-myhostname (provided by systemd) is included also
    in mpich-only builds (Related: #1383271)


author: Merlin Mathesius <mmathesi@redhat.com> - 3.3.5-8
changelog:
  - Disable Open MPI's vader byte transfer layer while running tests on 32-bit x86 platforms
    as it is known to be troublesome <https://github.com/open-mpi/ompi/issues/4260>.
    This resolves FTBFS issue (BZ#1518038).


author: Merlin Mathesius <mmathesi@redhat.com> - 3.3.5-11
changelog:
  - Regenerate autoconf files using current tools so proper build flags
    from redhat-rpm-config are used. This resolves BZ#1548473.


author: Paul Howarth <paul@city-fan.org> - 0.094-1
changelog:
  - Update to 0.094
    - Path::Tiny will prefer PerlIO::utf8_strict over encoding(UTF-8) if
      available and Unicode::UTF8 is not installed
    - The 'touch' method can now set the current time on files that aren't owned,
      as long as they are writeable
    - Improved consistency of symlink support inspection; now always looks at
      $Config{d_symlink}
    - Skips impossible test on 'msys' platform.
  - BR: perl-generators where possible
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.096-1
changelog:
  - Update to 0.096
    - Improved method for hiding some modules during tests
  - BR: perl-generators unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.098-1
changelog:
  - Update to 0.098
    - Added 'realpath' option for 'tempfile' and 'tempdir' for situations where
      an absolute temporary path just isn't enough


author: Paul Howarth <paul@city-fan.org> - 0.100-1
changelog:
  - Update to 0.100
    - Fixed tests for eventual removal of '.' from @INC in Perl
    - Fixed filehandle mode doc typo
    - Fixed doc typo in relative() that mentioned rel2abs instead of abs2rel


author: Paul Howarth <paul@city-fan.org> - 0.104-1
changelog:
  - Update to 0.104
    - The 'absolute' method now always returns an absolute path, even if a user
      provided a relative path for the base path; the old, odd behavior was
      documented, but people often don't read docs so the new behavior avoids
      surprises
    - Added 'cached_temp' method


author: Petr Pisar <ppisar@redhat.com> - 4.15.2-10
changelog:
  - License corrected to "GPLv3+ and (GPLv3+ and BSD) and (LGPLv3+ or BSD) and
    LGPLv2+ and Public Domain and GFDL"


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 5-1
changelog:
  - switch to dot-prefixed Aliases
  - order Aliases for compatibility with older Apache releases
  - enable webfonts
  - enable symlinks in %{_webassetdir} and %{_jsdir}
  - re-enable httpd subpackage


author: Paul Howarth <paul@city-fan.org> - 0.001012-1
changelog:
  - Update to 0.001012
    - Many small performance improvements
  - BR: perl-generators
  - Simplify find command using -delete
  - Update old Test::More patch
  - Package new LICENSE file


author: Paul Howarth <paul@city-fan.org> - 0.001013-1
changelog:
  - Update to 0.001013
    - Avoid possible warnings about special variables only being used once
  - Update old Test::More patch


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 100-1
changelog:
  - Various CMake improvements:
    * The toolchain files /usr/share/data/mingw/toolchain-mingw32.cmake
      and /usr/share/data/mingw/toolchain-mingw64.cmake don't have
      an uppercase character in their file name any more
    * Add CMAKE_SYSTEM_PROCESSOR to the CMake toolchain files
    * Removed Boost_COMPILER from the CMake toolchain files as
      it was unused and broken anyway
    * Made the RPM macros mingw32_cmake, mingw32_cmake_kde4,
      mingw64_cmake and mingw64_cmake_kde4 more generic
    * Removed the rpath references as mingw doesn't support rpath
    * Allow verbose CMake output to be disabled by setting the
      environment variable MINGW_CMAKE_NO_VERBOSE (RHBZ #987644)
    * When calling the mingw32-cmake and mingw64-cmake wrapper
      scripts don't use verbose CMake output by default
    * When using the CMake wrappers, prevent CFLAGS and CXXFLAGS
      from being set unless they're already set in the current
      environment (RHBZ #1136069)
    * Don't set LIB_INSTALL_DIR any more in the CMake macros
      as it breaks CPack and isn't needed by any of the
      Fedora MinGW packages (RHBZ #1152696)
  - Accept empty MINGW{32,64}_{C,CPP,CXX}FLAGS environment variables
  - Removed old _mingw32 macros which have been deprecated since Fedora 17


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 101-1
changelog:
  - Update config.{guess,sub} in %mingw_configure (#1288256)
  - Regenerated list of default win32 DLL's


author: Paul Howarth <paul@city-fan.org> - 1:0.403-1
changelog:
  - Update to 0.403
    - Use DateTime->set_locale instead of ->set to set the locale; using ->set
      may actually change the local time unintentionally (GH#2)
  - Run the author and release tests too
  - Make %files list more explicit
  - Update build dependencies and drop redundant requires filter


author: Paul Howarth <paul@city-fan.org> - 1.002004-1
changelog:
  - Update to 1.002004
    - Module loading is now done while importing, making it unnecessary to load
      them beforehand (CPAN RT#96995)
    - Fix prerequisite declarations for older toolchain


author: Paul Howarth <paul@city-fan.org> - 1.69-1
changelog:
  - Update to 1.69
    - Tests no longer print to stderr unnecessarily; this makes core perl builds
      (where this distribution is included as CPAN-Meta-YAML) a little quieter
    - The Test::More dependency has been reduced to 0.88 by emulating 'subtest'
      for those tests that need it


author: Paul Howarth <paul@city-fan.org> - 1.70-1
changelog:
  - Update to 1.70
    - Some errors writing to a file were incorrectly reported
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.73-1
changelog:
  - Update to 1.73
    - Perform correct stripping of leading white space in literal/folded text
      blocks (GH#44, CPAN RT#56045)
    - Fix compatibility with Test::Builder 0.94 in test shim


author: Paul Howarth <paul@city-fan.org> - 20170521-1
changelog:
  - Update to 20170521
    - Includes fix for CVE-2016-10374: Uses current working directory without
      symlink-attack protection
    - See CHANGES for details of other bug fixes and enhancements
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 20180220-1
changelog:
  - Update to 20180220
    - Fix index error causing perltidy to fail, resulting in empty files
      (CPAN RT#124469, CPAN RT#124494)


author: Paul Howarth <paul@city-fan.org> - 0.31-1
changelog:
  - Update to 0.31
    - Improve support for warnings with trailing newlines
  - This release by BIGJ → update source URL
  - Classify buildreqs by usage
  - Simplify find command using -delete
  - Drop redundant Group: tag


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.1-21
changelog:
  - Update to current packaging guidelines
  - Remove rpm bug workaround
  - Remove legacy obsoletes/provides


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 5.0-0.2.rc2.v5.x.git65a0c3.20160723
changelog:
  - Update to 20160204 snapshot of the v5.x branch (git rev 65a0c3)
  - Backported patch to build failure of latest wine-gecko


author: Paul Howarth <paul@city-fan.org> - 2.111-1
changelog:
  - Update to 2.111
    - Update maintainer's name, which is now Dianne Skoll
  - Use %license where possible


author: Adam Jackson <ajax@redhat.com> - 7.7-21
changelog:
  - oclock 1.0.4
  - xeyes 1.1.2
  - xfontsel 1.0.6
  - xload 1.1.3
  - xmessage 1.0.5
  - xpr 1.0.5
  - xwd 1.0.7
  - xwud 1.0.5


author: Paul Howarth <paul@city-fan.org> - 0.6400-1
changelog:
  - Update to 0.64
    - Bump dependency version for Text::Diff to avoid a buggy release
    - Make tests pass with relocation perl (CPAN RT#103133)


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.06-1
changelog:
  - Update to 1.06.
  - Remove Obsoletes: perl-Locale-gettext.
  - Remove LD_MESSAGES hack.
  - Modernize spec.
  - Drop compatibility-with-POSIX-module.diff (upstreamed).
  - Add BR: perl(Encode).


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.07-1
changelog:
  - Upstream update.
  - Reflect upstream having changed tarball name to Locale-gettext.
  - Rename binary package to perl-Locale-gettext.
  - Remove BR: per(Data::Dumper).


author: Björn Esser <bjoern.esser@gmail.com> - 2.0.1-5
changelog:
  - Introduce doc-subpackage
  - Use unified %_pkgdocdir
  - Updated Patch0 and use on el <= 6, only
  - Rename Patch0 --> Patch 1000
  - Clean-up indentation


author: Paul Howarth <paul@city-fan.org> - 0.023-1
changelog:
  - Update to 0.023
    - Properly handle propagating warnings to previously declared handlers that
      are not coderefs (i.e. a sub name, or the magic DEFAULT and IGNORE)


author: Paul Howarth <paul@city-fan.org> - 0.025-1
changelog:
  - Update to 0.025
    - Prereqs lowered from required to suggested:
      - CPAN::Meta::Check
      - CPAN::Meta::Requirements
    - Tests are now quieter to avoid causing confusion, by suppressing the
      printing of stderr in tests


author: Paul Howarth <paul@city-fan.org> - 0.026-1
changelog:
  - Update to 0.026
    - Fixed use of modules loaded by t/zzz-check-breaks.t
    - Fix stderr suppression on perl 5.6


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-1
changelog:
  - rebase to 20170801 version
  - removed urw-* string from subpackages
  - fontconfig priority value updated to 35
  - error messages from 'xset fp rehash' suppressed (bug #1466254)
  - AppStream files added into (sub)packages
  - fontconfig files added into (sub)packages
  - fixed fonts path during %install
  - source location updated to point at github.com


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-2
changelog:
  - urw-base35-fonts-20170801-000-split-urw-fallback.patch added
  - decrease the fontconfig priority/ordering value to 60 (bug #1494850)
  - set same priority value for urw-fallback.conf as for other files (bug #1495199)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> 20170801-3
changelog:
  - *-devel subpackage added
  - typos & syntax fixed for AppStream files
  - NimbusSansNarrow-BdOblique.* renamed to *-BoldOblique
  - *-nimbus-sans-narrow subpackage dropped
  - priority/ordering decreased [60->61]
  - ship *.otf format files as well


author: Paul Howarth <paul@city-fan.org> - 1.5-1
changelog:
  - Update to 1.5
    - Work around global destruction order issue (CPAN RT#23568/68526)
  - This release by SHAY ⇒ update source URL
  - Drop %defattr, redundant since rpm 4.4
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Classify buildreqs by usage
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1:2.16-1
changelog:
  - Update to 2.16
    - docs only change: create a real link to perlref.pod
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1:2.17-1
changelog:
  - Update to 2.17
    - Unlist Compress::Zlib as a prereq; it was and still is only used by a test
      that won't run for normal user installs (CPAN RT#113886)
  - Author tests now require AUTHOR_TEST variable rather than --doit parameter


author: Paul Howarth <paul@city-fan.org> - 1:2.18-1
changelog:
  - Update to 2.18
    - Makefile.PL changes to support perls without "." in @INC; no functional
      change


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.3-13
changelog:
  - Python 2 binary package renamed to python2-pyxattr
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Adam Williamson <awilliam@redhat.com> - 1.4.0-1
changelog:
  - New release 1.4.0 (builds against Python 3.6)
  - Drop sources merged upstream
  - Modernize spec a bit (use modern macros)
  - Rename python2 package to python2-sure


author: Paul Howarth <paul@city-fan.org> - 0.15-1
changelog:
  - Update to 0.15
    - Made this module co-operate with existing import() subs in packages that
      use this module, as long as you use this module last
  - Drop support for old distributions due to non-optional test dependency of
    Test::Warnings


author: Paul Howarth <paul@city-fan.org> - 0.16-1
changelog:
  - Update to 0.16
    - The subs installed into the caller are now named with Sub::Name; this makes
      these subs appear to be part of the caller, as opposed to an import, which
      is what we want, since each installed sub is constructed uniquely for a
      given package
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 0.17-1
changelog:
  - Update to 0.17
    - Remove use of namespace::autoclean
  - BR: perl-generators
  - Simplify find command using -delete
  - Author and Release Tests moved to xt/ so don't bother trying to run them


author: Paul Howarth <paul@city-fan.org> - 0.28-1
changelog:
  - Update to 0.28
    - Skip failing tests with old Moo or when Sub::Util is broken
      (CPAN RT#107643)


author: Petr Pisar <ppisar@redhat.com> - 0.28-3
changelog:
  - Break build-cycle: perl-namespace-autoclean → perl-Moose
   → perl-Package-DeprecationManager → perl-namespace-autoclean
  - Break build-cycle: perl-namespace-autoclean → perl-Mouse → perl-Moose
   → perl-Package-DeprecationManager → perl-namespace-autoclean
  - Remove unused direct test dependency on Class::MOP


author: Aurelien Bompard <abompard@fedoraproject.org> - 0.1.11-7
changelog:
  - Build for Python3 on EPEL:
    http://fedoraproject.org/wiki/PackagingDrafts:Python3EPEL
  - Modernize the spec a bit (build and install macros, no explicit buildroot)


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18.12-7
changelog:
  - fix linking to use hardening flags (#1547522)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - remove comment with macro


author: Nikola Forró <nforro@redhat.com> - 0.3.10-5
changelog:
  - make non-critical graphic tools weak dependencies
  - recommend inkscape, which can be used to convert SVG images


author: Paul Howarth <paul@city-fan.org> - 1.0-6
changelog:
  - Hide package declaration for JSON::PP::Boolean from rpm to avoid need for
    provides filtering
  - Classify buildreqs by usage
  - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 0.14-1
changelog:
  - Update to 0.14
    - Stop relying on . being in @INC
    - Switch to ExtUtils::HasCompiler to detect presence of a compiler
  - Classify buildreqs by usage


author: Petr Viktorin <pviktori@redhat.com> - 1.1.0-13
changelog:
  - Drop the python-traceback2 dependency

    The traceback2 module duplicates functionality from the Python standard
    library. Use the standard library instead.


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    - Switch to GitHub Issues
  - Author/Release tests moved to xt/, so don't bother trying to run them


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    - Generated exception classes are now added to %INC; if you subclass a
      generated class with "use base" then base.pm will no longer attempt to load
      the requested class (GH#8)


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    - The full_message() method in Exception::Class::Base now calls message()
      instead of accessing the object's hash key, which makes it easier to
      override message() in a subclass (GH#11)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    - You can now pass "frame_filter", "filter_frames_early" and "skip_frames"
      to the throw() method of an exception class; these will be passed on to
      the Devel::StackTrace constructor (GH#6)


author: Akira TAGOH <tagoh@redhat.com> - 2.13.0-6
changelog:
  - Add Suggests: dejavu-sans-fonts to address pulling the unpredicted
    font package as dependency. (#1321551)


author: Akira TAGOH <tagoh@redhat.com> - 2.13.1-3
changelog:
  - Stop cleaning up .uuid file even when a directory is empty.
    resolves: rhbz#1653171
  - Use Rachana instead of Meera for serif subsitution.
    resolves: rhbz#1650491


author: Roman Vais <rvais@redhat.com> - 1.71-1
changelog:
  - Update to upstream version 1.71
  - Add patch for issue https://github.com/cbeust/jcommander/issues/367


author: Paul Howarth <paul@city-fan.org> - 0.110-1
changelog:
  - Update to 0.110
    - Fix support of 5.8 (GH#29, GH#34)
    - Additional optimizations
    - More extensive test suite


author: Paul Howarth <paul@city-fan.org> - 0.200-1
changelog:
  - Update to 0.200
    - Reimplement in pure Perl, with a dynamic dependency on a new Ref::Util::XS
      module that contains the fast XS implementation
  - This release by ARC → update source URL
  - Package is now noarch


author: Paul Howarth <paul@city-fan.org> - 0.203-1
changelog:
  - Update to 0.203
    - Fix space/tab issue in Makefile
    - Don't use DynamicPrereqs for unrelated Makefile.PL snippet
    - Use of the Pure-Perl implementation can now be forced at runtime by setting
      either $Ref::Util::IMPLEMENTATION or $ENV{PERL_REF_UTIL_IMPLEMENTATION} to
      "XS"
    - Fix is_*_formatref() error messages (GH#38)
    - Speed enhancements for is_*_formatref() on 5.8+
    - Restore 5.6 and 5.8 compatibility
    - PP behaviour now matches XS for \v1.2.3 and \sub {}
    - Updated documentation to reflect the PP/XS split


author: Lumír Balhar <lbalhar@redhat.com> - 1.15.6-3
changelog:
  - Add subpackage for platform-python
  - Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 1.15.6-4
changelog:
  - Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Paul Howarth <paul@city-fan.org> - 0.51-1
changelog:
  - Update to 0.51
    - Increase speed (CPAN RT#84838)
    - Faster constructor (CPAN RT#57353)
    - Fixed typos for CPAN RT#61304 and CPAN RT#86422
  - Classify buildreqs by usage


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-1
changelog:
  - Update to 1.36.2
  - Remove mount-archive.desktop helper
  - Remove obsolete gvfs utils
  - Disable nfs support


author: Paul Howarth <paul@city-fan.org> - 0.87-1
changelog:
  - Update to 0.87
    - Fix io($dir)->all when files have unicode in names (GH#95)
    - Stop trampling $!
    - Add cmp overload to fix some windows problems (GH#74)
  - This release by FREW → update source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.044-1
changelog:
  - Update to 0.044
    - Support { -as => CODE } to programmatically rename functions
    - Restructure documentation
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.000000-1
changelog:
  - Update to 1.000000
    - Repackage as 1.000000
  - All shipped files are now GPL+ or Artistic
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1.20141117-1
changelog:
  - Update to 1.20141117
    - Improved export mechanism
    - Removed useless Exporter tests
    - Improved docs (CPAN RT#79681)


author: Paul Howarth <paul@city-fan.org> - 1.20141117-6
changelog:
  - Package LICENSE file
  - Drop legacy spec file elements not needed for EL-6 onwards
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010
    - No longer include a Makefile.PL in the distribution
    - In META.{yml,json}, point to public bug tracker
    - In META.json, specify type of public repository
  - Classify buildreqs by usage
  - Make %files list more specific
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 1:1.70-1
changelog:
  - Update to 1.70
    - The word boundary check supposedly added in 1.67 didn't really work
      properly, and still matched too much (GH#11)
    - Added docs for several formats that have long been supported but not
      documented; these are %P, %c, %x, and %X (GH#10)
    - Altered the conversion specifier %z to accept ±HH, ±HHMM, ±HH:MM and Z;
      previously only ±HHMM were accepted (GH#13)


author: Paul Howarth <paul@city-fan.org> - 1:1.72-1
changelog:
  - Update to 1.72
    - By default, the word boundary checks added in 1.69 are now off; you can
      enable them by passing "strict => 1" to the constructor (GH#15)
    - Switched from Params::Validate to Params::ValidationCompiler
    - Require DateTime::Locale 1.05; this fixes some test failures seen on CPAN
      Testers
    - Require DateTime::TimeZone 2.09 because you should really update this on a
      regular basis
    - Require Specio 0.33 to fix other test failures seen on CPAN (I hope)


author: Paul Howarth <paul@city-fan.org> - 1:1.73-1
changelog:
  - Update to 1.73
    - The format_datetime method now checks that the object it is given isa
      DateTime object (GH#17)


author: Paul Howarth <paul@city-fan.org> - 1:1.74-1
changelog:
  - Update to 1.74
    - Fix text not to rely on a very specific exception message from Specio; this
      was broken in 0.39 (GH#18)


author: Fabio Alessandro Locati <fale@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.1
  - Update the brand icons list using a new script
  - Add the script to create brand icons list


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.17.dev16
changelog:
  - fix rpmlint warnings
  - do not depend on perl
  - update upstream project URL
  - update to the latest upstream pre-release


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.23.dev19
changelog:
  - do not require 'rsh' installed at build time (#1581747)
  - update to the latest upstream pre-release


author: Paul Howarth <paul@city-fan.org> - 2.01-1
changelog:
  - Update to 2.01
    - Disallow initialization of Readonly variables by assignment, allowed by
      Perl prototype changes in v5.16; assignment initialization of scalars sets
      scalar variables to undef and lists and hashes initialized by assignment
      are not read only
  - Use %license
  - Upstream switched to Module::Build::Tiny flow
  - Update interpreter patch


author: Paul Howarth <paul@city-fan.org> - 2.04-1
changelog:
  - Update to 2.04
    - Create mutable clones of readonly structures with Readonly::Clone (GH#13)
    - Minor typo fix (GH#21)
    - Rewording some documentation
    - No longer require an explicit version of perl in META.json or cpanfile
    - Quiet compile time warnings about function prototypes and vars being used
      only once
  - Update interpreter patch


author: Paul Howarth <paul@city-fan.org> - 2.05-1
changelog:
  - Update to 2.05
    - Fix deref when using the stupid and utterly unnecessary Readonly::Clone
  - BR: perl-generators where available
  - Bump Test::More version requirement to 0.88 due to use of done_testing
  - Update interpreter patch


author: Paul Howarth <paul@city-fan.org> - 0.36-1
changelog:
  - Update to 0.36
    - Inlined coercions would attempt to coerce for every type that matched the
      value given, instead of stopping after the first type (GH#11)
    - Inlined coercions did not include the inline environment variables needed
      by the type from which the coercion was being performed (GH#8)
    - When you use the same type repeatedly as coderef (for example, as a
      constraint with Moo), it will only generate its subified form once, rather
      than regenerating it each time it is de-referenced
    - Added an API to Specio::Subs to allow you to combine type libraries and
      helper subs in one package for exporting; see the Specio::Exporter docs for
      more detail


author: Paul Howarth <paul@city-fan.org> - 0.37-1
changelog:
  - Update to 0.37
    - Possible fix for very weird failures seen under threaded Perls with some
      modules that use Specio


author: Paul Howarth <paul@city-fan.org> - 0.38-1
changelog:
  - Update to 0.38
    - Simplify checks for overloading to not call overload::Overloaded(); just
      checking the return value of overload::Method() is sufficient


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Many bug fixes and improvements to the types created by
      {any,object}_{can,does,isa}_type; in some cases, an invalid value could
      cause an exception in type check itself, and in other cases, a value that
      failed a type check would cause an exception when generating a message
      describing the failure
    - The messages describing a failure for all of these types have been improved
    - You can now create anonymous *_does and *_isa types using the exports from
      Specio::Declare


author: Paul Howarth <paul@city-fan.org> - 0.40-1
changelog:
  - Update to 0.40
    - Fixed more bugs with {any,object}_{can,does,isa}_type
      - When passed a glob (not a globref) they would die in their type check
      - On Perl 5.16 or earlier, passing a number to an any_* type would also die
    - Fixed subification overloading: if Sub::Quote was loaded, this would be
      used, but any environment variables needed for the closure would not be
      included, which broke enums, among other things


author: Paul Howarth <paul@city-fan.org> - 0.42-1
changelog:
  - Update to 0.42
    - Fixed checks for whether a class is loaded in light of upcoming
      optimization in Perl 5.28 (GH#12)
    - The Perl library claimed it provided types named LaxVersionStr and
      StrictVersionStr but they were really named LaxVersion and StrictVersion;
      the names have now been fixed to match the documentation, so they are
      LaxVersionStr and StrictVersionStr


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.2-7
changelog:
  - Python 2 binary package renamed to python2-httplib2
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Paul Howarth <paul@city-fan.org> - 0.418-1
changelog:
  - Update to 0.418
    - Divorce List::MoreUtils and List::MoreUtils::XS
    - Change license to Apache 2.0 to avoid code stealing without credits
    - Don't support Perl 5.6 out of the box any more
    - Fix CPAN RT#120235: uniq examples are incorrect
    - Remove things that will be never done from TODO list (GH#18)
    - Spelling fixes
  - Package is now noarch


author: Paul Howarth <paul@city-fan.org> - 0.419-1
changelog:
  - Update to 0.419
    - Makefile.PL failed due to unescaped paths interpolated in regex pattern
      (CPAN RT#120799)


author: Paul Howarth <paul@city-fan.org> - 0.423-1
changelog:
  - Update to 0.423
    - Sync version with List::MoreUtils::XS
    - Add some new functions: qsort (XS only), binsert, bremove, listcmp,
      arrayify (CPAN RT#17230), samples (CPAN RT#77562), minmaxstr
      (CPAN RT#106401), lower_bound, upper_bound, equal_range, frequencies
      occurrences, mode (CPAN RT#91991), zip6 (CPAN RT#42921), reduce_0,
      reduce_1, reduce_u
    - Add examples for binsert/bremove (LMU::XS GH#1)
    - Improve tests
    - Make List::MoreUtils::XS independent from List::MoreUtils
    - Improve Makefile.PL regarding some build artifacts
    - Update tests to latest List::MoreUtils::XS
    - Recommend List::MoreUtils::XS 0.423
  - BR:/R: LMU::XS ≥ 0.423 as there is no longer a bootstrapping issue


author: Paul Howarth <paul@city-fan.org> - 0.426-1
changelog:
  - Update to 0.426
    - Fix broken arrayify prototype
    - Revert removal of old List::MoreUtils::XS parts
    - Re-introduce Config::AutoConf (CPAN RT#122875)
    - Bump required version of List::MoreUtils::XS to 0.426, if XS is available


author: Paul Howarth <paul@city-fan.org> - 0.428-1
changelog:
  - Update to 0.428
    - Fix GH#22 (Upgrading from LMU 0.416 to split XS/PP version will fail),
      this time hopefully the right way (CPAN RT#123310)
    - Fix GH#29 (pairwise() PP implementation add tail undefs if array sizes
      differ)


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Exclusively use Package::Stash::PP on perls < 5.8.7 until a fixed
      Package::Stash::XS ships - breakage keeps getting re-introduced
      (CPAN RT#74151, CPAN RT#107343)
    - Explicitly document the late runtime binding of 'sort SUBNAME ...'
      (CPAN RT#101247)
    - No longer rely on Sub::Identify - either use Sub::Util or B (CPAN RT#96945)
  - Classify buildreqs by usage
  - Filter dependency on private package namespace::clean::_Util
  - Drop EL-6 support since build requirements can't be met there


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Allow packages to be cleaned multiple times
    - Ensure the debugger workarounds are applied only when DB::sub is actively
      used (they are superfluous otherwise)
    - Work around P5#72210, resulting in fails on 5.8.8 -Duselongdouble
    - Fix incorrect name in META (CPAN RT#107813)
  - BR: perl-generators where available
  - Simplify find command using -delete


author: Sérgio Basto <sergio@serjux.com> - 0.52-2
changelog:
  - Add to Requires all optional run-time perl modules (#1515239)
  - Readd Requires of perl-gettext on epel7 since rhbz #1196539 is fixed but RHEL7.4
    also already ships poa4 except in ppc64 see rhbz #1497544


author: Paul Howarth <paul@city-fan.org> - 0.014-1
changelog:
  - Update to 0.014
    - Avoid assuming that t/todo.t is always called t/todo.t
  - Classify buildreqs by usage
  - Use %license


author: Jeff Moyer <jmoyer@redhat.com> - 1.6-2.el8
changelog:
  - Add explicit version dependencies
  - Fix up broken link line in build system
  - Related: rhbz#1598527


author: Dave Anderson <anderson@redhat.com> - 7.2.6-1
changelog:
  - Rebase to latest upstream sources
    Resolves: rhbz#1686560 
  - Utilize the VMCOREINFO PT_NOTE in /proc/kcore header
    Resolves: rhbz#1627528
  - Support extraction of CONFIG_PROC_VMCORE_DEVICE_DUMP data from dumpfile header
    Resolves: rhbz#1702535


author: Dave Anderson <anderson@redhat.com> - 7.2.6-2
changelog:
  - Fix "p" command regression
    Resolves: rhbz#1718417  
  - Fix arm64 debug kernel read error message during initialization
    Resolves: rhbz#1718736


author: Dave Anderson <anderson@redhat.com> - 7.2.7-2
changelog:
  - Rebase to latest upstream sources
    Resolves: rhbz#1738619
  - Support for KASLR on s390x
    Resolves: rhbz# 1753172


author: Dave Anderson <anderson@redhat.com> - 7.2.7-3
changelog:
  - Rebase to github commit 6c1c8ac6
    Resolves: rhbz#1738619
  - Fix "log -a" option
    Resolves: rhbz#1785537
  - Fix for ELF kdump vmcores form s390x KASLR kernels
    Resolves: rhbz#1786996


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29
changelog:
  - cpu: allow include files for CPU definition (rhbz#1686895)
  - cpu: fix cleanup when signature parsing fails (rhbz#1686895)
  - cpu: push more parsing logic into common code (rhbz#1686895)
  - cpu: simplify failure cleanup paths (rhbz#1686895)
  - cpu_map: Add support for arch-capabilities feature (rhbz#1693433)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1686895)
  - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1686895)
  - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1686895)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1686895)
  - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1686895)
  - cpu_x86: Separate ancestor model parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate vendor parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate feature list parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Make sure CPU model names are unique in cpu_map (rhbz#1686895)
  - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1686895)
  - cpu_x86: Store CPU signature in an array (rhbz#1686895)
  - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1686895)
  - cpu_x86: Log decoded CPU model and signatures (rhbz#1686895)
  - qemu_capabilities: Inroduce virQEMUCapsGetCPUModelX86Data (rhbz#1686895)
  - qemu_capabilities: Introduce virQEMUCapsGetCPUModelInfo (rhbz#1686895)
  - qemu_capabilities: Use virQEMUCapsGetCPUModelInfo (rhbz#1686895)
  - cpu_x86: Add virCPUx86DataGetSignature for tests (rhbz#1686895)
  - cpu_map: Add hex representation of signatures (rhbz#1686895)
  - cputest: Test CPU signatures (rhbz#1686895)
  - cpu_map: Add more signatures for Conroe CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for Penryn CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Westmere CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Haswell CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1686895)
  - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1686895)
  - cpu_x86: Require <cpuid> within <feature> in CPU map (rhbz#1697627)
  - cputest: Add data for Intel(R) Xeon(R) Platinum 8268 CPU (rhbz#1693433)
  - cpu_map: Add Cascadelake-Server CPU model (rhbz#1693433)
  - cpu_x86: Introduce virCPUx86DataItem container struct (rhbz#1697627)
  - cpu_x86: Rename virCPUx86Vendor.cpuid (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataItem variables (rhbz#1697627)
  - cpu_x86: Rename x86DataCpuidNext function (rhbz#1697627)
  - cpu_x86: Rename x86DataCpuid (rhbz#1697627)
  - cpu_x86: Rename virCPUx86CPUIDSorter (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataAddCPUIDInt (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataAddCPUID (rhbz#1697627)
  - cpu_x86: Rename virCPUx86VendorToCPUID (rhbz#1697627)
  - cpu_x86: Simplify x86DataAdd (rhbz#1697627)
  - cpu_x86: Introduce virCPUx86DataCmp (rhbz#1697627)
  - cpu_x86: Make x86cpuidSetBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidClearBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidAndBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidMatchMasked more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidMatch more general (rhbz#1697627)
  - cpu_x86: Store virCPUx86DataItem content in union (rhbz#1697627)
  - cpu_x86: Add support for storing MSR features in CPU map (rhbz#1697627)
  - cpu_x86: Move *CheckFeature functions (rhbz#1697627)
  - cputest: Add support for MSR features to cpu-parse.sh (rhbz#1697627)
  - util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1697627)
  - vircpuhost: Add support for reading MSRs (rhbz#1697627)
  - virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1697627)
  - cpu_x86: Fix placement of *CheckFeature functions (rhbz#1697627)
  - cpu_conf: Introduce virCPUDefFilterFeatures (rhbz#1697627)
  - qemu_command: Use consistent syntax for CPU features (rhbz#1697627)
  - tests: Add QEMU caps data for future 4.1.0 (rhbz#1697627)
  - tests: Add domain capabilities case for QEMU 4.1.0 (rhbz#1697627)
  - qemuxml2argvtest: Add test for CPU features translation (rhbz#1697627)
  - qemu: Add APIs for translating CPU features (rhbz#1697627)
  - qemu: Probe for max-x86_64-cpu type (rhbz#1697627)
  - qemu: Probe for "unavailable-features" CPU property (rhbz#1697627)
  - qemu: Probe host CPU after capabilities (rhbz#1697627)
  - qemu_command: Use canonical names of CPU features (rhbz#1697627)
  - qemu: Translate feature names from query-cpu-model-expansion (rhbz#1697627)
  - qemu: Don't use full CPU model expansion (rhbz#1697627)
  - qemu: Make qemuMonitorGetGuestCPU usable on x86 only (rhbz#1697627)
  - cpu: Introduce virCPUDataAddFeature (rhbz#1697627)
  - qemu: Add type filter to qemuMonitorJSONParsePropsList (rhbz#1697627)
  - util: string: Introduce macro for automatic string lists (rhbz#1697627)
  - util: json: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1697627)
  - qemu: Introduce generic qemuMonitorGetGuestCPU (rhbz#1697627)
  - qemu_process: Prefer generic qemuMonitorGetGuestCPU (rhbz#1697627)
  - util: Rework virStringListAdd (rhbz#1697627)
  - conf: Introduce virCPUDefCheckFeatures (rhbz#1697627)
  - cpu_x86: Turn virCPUx86DataIteratorInit into a function (rhbz#1697627)
  - cpu_x86: Introduce virCPUx86FeatureFilter*MSR (rhbz#1697627)
  - cpu_x86: Read CPU features from IA32_ARCH_CAPABILITIES MSR (rhbz#1697627)
  - cpu_map: Introduce IA32_ARCH_CAPABILITIES MSR features (rhbz#1697627)
  - qemu: Forbid MSR features with old QEMU (rhbz#1697627)
  - qemu: Drop MSR features from host-model with old QEMU (rhbz#1697627)
  - cpu_x86: Fix memory leak - virCPUx86GetHost (rhbz#1697627)
  - qemu: Use @tmpChr in qemuDomainDetachChrDevice to build device string (rhbz#1624204)
  - qemu: Drop "user-" prefix for guestfwd netdev (rhbz#1624204)
  - qemu_hotplug: Attach guestfwd using netdev_add (rhbz#1624204)
  - qemu_hotplug: Detach guestfwd using netdev_del (rhbz#1624204)
  - qemuhotplugtest: Test guestfwd attach and detach (rhbz#1624204)
  - daemon: Register secret driver before storage driver (rhbz#1685151)
  - bhyve: Move autostarting of domains into bhyveStateInitialize (rhbz#1685151)
  - Revert "virStateDriver - Separate AutoStart from Initialize" (rhbz#1685151)
  - Revert "Separate out StateAutoStart from StateInitialize" (rhbz#1685151)
  - util: moving 'type' argument to avoid issues with mount() syscall. (rhbz#1689297)
  - util: cgroup: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1689297)
  - vircgroup: Rename structs to start with underscore (rhbz#1689297)
  - vircgroup: Introduce standard set of typedefs and use them (rhbz#1689297)
  - vircgroup: Extract file link resolving into separate function (rhbz#1689297)
  - vircgroup: Remove unused function virCgroupKill() (rhbz#1689297)
  - vircgroup: Unexport unused function virCgroupAddTaskController() (rhbz#1689297)
  - vircgroup: Unexport unused function virCgroupRemoveRecursively (rhbz#1689297)
  - vircgroup: Move function used in tests into vircgrouppriv.h (rhbz#1689297)
  - vircgroup: Remove pointless bool parameter (rhbz#1689297)
  - vircgroup: Extract mount options matching into function (rhbz#1689297)
  - vircgroup: Use virCgroupMountOptsMatchController in virCgroupDetectPlacement (rhbz#1689297)
  - vircgroup: Introduce virCgroupEnableMissingControllers (rhbz#1689297)
  - vircgroup: machinename will never be NULL (rhbz#1689297)
  - vircgroup: Remove virCgroupAddTaskController (rhbz#1689297)
  - vircgroup: Introduce virCgroupGetMemoryStat (rhbz#1689297)
  - lxc: Use virCgroupGetMemoryStat (rhbz#1689297)
  - vircgroup: fix MinGW build (rhbz#1689297)
  - vircgroup: Duplicate string before modifying (rhbz#1689297)
  - vircgroup: Extract controller detection into function (rhbz#1689297)
  - vircgroup: Extract placement validation into function (rhbz#1689297)
  - vircgroup: Split virCgroupPathOfController into two functions (rhbz#1689297)
  - vircgroup: Call virCgroupRemove inside virCgroupMakeGroup (rhbz#1689297)
  - vircgroup: Simplify if conditions in virCgroupMakeGroup (rhbz#1689297)
  - vircgroup: Remove obsolete sa_assert (rhbz#1689297)
  - tests: Resolve possible overrun (rhbz#1689297)
  - vircgroup: cleanup controllers not managed by systemd on error (rhbz#1689297)
  - vircgroup: fix bug in virCgroupEnableMissingControllers (rhbz#1689297)
  - vircgroup: rename virCgroupAdd.*Task to virCgroupAdd.*Process (rhbz#1689297)
  - vircgroup: introduce virCgroupTaskFlags (rhbz#1689297)
  - vircgroup: introduce virCgroupAddThread (rhbz#1689297)
  - vircgroupmock: cleanup unused cgroup files (rhbz#1689297)
  - vircgroupmock: rewrite cgroup fopen mocking (rhbz#1689297)
  - vircgrouptest: call virCgroupDetectMounts directly (rhbz#1689297)
  - vircgrouptest: call virCgroupNewSelf instead virCgroupDetectMounts (rhbz#1689297)
  - util: introduce vircgroupbackend files (rhbz#1689297)
  - vircgroup: introduce cgroup v1 backend files (rhbz#1689297)
  - vircgroup: extract virCgroupV1Available (rhbz#1689297)
  - vircgroup: detect available backend for cgroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1ValidateMachineGroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1CopyMounts (rhbz#1689297)
  - vircgroup: extract v1 detect functions (rhbz#1689297)
  - vircgroup: extract virCgroupV1CopyPlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1ValidatePlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1StealPlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1DetectControllers (rhbz#1689297)
  - vircgroup: extract virCgroupV1HasController (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetAnyController (rhbz#1689297)
  - vircgroup: extract virCgroupV1PathOfController (rhbz#1689297)
  - vircgroup: extract virCgroupV1MakeGroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1Remove (rhbz#1689297)
  - vircgroup: extract virCgroupV1AddTask (rhbz#1689297)
  - vircgroup: extract virCgroupV1HasEmptyTasks (rhbz#1689297)
  - vircgroup: extract virCgroupV1BindMount (rhbz#1689297)
  - vircgroup: extract virCgroupV1SetOwner (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioWeight (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetBlkioIoServiced (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetBlkioIoDeviceServiced (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWeight (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadIops (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteIops (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadBps (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteBps (rhbz#1689297)
  - vircgroup: extract virCgroupV1SetMemory (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemoryStat (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemoryUsage (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)Memory*Limit (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemSwapUsage (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Allow|Deny)Device (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Allow|Deny)AllDevices (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuShares (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuCfsPeriod (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuCfsQuota (rhbz#1689297)
  - vircgroup: extract virCgroupV1SupportsCpuBW (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetCpuacct*Usage (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetCpuacctStat (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)FreezerState (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetMems (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetMemoryMigrate (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetCpus (rhbz#1689297)
  - vircgroup: rename virCgroupController into virCgroupV1Controller (rhbz#1689297)
  - vircgroup: rename controllers to legacy (rhbz#1689297)
  - vircgroup: remove VIR_CGROUP_SUPPORTED (rhbz#1689297)
  - vircgroup: include system headers only on linux (rhbz#1689297)
  - vircgroupv1: fix build on non-linux OSes (rhbz#1689297)
  - Revert "vircgroup: cleanup controllers not managed by systemd on error" (rhbz#1689297)
  - util: introduce cgroup v2 files (rhbz#1689297)
  - vircgroup: introduce virCgroupV2Available (rhbz#1689297)
  - vircgroup: introduce virCgroupV2ValidateMachineGroup (rhbz#1689297)
  - vircgroup: introduce virCgroupV2CopyMounts (rhbz#1689297)
  - vircgroup: introduce virCgroupV2CopyPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectMounts (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2ValidatePlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2StealPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectControllers (rhbz#1689297)
  - vircgroup: introduce virCgroupV2HasController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetAnyController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2PathOfController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2MakeGroup (rhbz#1689297)
  - vircgroup: introduce virCgroupV2Remove (rhbz#1689297)
  - vircgroup: introduce virCgroupV2AddTask (rhbz#1689297)
  - vircgroup: introduce virCgroupV2HasEmptyTasks (rhbz#1689297)
  - vircgroup: introduce virCgroupV2BindMount (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SetOwner (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioWeight (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetBlkioIoServiced (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetBlkioIoDeviceServiced (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWeight (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadIops (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteIops (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadBps (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteBps (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SetMemory (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemoryStat (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemoryUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemoryHardLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemorySoftLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemSwapHardLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemSwapUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuShares (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsPeriod (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsQuota (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SupportsCpuBW (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetCpuacctUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetCpuacctStat (rhbz#1689297)
  - vircgroup: register cgroup v2 backend (rhbz#1689297)
  - vircgroup: add support for hybrid configuration (rhbz#1689297)
  - vircgroupmock: change cgroup prefix (rhbz#1689297)
  - vircgroupmock: add support to test cgroup v2 (rhbz#1689297)
  - vircgrouptest: introduce initFakeFS and cleanupFakeFS helpers (rhbz#1689297)
  - vircgrouptest: prepare testCgroupDetectMounts for cgroup v2 (rhbz#1689297)
  - vircgrouptest: add detect mounts test for cgroup v2 (rhbz#1689297)
  - vircgrouptest: add detect mounts test for hybrid cgroups (rhbz#1689297)
  - vircgrouptest: prepare validateCgroup for cgroupv2 (rhbz#1689297)
  - vircgrouptest: add cgroup v2 tests (rhbz#1689297)
  - vircgrouptest: add hybrid tests (rhbz#1689297)
  - virt-host-validate: rewrite cgroup detection to use util/vircgroup (rhbz#1689297)
  - virt-host-validate: require freezer for LXC (rhbz#1689297)
  - virt-host-validate: Fix build on non-Linux (rhbz#1689297)
  - tests: Use correct function name in error path (rhbz#1689297)
  - util: Fix virCgroupGetMemoryStat (rhbz#1689297)
  - tests: Augment vcgrouptest to add virCgroupGetMemoryStat (rhbz#1689297)
  - vircgroup: introduce virCgroupKillRecursiveCB (rhbz#1689297)
  - vircgroupv2: fix virCgroupV2ValidateMachineGroup (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetMems (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetMemoryMigrate (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetCpus (rhbz#1689297)
  - util: enable cgroups v2 cpuset controller for threads (rhbz#1689297)
  - util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB (rhbz#1689297)
  - internal: introduce a family of NULLSTR macros (rhbz#1689297)
  - util: vircgroup: improve controller detection (rhbz#1689297)
  - util: vircgroupv2: use any controller to create thread directory (rhbz#1689297)
  - util: vircgroupv2: enable CPU controller only if it's available (rhbz#1689297)
  - util: vircgroupv2: separate return values of virCgroupV2EnableController (rhbz#1689297)
  - util: vircgroupv2: don't error out if enabling controller fails (rhbz#1689297)
  - util: vircgroupv2: mark only requested controllers as available (rhbz#1689297)
  - Revert "util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB" (rhbz#1689297)
  - util: vircgroupv2: stop enabling missing controllers with systemd (rhbz#1689297)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30
changelog:
  - virWaitForDevices: Drop confusing part of comment (rhbz#1710575)
  - lib: Drop UDEVSETTLE (rhbz#1710575)
  - m4: Provide default value fore UDEVADM (rhbz#1710575)
  - m4: Drop needless string checks (rhbz#1710575)
  - util: vircgroup: introduce virCgroup(Get|Set)ValueRaw (rhbz#1658890)
  - util: vircgroup: move virCgroupGetValueStr out of virCgroupGetValueForBlkDev (rhbz#1658890)
  - util: vircgroupv1: add support for BFQ blkio files (rhbz#1658890)
  - util: vircgroupv2: add support for BFQ files (rhbz#1658890)
  - Handle copying bitmaps to larger data buffers (rhbz#1703160)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31
changelog:
  - virDomainObjListAddLocked: fix double free (rhbz#1728530)
  - docs: schemas: Decouple the virtio options from each other (rhbz#1729675)
  - util: command: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
  - util: command: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1721434)
  - util: netdevopenvswitch: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
  - util: virnetdevopenvswitch: Drop an unused variable @ovs_timeout (rhbz#1721434)
  - util: netdevopenvswitch: use VIR_AUTOPTR for aggregate types (rhbz#1721434)
  - util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1721434)
  - virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1721434)
  - test: Introduce virnetdevopenvswitchtest (rhbz#1721434)
  - vircommand: Separate mass FD closing into a function (rhbz#1721434)
  - virCommand: use procfs to learn opened FDs (rhbz#1721434)
  - util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1721434)
  - util: Avoid possible error in virCommandMassClose (rhbz#1721434)
  - vircgroup: fix cgroups v2 controllers detection (rhbz#1689297)
  - vircgroupv2: store enabled controllers (rhbz#1689297)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32
changelog:
  - virDomainObjListAddLocked: Produce better error message than 'Duplicate key' (rhbz#1737790)
  - virdbus: Grab a ref as long as the while loop is executed (rhbz#1741900)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33
changelog:
  - vircgroupv2: fix parsing multiple values in single file (rhbz#1741825)
  - vircgroupv2: fix virCgroupV2GetCpuCfsQuota for "max" value (rhbz#1741837)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35.1.el8
changelog:
  - cpu_conf: Pass policy to CPU feature filtering callbacks (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - qemuxml2*test: Add tests for Icelake-Server, -pconfig (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - qemu: Drop disabled CPU features unknown to QEMU (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - cputest: Add data for Ice Lake Server CPU (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - cpu_map: Drop pconfig from Icelake-Server CPU model (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - qemu: Fix NULL ptr dereference caused by qemuDomainDefFormatBufInternal (rhbz#1775133, rhbz#1775134, rhbz#1775137)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35.2.el8
changelog:
  - cpu_map: Add TAA_NO bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135)
  - cpu_map: Add TSX_CTRL bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36
changelog:
  - cpu_conf: Pass policy to CPU feature filtering callbacks (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - qemuxml2*test: Add tests for Icelake-Server, -pconfig (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - qemu: Drop disabled CPU features unknown to QEMU (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - cputest: Add data for Ice Lake Server CPU (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - cpu_map: Drop pconfig from Icelake-Server CPU model (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - qemu: Fix NULL ptr dereference caused by qemuDomainDefFormatBufInternal (rhbz#1749672, rhbz#1756156, rhbz#1721608)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-39
changelog:
  - selinux: Do not report an error when not returning -1 (rhbz#1788096)
  - qemu: Fix hyperv features with QEMU 4.1 (rhbz#1794868)
  - qemu: Prefer dashes for hyperv features (rhbz#1794868)
  - cpu: Drop KVM_ from hyperv feature macros (rhbz#1794868)
  - cpu: Drop unused KVM features (rhbz#1794868)
  - qemu: Fix KVM features with QEMU 4.1 (rhbz#1794868)
  - cpu: Drop CPUID definition for hv-spinlocks (rhbz#1794868)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-40
changelog:
  - process: wait longer on kill per assigned Hostdev (rhbz#1785338)
  - process: wait longer 5->30s on hard shutdown (rhbz#1785338)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-42
changelog:
  - RHEL: virscsi: Check device type before getting it's /dev node name (rhbz#1808388)
  - RHEL: virscsi: Support TAPEs in virSCSIDeviceGetDevName() (rhbz#1808388)
  - RHEL: virscsi: Introduce and use virSCSIDeviceGetUnprivSGIOSysfsPath() (rhbz#1808388)
  - RHEL: virutil: Accept non-block devices in virGetDeviceID() (rhbz#1808388)
  - RHEL: qemuSetUnprivSGIO: Actually use calculated @sysfs_path to set unpriv_sgio (rhbz#1808388)
  - RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1808399)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-23.1.el8
changelog:
  - cpu_x86: Do not cache microcode version (CVE-2018-12130, CVE-2018-12126, CVE-2018-11091, CVE-2018-12127)
  - qemu: Don't cache microcode version (CVE-2018-12130, CVE-2018-12126, CVE-2018-11091, CVE-2018-12127)
  - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12130, CVE-2018-12126, CVE-2018-11091, CVE-2018-12127)
  - cpu_map: Define md-clear CPUID bit (CVE-2018-12130, CVE-2018-12126, CVE-2018-11091, CVE-2018-12127)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-23.2.el8
changelog:
  - admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
  - locking: restrict sockets to mode 0600 (CVE-2019-10132)
  - logging: restrict sockets to mode 0600 (CVE-2019-10132)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-23.3.el8
changelog:
  - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
  - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
  - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
  - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)


author: Danilo de Paula <ddepaula@redhat.com> - 4.5.0-24.3
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1696354
    (Ensure modular RPM upgrade path [ZStream Clone] [rhel-8.0.0.z])


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Resolves: rhbz#963475 dyninst must be ported to aarch64
    Remove Requires: glibc-static from %package testsuite


author: Martin Osvald <mosvald@redhat.com> - 9.25-3
changelog:
  - Resolves: #1692798 - CVE-2019-3839 ghostscript: missing attack vector
    protections for CVE-2019-6116
  - Resolves: #1678170 - CVE-2019-3835 ghostscript: superexec operator
    is available (700585)
  - Resolves: #1691414 - CVE-2019-3838 ghostscript: forceput in DefineResource
    is still accessible (700576)
  - fix included for ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata
  - fix for pdf2dsc regression added to allow fix for CVE-2019-3839


author: Martin Osvald <mosvald@redhat.com> - 9.25-5
changelog:
  - Resolves: #1744011 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744015 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744006 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744231 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: Andreas Schneider <asn@redhat.com> - 4.10.4-0
changelog:
  - related: #1638001 - Rebase to Samba version 4.10.4
  - resolves: #1597298 - Build Samba with python3
  - resolves: #1658558 - Add 'net ads leave --keep-account' option
  - resolves: #1669004 - Fix systemd status notifications
  - resolves: #1672167 - Fix printing cache timeout in debug output
  - resolves: #1696525 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.10.4-1
changelog:
  - resolves: #1712378 - Fix smbspool CUPS backend
  - resolves: #1696612 - Fix 'net ads join -U admin@parentdomain'


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.2-4
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Danilo de Paula <ddepaula@redhat.com> - 4.5.0-28
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3 (#1680182)
  - remove load and test FP splitter (#1673116)
  - fix *movsi_from_df (#1677652)
  - add missing headers
  - add support for live patching (#1668903)
  - retire gcc8-rh1612514.patch, gcc8-rh1652016.patch, gcc8-rh1652929-?.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4
changelog:
  - update from Fedora 8.3.1-4 (#1680182)
  - drop gcc8-pr60790.patch, gcc8-pr89629.patch, gcc8-rh1668903-4.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.2
changelog:
  - backport the -fuse-ld=lld option (#1670535)
  - TLS model fix (#1678555, PR c++/85400)
  - two small autoFDO fixes (#1686082)
  - libgomp update (#1707568)
  - member template redeclaration fix (#1652704, PR c++/86747)
  - turn libgcc_s.so into a linker script on i?86, x86_64, ppc64le and also on
    ppc and ppc64 for 64-bit multilib (#1708309)
  - avoid using unaligned vsx or lxvd2x/stxvd2x for memcpy/memmove inline
    expansion (#1666977)


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.5
changelog:
  - fix shift count operand printing (#1730380)
  - fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730454)
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - fix ICE with template placeholder for TTP (PR c++/86098, #1730454)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7
changelog:
  - do not print error message when restorecon is not present 
    during install (#1626395)
  - change default config to use minimal UID = 1000 (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-10
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741788)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-27
changelog:
  - RHEL: spec: Disable gluster on i686 (rhbz#1722668)
  - rpc: virnetlibsshsession: update deprecated functions (rhbz#1722735)


author: Evgeny Kolesnikov <ekolesni@redhat.com> - 1.3.1-0
changelog:
  - Upgrade to the latest upstream release (rhbz#1718826)
  - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) (rhbz#1709429)
  - Tailoring files are included in ARF result files
  - Remote filesystems mounted using `autofs` direct maps are not recognized as local filesystems (rhbz#1655943)
  - Offline scan utilizing rpmverifyfile probe fails in fchdir and aborts (rhbz#1636431)


author: Honza Horak <hhorak@redhat.com> - 3:10.3.8-3
changelog:
  - Move config files mysql-clients.cnf and enable_encryption.preset to correct
    sub-packages, similar to what upstream does


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.8-6
changelog:
  - Use openssl-devel instead of pkgconfig(openssl)
  - Enable conflicts against mysql (instead of community-mysql)
    Related: #1581034


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.9-1
changelog:
  - Rebase to 10.3.9
  - Add workaround for short SSL certificates
  - Fix parallel installability for x86_64 and i686 devel packages
  - CVEs fixed: #1603531
    CVE-2018-3058 CVE-2018-3063 CVE-2018-3064 CVE-2018-3066


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.10-3
changelog:
  - Fix "-fstack-protector-strong" static analysis errors
    Resolves: #1624139
  - Add wsrep_sst_rsync_tunnel script, add README
    Resolves: #1650463
  - Fix few covscan issues
    Resolves: #1649707
  - Fix galera_new_cluster script
    Resolves: #1641663


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.11-1
changelog:
  - Rebase to 10.3.11
  - Remove README.mysql-cnf as we don't ship example configuration files anymore
    Resolves: #1653318
  - CVEs fixed:
    CVE-2018-3282, CVE-2016-9843, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156
    CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-3173
    CVE-2018-3200, CVE-2018-3284


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.17-1
changelog:
  - Rebase to 10.3.17
    Resolves: #1711265
    Resolves: #1701687
  - Add patch for server pkgconfig file location
  - Use logrotatedir macro on one more spot
  - Fix building of TokuDB with Jemalloc 5
  - Fix building with / without lz4
  - Fix "ggsapi" -> "gssapi" typo but keep the broken behaviour
  - Control building of the CACHING_SHA2_PASSWORD plugin
  - Fix the license tag
    Resolves: #1702707


author: Lubomir Rintel <lkundrak@v3.sk> - 1.10.2-1
changelog:
  - Update to 1.10.2 release (rh #1543498)
  - Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031)


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-19
changelog:
  - Constrain number of cycles in rescale filter
  - Compute correct coverage values for box filter
  - Resolves: #1688418


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-25
changelog:
  - Check whether input is RGB in PSOutputDev::checkPageSlice()
  - also when using "-optimizecolorspace" flag
  - Resolves: #1697576


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.4-11
changelog:
  - Use a better icon for RHEL 7+ guests
    resolves: rhbz#1679483
  - Fix inspection of partition-less devices
    resolves: rhbz#1679966
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1688062


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.4-12
changelog:
  - v2v: update nbdkit information in documentation
    resolves: rhbz#1651115
  - v2v: use proper SELinux label for nbdkit sockets
    resolves: rhbz#1717088


author: Evgeny Kolesnikov <ekolesni@redhat.com> - 1.3.2-1
changelog:
  - Upgrade to the latest upstream release (rhbz#1778296)
  - Offline mode support for environmentvariable58 probe (rhbz#1493614)
  - The oscap-docker wrapper is available without Atomic
  - Improved support of multi-check rules (report, remediations, console output) (rhbz#1771438)
  - Improved HTML report look and feel, including printed version (rhbz#1640839)
  - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels
  - Probe rpmverifyfile uses and returns canonical paths (rhbz#1776308)
  - Improved a11y of HTML reports and guides (rhbz#1767382)
  - Fixes and improvements for SWIG Python bindings (rhbz#1753603)
  - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity)
  - Fixed URL link mechanism for Red Hat Errata
  - New STIG Viewer URI: public.cyber.mil
  - Probe selinuxsecuritycontext would not check if SELinux is enabled
  - Scanner would provide information about unsupported OVAL objects
  - Added more tests for offline mode (probes, remediation) (rhbz#1618489)
  - #528 fixed: Eval SCE script when /tmp is in mode noexec
  - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage (rhbz#1636431)


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-138.el8]
changelog:
  - [net] xfrm: fix sa selector validation (Sabrina Dubroca) [1738871]
  - [net] xfrm: Fix xfrm sel prefix length validation (Sabrina Dubroca) [1738871]
  - [kernel] locking/rwsem: Prevent decrement of reader count before increment (Waiman Long) [1740338]
  - [include] include/list: Backport list_cut_before() (Waiman Long) [1740338]
  - [vhost] vhost: vsock: add weight support (Jason Wang) [1738494]
  - [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1738494]
  - [vhost] vhost: introduce vhost_exceeds_weight() (Jason Wang) [1738494]
  - [vhost] vhost: reject zero size iova range (Jason Wang) [1738494]
  - [vhost] vhost: silence an unused-variable warning (Jason Wang) [1738494]
  - [vhost] vhost: correctly check the return value of translate_desc() in log_used() (Jason Wang) [1738494]
  - [vhost] vhost: return EINVAL if iovecs size does not match the message size (Jason Wang) [1738494]
  - [vhost] Revert "net: vhost: lock the vqs one by one" (Jason Wang) [1738494]
  - [vhost] vhost_net: switch to use mutex_trylock() in vhost_net_busy_poll() (Jason Wang) [1738494]
  - [vhost] vhost: make sure used idx is seen before log in vhost_add_used_n() (Jason Wang) [1738494]
  - [vhost] vhost: fix IOTLB locking (Jason Wang) [1738494]
  - [netdrv] tun: wake up waitqueues after IFF_UP is set (Jason Wang) [1738494]
  - [netdrv] tuntap: synchronize through tfiles array instead of tun->numqueues (Jason Wang) [1738494]
  - [netdrv] tuntap: fix dividing by zero in ebpf queue selection (Jason Wang) [1738494]
  - [netdrv] tun: Remove unused first parameter of tun_get_iff() (Jason Wang) [1738494]
  - [netdrv] tun: Add ioctl() TUNGETDEVNETNS cmd to allow obtaining real net ns of tun device (Jason Wang) [1738494]
  - [netdrv] tun: add a missing rcu_read_unlock() in error path (Jason Wang) [1738494]
  - [netdrv] tun: properly test for IFF_UP (Jason Wang) [1738494]
  - [netdrv] tun: remove unnecessary memory barrier (Jason Wang) [1738494]
  - [netdrv] tun: fix blocking read (Jason Wang) [1738494]
  - [netdrv] tun: move the call to tun_set_real_num_queues (Jason Wang) [1738494]
  - [netdrv] tun: publish tfile after it's fully initialized (Jason Wang) [1738494]
  - [netdrv] tun: replace get_cpu_ptr with this_cpu_ptr when bh disabled (Jason Wang) [1738494]
  - [netdrv] tun: remove skb access after netif_receive_skb (Jason Wang) [1738494]
  - [netdrv] tun: remove unnecessary check in tun_flow_update (Jason Wang) [1738494]
  - [netdrv] tuntap: fix multiqueue rx (Jason Wang) [1738494]
  - [netdrv] tun: Adjust on-stack tun_page initialization. (Jason Wang) [1738494]
  - [netdrv] tuntap: free XDP dropped packets in a batch (Jason Wang) [1738494]
  - [vhost] vhost_net: mitigate page reference counting during page frag refill (Jason Wang) [1738494]
  - [vhost] net: vhost: remove bad code line (Jason Wang) [1738494]
  - [vhost] net: vhost: add rx busy polling in tx path (Jason Wang) [1738494]
  - [vhost] net: vhost: factor out busy polling logic to vhost_net_busy_poll() (Jason Wang) [1738494]
  - [vhost] net: vhost: replace magic number of lock annotation (Jason Wang) [1738494]
  - [vhost] net: vhost: lock the vqs one by one (Jason Wang) [1738494]
  - [vhost] vhost_net: add a missing error return (Jason Wang) [1738494]
  - [netdrv] net: tun: remove useless codes of tun_automq_select_queue (Jason Wang) [1738494]
  - [vhost] vhost_net: batch submitting XDP buffers to underlayer sockets (Jason Wang) [1738494]
  - [netdrv] tap: accept an array of XDP buffs through sendmsg() (Jason Wang) [1738494]
  - [netdrv] tuntap: accept an array of XDP buffs through sendmsg() (Jason Wang) [1738494]
  - [netdrv] tun: switch to new type of msg_control (Jason Wang) [1738494]
  - [netdrv] tuntap: move XDP flushing out of tun_do_xdp() (Jason Wang) [1738494]
  - [netdrv] tuntap: split out XDP logic (Jason Wang) [1738494]
  - [netdrv] tuntap: tweak on the path of skb XDP case in tun_build_skb() (Jason Wang) [1738494]
  - [netdrv] tuntap: simplify error handling in tun_build_skb() (Jason Wang) [1738494]
  - [netdrv] tuntap: enable bh early during processing XDP (Jason Wang) [1738494]
  - [netdrv] tuntap: switch to use XDP_PACKET_HEADROOM (Jason Wang) [1738494]
  - [netdrv] net: sock: introduce SOCK_XDP (Jason Wang) [1738494]
  - [vhost] vhost: correctly check the iova range when waking virtqueue (Jason Wang) [1738494]
  - [vhost] vhost: switch to use new message format (Jason Wang) [1738494]
  - [vhost] vhost_net: batch update used ring for datacopy TX (Jason Wang) [1738494]
  - [vhost] vhost_net: rename VHOST_RX_BATCH to VHOST_NET_BATCH (Jason Wang) [1738494]
  - [vhost] vhost_net: rename vhost_rx_signal_used() to vhost_net_signal_used() (Jason Wang) [1738494]
  - [vhost] vhost_net: split out datacopy logic (Jason Wang) [1738494]
  - [vhost] vhost_net: introduce tx_can_batch() (Jason Wang) [1738494]
  - [vhost] vhost_net: introduce get_tx_bufs() (Jason Wang) [1738494]
  - [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1738494]
  - [vhost] vhost_net: introduce helper to initialize tx iov iter (Jason Wang) [1738494]
  - [vhost] vhost_net: drop unnecessary parameter (Jason Wang) [1738494]
  - [vhost] vhost_net: Avoid rx vring kicks during busyloop (Jason Wang) [1738494]
  - [vhost] vhost_net: Avoid rx queue wake-ups during busypoll (Jason Wang) [1738494]
  - [vhost] vhost_net: Avoid tx vring kicks during busyloop (Jason Wang) [1738494]
  - [vhost] vhost_net: Rename local variables in vhost_net_rx_peek_head_len (Jason Wang) [1738494]
  - [mm] x86/mm/fault: Allow stack access below rsp (Waiman Long) [1739341]
  - [mm] x86/mm: Clarify hardware vs. software "error_code" (Waiman Long) [1739341]
  - [net] libceph: handle an empty authorize reply (Ilya Dryomov) [1720582]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-139.el8]
changelog:
  - [char] ipmi: move message error checking to avoid deadlock (Tony Camuso) [1731388 1718699]
  - [crypto] crypto: testmgr - mark crc32 checksum as FIPS allowed (Neil Horman) [1738887]
  - [include] dma-mapping: use dma_get_mask in dma_addressing_limited (Don Dutile) [1738631]
  - [kernel] dma-direct: correct the physical addr in dma_direct_sync_sg_for_cpu/device (Don Dutile) [1738631]
  - [kernel] dma-direct: only limit the mapping size if swiotlb could be used (Don Dutile) [1738631]
  - [include] dma-mapping: add a dma_addressing_limited helper (Don Dutile) [1738631]
  - [kernel] dma-direct: Force unencrypted DMA under SME for certain DMA masks (Don Dutile) [1738631]
  - [lib] lib/genalloc: introduce chunk owners (Don Dutile) [1738631]
  - [lib] lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations (Don Dutile) [1738631]
  - [lib] lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk (Don Dutile) [1738631]
  - [include] dma-mapping: remove dma_max_pfn (Don Dutile) [1738631]
  - [mmc] mmc: core: let the dma map ops handle bouncing (Don Dutile) [1738631]
  - [mmc] mmc: core: align max segment size with logical block size (Don Dutile) [1738631]
  - [kernel] swiotlb: no need to check return value of debugfs_create functions (Don Dutile) [1738631]
  - [xen] swiotlb: fix phys_addr_t overflow warning (Don Dutile) [1738631]
  - [kernel] swiotlb: Return consistent SWIOTLB segments/nr_tbl (Don Dutile) [1738631]
  - [kernel] swiotlb: Group identical cleanup in swiotlb_cleanup() (Don Dutile) [1738631]
  - [kernel] swiotlb: save io_tlb_used to local variable before leaving critical section (Don Dutile) [1738631]
  - [kernel] swiotlb: dump used and total slots when swiotlb buffer is full (Don Dutile) [1738631]
  - [kernel] swiotlb: add checks for the return value of memblock_alloc*() (Don Dutile) [1738631]
  - [kernel] swiotlb: add debugfs to track swiotlb buffer usage (Don Dutile) [1738631]
  - [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
  - [kernel] dma-direct: handle DMA_ATTR_NO_KERNEL_MAPPING in common code (Don Dutile) [1738631]
  - [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING for remapped allocations (Don Dutile) [1738631]
  - [kernel] dma-mapping: remove a pointless memset in dma_atomic_pool_init (Don Dutile) [1738631]
  - [kernel] dma-mapping: fix lack of DMA address assignment in generic remap allocator (Don Dutile) [1738631]
  - [kernel] dma-remap: support DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
  - [kernel] dma-mapping: support highmem in the generic remap allocator (Don Dutile) [1738631]
  - [kernel] dma-direct: handle DMA_ATTR_NON_CONSISTENT in common code (Don Dutile) [1738631]
  - [kernel] dma-mapping: add a dma_alloc_need_uncached helper (Don Dutile) [1738631]
  - [kernel] dma-mapping: truncate dma masks to what dma_addr_t can hold (Don Dutile) [1738631]
  - [kernel] dma-remap: Avoid de-referencing NULL atomic_pool (Don Dutile) [1738631]
  - [include] dma-buf: add DMA_BUF_SET_NAME ioctls (Don Dutile) [1738631]
  - [include] dma-buf: give each buffer a full-fledged inode (Don Dutile) [1738631]
  - [fs] new wrapper: alloc_file_pseudo() (Don Dutile) [1738631]
  - [kernel] dma-direct: provide generic support for uncached kernel segments (Don Dutile) [1738631]
  - [include] dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc, free}_contiguous() (Don Dutile) [1738631]
  - [kernel] dma-contiguous: use fallback alloc_pages for single pages (Don Dutile) [1738631]
  - [kernel] dma-contiguous: add dma_{alloc,free}_contiguous() helpers (Don Dutile) [1738631]
  - [iommu] iommu/dma: Fix condition check in iommu_dma_unmap_sg (Don Dutile) [1738631]
  - [iommu] iommu/dma: move the arm64 wrappers to common code (Don Dutile) [1738631]
  - [iommu] iommu/dma-iommu.c: convert to use vm_map_pages() (Don Dutile) [1738631]
  - [mm] mm: introduce new vm_map_pages() and vm_map_pages_zero() API (Don Dutile) [1738631]
  - [mm] arm64/iommu: handle non-remapped addresses in ->mmap and ->get_sgtable (Don Dutile) [1738631]
  - [arm64] arm64/mm: wire up CONFIG_ARCH_HAS_SET_DIRECT_MAP (Don Dutile) [1738631]
  - [kernel] mm/hibernation: Make hibernation handle unmapped pages (Don Dutile) [1738631]
  - [mm] page_poison: play nicely with KASAN (Don Dutile) [1738631]
  - [mm] mm/vmalloc: Avoid rare case of flushing TLB with weird arguments (Don Dutile) [1738631]
  - [mm] mm/vmalloc: Fix calculation of direct map addr range (Don Dutile) [1738631]
  - [mm] mm/vmalloc: Add flag for freeing of special permsissions (Don Dutile) [1738631]
  - [x86] x86/mm/cpa: Add set_direct_map_*() functions (Don Dutile) [1738631]
  - [arm64] dma-mapping: add a kconfig symbol for arch_setup_dma_ops availability (Don Dutile) [1738631]
  - [iommu] iommu/dma: Remove the flush_page callback (Don Dutile) [1738631]
  - [include] iommu/dma: Cleanup dma-iommu.h (Don Dutile) [1738631]
  - [dma] dmaengine: Add matching device node validation in __dma_request_channel() (Don Dutile) [1738631]
  - [dma] dmaengine: dma_request_chan_by_mask() to handle deferred probing (Don Dutile) [1738631]
  - [include] dma-buf: start caching of sg_table objects v2 (Don Dutile) [1738631]
  - [kernel] dma-mapping: add a Kconfig symbol to indicate arch_dma_prep_coherent presence (Don Dutile) [1738631]
  - [iommu] iommu/dma-iommu: Remove iommu_dma_map_msi_msg() (Don Dutile) [1738631]
  - [irqchip] irqchip/ls-scfg-msi: Don't map the MSI page in ls_scfg_msi_compose_msg() (Don Dutile) [1738631]
  - [irqchip] irqchip/gic-v3-mbi: Don't map the MSI page in mbi_compose_m{b, s}i_msg() (Don Dutile) [1738631]
  - [irqchip] irqchip/gicv2m: Don't map the MSI page in gicv2m_compose_msi_msg() (Don Dutile) [1738631]
  - [irqchip] irqchip/gic-v3-its: Don't map the MSI page in its_irq_compose_msi_msg() (Don Dutile) [1738631]
  - [irqchip] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (Don Dutile) [1738631]
  - [iommu] iommu/dma-iommu: Split iommu_dma_map_msi_msg() in two parts (Don Dutile) [1738631]
  - [iommu] iommu/dma: Remove unused variable (Don Dutile) [1738631]
  - [iommu] iommu/dma: Use NUMA aware memory allocations in __iommu_dma_alloc_pages() (Don Dutile) [1738631]
  - [kernel] genirq/msi: Add a new field in msi_desc to store an IOMMU cookie (Don Dutile) [1738631]
  - [pci] PCI/MSI: Remove unused mask_msi_irq() and unmask_msi_irq() (Don Dutile) [1738631]
  - [include] PCI/MSI: Remove unused __write_msi_msg() and write_msi_msg() (Don Dutile) [1738631]
  - [include] genirq/msi: Clean up usage of __u8/__u16 types (Don Dutile) [1738631]
  - [base] platform-msi: Free descriptors in platform_msi_domain_free() (Don Dutile) [1738631]
  - [base] genirq/msi: Allow creation of a tree-based irqdomain for platform-msi (Don Dutile) [1738631]
  - [kernel] dma-debug: only skip one stackframe entry (Don Dutile) [1738631]
  - [dma] dmaengine: idma64: Move driver name to the header (Don Dutile) [1738631]
  - [kernel] dma-mapping: remove an unnecessary NULL check (Don Dutile) [1738631]
  - [include] dma-buf: Update [un]map documentation to match the other functions (Don Dutile) [1738631]
  - [include] dma-buf: Remove leftover [un]map_atomic comments (Don Dutile) [1738631]
  - [x86] x86/dma: Remove the x86_dma_fallback_dev hack (Don Dutile) [1738631]
  - [kernel] dma-mapping: remove leftover NULL device support (Don Dutile) [1738631]
  - [kernel] dma: select GENERIC_ALLOCATOR for DMA_REMAP (Don Dutile) [1738631]
  - [crypto] crypto: ccp - Ignore unconfigured CCP device on suspend/resume (Gary Hook) [1743999]
  - [md] dm snapshot: fix oversights in optional discard support (Mike Snitzer) [1744291]
  - [md] dm snapshot: add optional discard support features (Mike Snitzer) [1744291]
  - [md] dm snapshot: Use fine-grained locking scheme (Mike Snitzer) [1744291]
  - [md] dm snapshot: Make exception tables scalable (Mike Snitzer) [1744291]
  - [md] dm snapshot: Replace mutex with rw semaphore (Mike Snitzer) [1744291]
  - [md] dm snapshot: Don't sleep holding the snapshot lock (Mike Snitzer) [1744291]
  - [include] list_bl: Add hlist_bl_add_before/behind helpers (Mike Snitzer) [1744291]
  - [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1741643]
  - [firmware] firmware/efi: Add NULL pointer checks in efivars API functions (Jarod Wilson) [1741949]
  - [fs] ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls (Miklos Szeredi) [1724518]
  - [include] mm: page_cache_add_speculative(): refactor out some code duplication (Michael Petlan) [1738331]
  - [netdrv] ibmvnic: Unmap DMA address of TX descriptor buffers after use (Steve Best) [1743155]
  - [fs] NFSv4.1 don't free interrupted slot on open (Steve Dickson) [1708345]
  - [fs] NFSv4.1: Avoid false retries when RPC calls are interrupted (Steve Dickson) [1708345]
  - [net] ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (Stefano Brivio) [1743203]
  - [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1719418]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-140.el8]
changelog:
  - [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
  - [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
  - [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha->eft (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
  - [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
  - [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
  - [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
  - [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-142.el8]
changelog:
  - [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
  - [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
  - [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
  - [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
  - [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
  - [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
  - [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
  - [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
  - [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-143.el8]
changelog:
  - [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
  - [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
  - [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
  - [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
  - [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-144.el8]
changelog:
  - [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
  - [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
  - [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
  - [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
  - [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
  - [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
  - [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-145.el8]
changelog:
  - [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
  - [vhost] vhost: make sure log_num < in_num (Eugenio Perez) [1750882] {CVE-2019-14835}


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-146.el8]
changelog:
  - [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
  - [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
  - [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.el8]
changelog:
  - [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
  - [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
  - [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
  - [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.2.1.el8_0]
changelog:
  - [netdrv] qed: Fix qed_mcp_halt|resume() (Manish Chopra) [1704184 1697310]
  - [cpufreq] cpufreq: intel_pstate: Also use CPPC nominal_perf for base_frequency (Prarit Bhargava) [1706739 1696131]
  - [acpi] ACPI / CPPC: Fix guaranteed performance handling (Prarit Bhargava) [1706739 1696131]
  - [arm64] arm64: Add workaround for Fujitsu A64FX erratum 010001 (Mark Langsdorf) [1700902 1666951]
  - [s390] vfio_ap: link the vfio_ap devices to the vfio_ap bus subsystem (Cornelia Huck) [1700290 1686044]
  - [netdrv] net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames (Alaa Hleihel) [1700289 1651509]
  - [netdrv] net/mlx5e: Force CHECKSUM_UNNECESSARY for short ethernet frames (Alaa Hleihel) [1700289 1651509]
  - [pci] PCI: pciehp: Fix re-enabling the slot marked for safe removal (Myron Stowe) [1700288 1695922]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.3.1.el8_0]
changelog:
  - [mm] mm: enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1708829 1687667] {CVE-2019-9213}
  - [powerpc] powerpc/radix: Fix kernel crash with mremap() (Steve Best) [1708617 1674186]
  - [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1708112 1694456]
  - [powerpc] powerpc/powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1708112 1694456]
  - [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1708112 1694456]
  - [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1708112 1694456]
  - [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1708112 1694456]
  - [powerpc] powerpc/asm: Add a patch_site macro & helpers for patching instructions (Gustavo Duarte) [1708112 1694456]
  - [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1708112 1694456]
  - [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1708112 1694456]
  - [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1708112 1694456]
  - [of] of: __of_detach_node() - remove node from phandle cache (Steve Best) [1708102 1669198]
  - [of] of: of_node_get()/of_node_put() nodes held in phandle cache (Steve Best) [1708102 1669198]
  - [fs] debugfs: Fix EPERM regression from kernel lockdown check (Lenny Szubowicz) [1708100 1686755]
  - [block] nvme: lock NS list changes while handling command effects (David Milburn) [1701140 1672759]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.4.1.el8_0]
changelog:
  - [netdrv] ice: Do autoneg based on VSI state (Jonathan Toppins) [1709433 1687903]
  - [arm64] arm64: apply workaround on A64FX v1r0 (Mark Langsdorf) [1700901 1692306]
  - [arm64] arm64/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [s390] s390/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [powerpc] powerpc/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [powerpc] powerpc/64: Disable the speculation barrier from the command line (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add 'mitigations=' support for MDS (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [kernel] cpu/speculation: Add 'mitigations=' cmdline option (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Fix comment (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add SMT warning message (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [documentation] Documentation: Add MDS vulnerability documentation (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [documentation] Documentation: Move L1TF to separate directory (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add sysfs reporting for MDS (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation: Consolidate CPU whitelists (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/msr-index: Cleanup bit defines (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/speculation: Cast ~SPEC_CTRL_STIBP atomic value to int (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [include] locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a new <linux/bits.h> file (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [tools] tools include: Adopt linux/bits.h (Josh Poimboeuf) [1698809 1698896 1699001 1705836 1690338 1690360 1690351 1705312] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.5.1.el8_0]
changelog:
  - [kernel] sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup (Joel Savitz) [1715345 1695651]
  - [kernel] sched/fair: Fix O(nr_cgroups) in the load balancing path (Phil Auld) [1715343 1685636] {CVE-2018-20784}
  - [kernel] sched/fair: Fix insertion in rq->leaf_cfs_rq_list (Phil Auld) [1715343 1685636] {CVE-2018-20784}
  - [kernel] sched/fair: Add tmp_alone_branch assertion (Phil Auld) [1715343 1685636] {CVE-2018-20784}
  - [kernel] sched/fair: Fix infinite loop in update_blocked_averages() by reverting a9e7f6544b9c (Phil Auld) [1715343 1685636] {CVE-2018-20784}
  - [rpmspec] apply linux-kernel-test.patch when building ("Herton R. Krzesinski") [1715340 1690534]
  - [rpmspec] Fix cross builds (Jiri Olsa) [1715339 1694956]
  - [kernel] sched/fair: Do not re-read ->h_load_next during hierarchical load calculation (Phil Auld) [1715337 1701762]
  - [kvm] KVM: PPC: Book3S HV: Save/restore vrsave register in kvmhv_p9_guest_entry() (Suraj Jitindar Singh) [1714753 1700272]
  - [powerpc] KVM: PPC: Book3S HV: Perserve PSSCR FAKE_SUSPEND bit on guest exit (Suraj Jitindar Singh) [1714751 1689768]
  - [powerpc] powerpc/powernv/ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1714746 1674410]
  - [char] ipmi_si: fix use-after-free of resource->name (Tony Camuso) [1714409 1714410] {CVE-2019-11811}
  - [x86] Update stepping values for coffee lake desktop (David Arcari) [1711048 1704800]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.6.1.el8_0]
changelog:
  - [mm] mm: defer ZONE_DEVICE page initialization to the point where we init pgmap (Waiman Long) [1719635 1666538]
  - [mm] mm: create non-atomic version of SetPageReserved for init use (Waiman Long) [1719635 1666538]
  - [mm] mm: provide kernel parameter to allow disabling page init poisoning (Waiman Long) [1719635 1666538]
  - [mm] mm, slub: restore the original intention of prefetch_freepointer() (Rafael Aquini) [1718237 1714671]
  - [security] selinux: do not report error on connect(AF_UNSPEC) (Ondrej Mosnacek) [1717870 1707828]
  - [security] selinux: Check address length before reading address family (Ondrej Mosnacek) [1717870 1707828]
  - [powerpc] powerpc/tm: Fix stack pointer corruption (Desnes Augusto Nunes do Rosario) [1717869 1707635]
  - [md] dm cache metadata: Fix loading discard bitset (Mike Snitzer) [1717868 1701618]
  - [md] dm mpath: fix missing call of path selector type->end_io (Mike Snitzer) [1717804 1686227]
  - [mm] mm/memory.c: do_fault: avoid usage of stale vm_area_struct ("Herton R. Krzesinski") [1717801 1684734]
  - [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1717800 1679183]
  - [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1717800 1679183]
  - [scsi] scsi: mpt3sas: Fix kernel panic during expander reset (Tomas Henzl) [1717791 1677693]
  - [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1717777 1647723]
  - [drm] drm/bufs: Fix Spectre v1 vulnerability (Rob Clark) [1717382 1663467]
  - [drm] drm/ioctl: Fix Spectre v1 vulnerabilities (Rob Clark) [1717382 1663467]
  - [tools] perf annotate: Fix getting source line failure (Michael Petlan) [1716887 1614435]
  - [iommu] iommu/amd: Set exclusion range correctly (Jerry Snitselaar) [1715336 1702766]
  - [iommu] iommu/amd: Reserve exclusion range in iova-domain (Jerry Snitselaar) [1717344 1694835]
  - [kvm] KVM: PPC: Book3S: Add count cache flush parameters to kvmppc_get_cpu_char() (Vitaly Kuznetsov) [1715018 1694456]
  - [s390] kvm: s390: Fix potential spectre warnings (Thomas Huth) [1714754 1702344]
  - [drm] drm/i915/gvt: Fix mmap range check (Alex Williamson) [1713572 1713573] {CVE-2019-11085}
  - [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712862 1712863] {CVE-2019-11810}


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.7.1.el8_0]
changelog:
  - [x86] Update stepping values for Whiskey Lake U/Y (David Arcari) [1722372 1704801]
  - [x86] x86/perf/amd: Resolve NMI latency issues for active PMCs (David Arcari) [1722367 1640238]
  - [x86] x86/perf/amd: Resolve race condition when disabling PMC (David Arcari) [1722367 1640238]
  - [edac] EDAC/amd64: Set maximum channel layer size depending on family (Gary Hook) [1722365 1690984]
  - [edac] EDAC/amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1722365 1690984]
  - [edac] EDAC/amd64: Recognize x16 symbol size (Gary Hook) [1722365 1690984]
  - [edac] EDAC/amd64: Support more than two Unified Memory Controllers (Gary Hook) [1722365 1690984]
  - [edac] EDAC/amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1722365 1690984]
  - [edac] EDAC, amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1722365 1690984]
  - [edac] EDAC/amd64: Add Family 17h Model 30h PCI IDs (Aristeu Rozanski) [1722365 1696603]
  - [x86] mark AMD Rome processors supported (David Arcari) [1721972 1520002]
  - [x86] x86/mce: Handle varying MCA bank counts (David Arcari) [1721233 1668779]
  - [iommu] iommu/vt-d: Disable ATS support on untrusted devices (Jerry Snitselaar) [1700376 1692246]
  - [documentation] thunderbolt: Export IOMMU based DMA protection support to userspace (Jerry Snitselaar) [1700376 1692246]
  - [iommu] iommu/vt-d: Do not enable ATS for untrusted devices (Jerry Snitselaar) [1700376 1692246]
  - [iommu] iommu/vt-d: Force IOMMU on for platform opt in hint (Jerry Snitselaar) [1700376 1692246]
  - [pci] PCI / ACPI: Identify untrusted PCI devices (Myron Stowe) [1700376 1704979]
  - [acpi] ACPI / property: Allow multiple property compatible _DSD entries (Myron Stowe) [1700376 1537397]
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719922 1719923] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719922 1719923] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719857 1719858] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719602 1719603] {CVE-2019-11477}


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.7.2.el8_0]
changelog:
  - [x86] x86/entry/64: Use JMP instead of JMPQ (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
  - [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
  - [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
  - [x86] x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
  - [x86] x86/cpufeatures: Carve out CQM features retrieval (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
  - [kernel] ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (Aristeu Rozanski) [1730958 1730959] {CVE-2019-13272}


author: Kamil Dudka <kdudka@redhat.com> - 5.33-11
changelog:
  - improve documentation of --apple in file(1) man page (#1677442)
  - improve parsing of ppc core files (#1658171)


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-11.el8_0.8
changelog:
  - Constrain number of cycles in rescale filter
  - Compute correct coverage values for box filter
  - Resolves: #1717866


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-11.el8_0.11
changelog:
  - Check whether input is RGB in PSOutputDev::checkPageSlice()
  - (also when using "-optimizecolorspace" flag)
  - Resolves: #1741145


author: Andreas Schneider <asn@redhat.com> - 4.10.4-100
changelog:
  - resolves: #1760824 - Avoid overlinking with librt and libpthread
  - resolves: #1759236 - Fix forest trusts enumeration
  - resolves: #1761719 - Fix CUPS username/password authentication with smbspool


author: Marian Csontos <mcsontos@redhat.com> - 2.03.05-2
changelog:
  - Fix scanning of PVs with size not matching device.
  - Allow --stripe/--stripesize in mirror conversions.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.05-3
changelog:
  - Remove unsupported OPTIONS+="event_timeout" udev rule from 11-dm-lvm.rules.
  - Prevent creating VGs with PVs with different logical block sizes.
  - Fix metadata writes from corrupting with large physical block size.


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.20.0-0.1
changelog:
  - Update to a 1.20 snapshot
  - core: fix a possible crash on device removal (rh #1659790)
  - core: fix automatic activation of software deviecs (rh #1667874)
  - team: use strict JSON parsing for configuration (rh #1691619)
  - team: don't kill teamd for external devices (rh #1693142)
  - logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.20.0-0.2
changelog:
  - Update to a newer 1.20 snapshot
  - ovs: support dpdk interfaces (rh #1612503)
  - libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
  - ipv6: add 'disabled' method (rh #1643841)
  - device: fix matching parent device by connection UUID (rh #1716438)
  - cli: fix default value for team.runner-min-ports (rh #1716987)
  - initrd: re-enable the generator (rh #1626348)


author: Thomas Haller <thaller@redhat.com> - 1:1.20.0-0.4
changelog:
  - Update to 1.20-rc1 snapshot
  - settings: support read-only directory for keyfile profiles (rh #1674545)
  - settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
  - settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
  - openvswitch: don't release slaves on quit (rh #1733709)
  - dhcp: expose private options for internal DHCP plugin (rh #1663253)
  - device: fix route table setting when re-activating device (rh #1719318)
  - man: clarify example in nm-openvswitch manual page (rh #1638038)
  - man: various improvements of manual pages (rh #1612554)


author: Thomas Haller <thaller@redhat.com> - 1:1.20.0-1
changelog:
  - Update to 1.20.0 release
  - fix license comments for RPM package (rh #1723395)
  - dhcp: disable experimental nettools DHCP plugin


author: Thomas Haller <thaller@redhat.com> - 1:1.20.0-3
changelog:
  - wifi: detect FT support per device to fix issues with driver support (rh #1743730)
  - doc: fix default values in pre-generated documentation (rh #1737945)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.20.0-5
changelog:
  - ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
  - device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)


author: Stephen Gallagher <sgallagh@redhat.com> - 2.5.0-2
changelog:
  - Fix memory corruption error using Module.search_rpms() from python
  - Speed up valgrind tests
  - Resolves: rhbz#1714766


author: Mark Wielaard <mjw@fedoraproject.org> - 0.176-1
changelog:
  - New upstream release.
    - backends: riscv improved core file and return value location support.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-80.el8
changelog:
  - kvm-qxl-check-release-info-object.patch [bz#1712705]
  - kvm-iotests-Make-182-do-without-device_add.patch [bz#1707598]
  - Resolves: bz#1707598
    (qemu-iotest 182 fails without device hotplugging support)
  - Resolves: bz#1712705
    (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-81.el8
changelog:
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1714792]
  - kvm-virtio-gpu-pass-down-VirtIOGPU-pointer-to-a-bunch-of.patch [bz#1531543]
  - kvm-virtio-gpu-add-iommu-support.patch [bz#1531543]
  - kvm-virtio-gpu-fix-unmap-in-error-path.patch [bz#1531543]
  - Resolves: bz#1531543
    ([RFE] add iommu support to virtio-gpu)
  - Resolves: bz#1714792
    ([Intel 8.1 FEAT] MDS_NO exposure to guest)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-82.el8
changelog:
  - kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1629906]
  - kvm-i386-Update-stepping-of-Cascadelake-Server.patch [bz#1629906]
  - kvm-target-i386-Disable-MPX-support-on-named-CPU-models.patch [bz#1629906]
  - kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-named-CPU-NEW.patch [bz#1629906]
  - kvm-i386-Disable-OSPKE-on-CPU-model-definitions-NEW.patch [bz#1629906]
  - kvm-block-ssh-Convert-from-DPRINTF-macro-to-trace-events.patch [bz#1513367]
  - kvm-block-ssh-Do-not-report-read-write-flush-errors-to-t.patch [bz#1513367]
  - kvm-qemu-iotests-Fix-paths-for-NFS.patch [bz#1513367]
  - kvm-qemu-iotests-Filter-NFS-paths.patch [bz#1513367]
  - kvm-iotests-Filter-SSH-paths.patch [bz#1513367]
  - kvm-block-ssh-Implement-.bdrv_refresh_filename.patch [bz#1513367]
  - kvm-iotests-Use-Python-byte-strings-where-appropriate.patch [bz#1513367]
  - kvm-iotests-Unify-log-outputs-between-Python-2-and-3.patch [bz#1513367]
  - kvm-ssh-switch-from-libssh2-to-libssh.patch [bz#1513367]
  - kvm-redhat-switch-from-libssh2-to-libssh.patch [bz#1513367]
  - kvm-block-gluster-limit-the-transfer-size-to-512-MiB.patch [bz#1728657]
  - kvm-s390-cpumodel-fix-description-for-the-new-vector-fac.patch [bz#1729975]
  - kvm-s390x-cpumodel-remove-esort-from-the-default-model.patch [bz#1729975]
  - kvm-s390x-cpumodel-also-change-name-of-vxbeh.patch [bz#1729975]
  - kvm-s390x-cpumodel-change-internal-name-of-vxpdeh-to-mat.patch [bz#1729975]
  - kvm-target-i386-sev-Do-not-unpin-ram-device-memory-regio.patch [bz#1728958]
  - kvm-i386-Save-EFER-for-32-bit-targets.patch [bz#1689269]
  - kvm-target-i386-rename-HF_SVMI_MASK-to-HF_GUEST_MASK.patch [bz#1689269]
  - kvm-target-i386-kvm-add-VMX-migration-blocker.patch [bz#1689269]
  - kvm-target-i386-kvm-just-return-after-migrate_add_blocke.patch [bz#1689269]
  - kvm-target-i386-kvm-Delete-VMX-migration-blocker-on-vCPU.patch [bz#1689269]
  - kvm-Introduce-kvm_arch_destroy_vcpu.patch [bz#1689269]
  - kvm-target-i386-kvm-Use-symbolic-constant-for-DB-BP-exce.patch [bz#1689269]
  - kvm-target-i386-kvm-Re-inject-DB-to-guest-with-updated-D.patch [bz#1689269]
  - kvm-target-i386-kvm-Block-migration-for-vCPUs-exposed-wi.patch [bz#1689269]
  - kvm-target-i386-kvm-do-not-initialize-padding-fields.patch [bz#1689269]
  - kvm-linux-headers-synchronize-generic-and-x86-KVM-header.patch [bz#1689269]
  - kvm-vmstate-Add-support-for-kernel-integer-types.patch [bz#1689269]
  - kvm-target-i386-kvm-Add-support-for-save-and-restore-nes.patch [bz#1689269]
  - kvm-target-i386-kvm-Add-support-for-KVM_CAP_EXCEPTION_PA.patch [bz#1689269]
  - kvm-target-i386-kvm-Add-nested-migration-blocker-only-wh.patch [bz#1689269]
  - kvm-target-i386-kvm-Demand-nested-migration-kernel-capab.patch [bz#1689269]
  - kvm-target-i386-skip-KVM_GET-SET_NESTED_STATE-if-VMX-dis.patch [bz#1689269]
  - kvm-i386-kvm-Do-not-sync-nested-state-during-runtime.patch [bz#1689269]
  - Resolves: bz#1513367
    (qemu with libssh)
  - Resolves: bz#1629906
    ([Intel 8.1 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
  - Resolves: bz#1689269
    (Nested KVM: support for migration of nested hypervisors - Slow Train)
  - Resolves: bz#1728657
    ('qemu-io write' to a raw image over libgfapi fails)
  - Resolves: bz#1728958
    (Hot unplug vfio-pci NIC devices from sev guest will cause qemu-kvm: sev_ram_block_removed: failed to unregister region)
  - Resolves: bz#1729975
    (RHEL 8.1 Pre-Beta - Fix for hardware CPU Model)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-83.el8
changelog:
  - kvm-hw-block-pflash_cfi01-Add-missing-DeviceReset-handle.patch [bz#1707192]
  - kvm-block-file-posix-Unaligned-O_DIRECT-block-status.patch [bz#1678979]
  - kvm-iotests-Test-unaligned-raw-images-with-O_DIRECT.patch [bz#1678979]
  - kvm-nbd-client-Lower-min_block-for-block-status-unaligne.patch [bz#1678979]
  - kvm-nbd-client-Reject-inaccessible-tail-of-inconsistent-.patch [bz#1678979]
  - kvm-nbd-client-Support-qemu-img-convert-from-unaligned-s.patch [bz#1678979]
  - kvm-block-Add-bdrv_get_request_alignment.patch [bz#1678979]
  - kvm-nbd-server-Advertise-actual-minimum-block-size.patch [bz#1678979]
  - kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1727642]
  - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1727642]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1727642]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1727642]
  - kvm-tap-set-vhostfd-passed-from-qemu-cli-to-non-blocking.patch [bz#1732642]
  - kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734751]
  - Resolves: bz#1678979
    (qemu-img convert abort when converting image with unaligned size (qemu-img: block/io.c:2134: bdrv_co_block_status: Assertion `*pnum && (((*pnum) % (align)) == 0) && align > offset - aligned_offset\' failed))
  - Resolves: bz#1707192
    (implement missing reset handler for cfi.pflash01 - slow train)
  - Resolves: bz#1727642
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu())
  - Resolves: bz#1732642
    (enable the virtio-net frontend to work with the vhost-net backend in SEV guests)
  - Resolves: bz#1734751
    (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-8.1.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-84.el8
changelog:
  - kvm-vnc-detect-and-optimize-pageflips.patch [bz#1727033]
  - kvm-block-backend-Make-blk_inc-dec_in_flight-public.patch [bz#1716349]
  - kvm-virtio-blk-Increase-in_flight-for-request-restart-BH.patch [bz#1716349]
  - kvm-block-Fix-AioContext-switch-for-drained-node.patch [bz#1716349]
  - kvm-test-bdrv-drain-AioContext-switch-in-drained-section.patch [bz#1716349]
  - kvm-block-Use-normal-drain-for-bdrv_set_aio_context.patch [bz#1716349]
  - kvm-block-Fix-AioContext-switch-for-bs-drv-NULL.patch [bz#1716347]
  - kvm-iothread-fix-crash-with-invalid-properties.patch [bz#1687541]
  - kvm-iothread-replace-init_done_cond-with-a-semaphore.patch [bz#1687541]
  - kvm-RHEL-disable-hostmem-memfd.patch [bz#1740797]
  - Resolves: bz#1687541
    (qemu aborted when start guest with a big iothreads)
  - Resolves: bz#1716347
    (Qemu Core dump when quit vm that's in status "paused(io-error)" with data plane enabled)
  - Resolves: bz#1716349
    (qemu with iothreads enabled crashes on resume after enospc pause for disk extension)
  - Resolves: bz#1727033
    (vnc server should detect page-flips and avoid sending fullscreen updates then.)
  - Resolves: bz#1740797
    (Disable memfd in QEMU)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-85.el8
changelog:
  - kvm-console-Avoid-segfault-in-screendump.patch [bz#1684383]
  - kvm-usb-hub-clear-suspend-on-detach.patch [bz#1619661]
  - kvm-qemu-img-fix-regression-copying-secrets-during-conve.patch [bz#1727821]
  - Resolves: bz#1619661
    (the attach hub on one hub still exits in device manager after unhotplug)
  - Resolves: bz#1684383
    (qemu crashed when take screenshot for 2nd head of virtio video device if the display not opened by virt-viewer)
  - Resolves: bz#1727821
    (Failed to convert a source image to the qcow2 image encrypted by luks)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-86.el8
changelog:
  - kvm-Do-not-run-iotests-on-brew-build.patch [bz#1742819]
  - kvm-target-ppc-spapr-Add-workaround-option-to-SPAPR_CAP_.patch [bz#1744415]
  - kvm-target-ppc-spapr-Add-SPAPR_CAP_CCF_ASSIST.patch [bz#1744415]
  - kvm-i386-x86_cpu_list_feature_names-function.patch [bz#1747185]
  - kvm-i386-unavailable-features-QOM-property.patch [bz#1747185]
  - kvm-file-posix-Handle-undetectable-alignment.patch [bz#1738839]
  - kvm-iotests-Tweak-221-sizing-for-different-hole-granular.patch [bz#1738839]
  - kvm-iotests-Filter-175-s-allocation-information.patch [bz#1738839]
  - kvm-block-posix-Always-allocate-the-first-block.patch [bz#1738839]
  - kvm-iotests-Test-allocate_first_block-with-O_DIRECT.patch [bz#1738839]
  - Resolves: bz#1738839
    (I/O error when virtio-blk disk is backed by a raw image on 4k disk)
  - Resolves: bz#1742819
    (Remove iotests from qemu-kvm builds [RHEL 8.1.0])
  - Resolves: bz#1744415
    (Backport support for count cache flush Spectre v2 mitigation [slow train])
  - Resolves: bz#1747185
    ("filtered-features" QOM property is not available)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-88.el8
changelog:
  - Revert fix for bz#1749724 - this got delayed to 8.2
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-88.el8_1_0.1
changelog:
  - kvm-s390-PCI-fix-IOMMU-region-init.patch [bz#1764829]
  - Resolves: bz#1764829
    (RHEL8.1 Snapshot3 - Passthrough PCI card goes into error state if used in domain (kvm) [rhel-8.1.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-88.el8_1_0.2
changelog:
  - kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771970]
  - kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771970]
  - Resolves: bz#1771970
    (CVE-2019-11135 virt:rhel/qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-8.1.0.z])


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-7.el8_0.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-11
changelog:
  - Update patch for RH bug #1713619 (test-cal-client-get-revision could fail due to delayed D-Bus property change notification)


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: Pino Toscano <ptoscano@redhat.com> - 1.12.0-5
changelog:
  - Fix completion with special characters in augtool. (RHBZ#1232224)
  - Krb5: improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1798486)
  - Systemd: improve parsing of quoted variables of Environment (RHBZ#1798922)


author: Jan Grulich <jgrulich@redhat.com> - 5.11-1-7
changelog:
  - Move libQt5EglFSDeviceIntegration lib out of the -devel subpkg
    Resolves: bz#1692970

  - Fix QImage allocaion failure
    Resolve: bz#1667860

  - Fix double free in QXmlStreamReader
    Resolve: bz#1667858

  - Fix segmentation fault on malformed BMP file
    Resolve: bz#1667859


author: Michal Židek <mzidek@redhat.com> - 2.2.3-14
changelog:
  - Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                             specified up to the seconds


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-16
changelog:
  - Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                             omitted and auth_provider is krb5


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-17
changelog:
  - Resolves: rhbz#1718193 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module
                             does not implement it properly


author: Michal Židek <mzidek@redhat.com> - 2.2.3-18
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                             information


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate
                             (additional patch)


author: Martin Osvald <mosvald@redhat.com> - 9.25-2.3
changelog:
  - Resolves: #1744010 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744014 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744005 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744230 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: Ales Matej <amatej@gmail.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Relicense to LGPLv2+
  - Fix number of bugs mainly with drpm_make and drpm_apply
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Karel Zak <kzak@redhat.com> 2.32.1-10
changelog:
  - fix #1699310 - rpm -V setup fail on /var/log/lastlog
  - fix #1702712 - pam_env bypassed for root user when using su


author: Karel Zak <kzak@redhat.com> 2.32.1-13
changelog:
  - fix #1734553 - blkid_get_dev() leak file descriptor to underlying block device
  - fix #1719069 - findmnt warning "recommended root FS passno is 1" for XFS


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-1
changelog:
  - Update to 1.16.1
  - Remove upstreamed patches
  - Remove dependency on removed package
  - Add sctp and closedcaption plugins
  - The vcdsrc plugin was removed
  - Resolves: rhbz#1756299


author: Steve Dickson <steved@redhat.com> 2.3.3-24
changelog:
  - nfs.man: Fixed small typo in man page (bz 1732877)
  - mount: Report correct error in the fall_back cases (bz 1709963)
  - rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1712202)
  - spec: Remove redundant manpage files (bz 1718738)


author: Steve Dickson <steved@redhat.com> 2.3.3-27
changelog:
  - More coverity scans updates (bz 1746572)
  - nfsd: Adjust nfs.conf setting/parsing of rdma port (bz 1710532)
  - Add plain --rdma option to nfs.conf convertor (bz 1747295)
  - mountstats: Add per-op error counts to iostat command (bz 1719983)
  - gssd: add configure options verbosity to man page (bz 1749642)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.44-3
changelog:
  - Fix sg_turs help invocation in an old mode (#1683343)
  - Fix sg_raw printing error about device not specified on version request (#1627657)


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.4-1
changelog:
  - Update to 4.6.4, move python2-pytest to its own source package
  - Make /usr/bin/pytest and /usr/bin/py.test Python 3


author: Brian C. Lane <bcl@redhat.com> - 3.2-37
changelog:
  - Add CI tests
    Resolves: rhbz#1653912
  - t6000-dm: Stop using private lvm root
    Related: rhbz#1653912


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-147.0.2.el8_1]
changelog:
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [zstream] switch to zstream (Frantisek Hrbata)


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-147.0.3.el8_1]
changelog:
  - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-12.el8]
changelog:
  - devlink: Add param command support (Andrea Claudi) [1663199]
  - rdma: Fix representation of PortInfo CapabilityMask (Andrea Claudi) [1664694]
  - uapi: update ib_verbs (Andrea Claudi) [1664694]
  - tc: flower: Add support for QinQ (Andrea Claudi) [1615928]
  - ip rule: Add ipproto and port range to filter list (Andrea Claudi) [1678111]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-13.el8]
changelog:
  - ip-xfrm: Respect family in deleteall and list commands (Andrea Claudi) [1656717]
  - Update kernel headers (Andrea Claudi) [1716361]
  - uapi: update bpf header (Andrea Claudi) [1716361]
  - uapi: update headers to 4.20-rc1 (Andrea Claudi) [1716361]
  - bpf: add btf func and func_proto kind support (Andrea Claudi) [1716361]
  - lib/bpf: fix build warning if no elf (Andrea Claudi) [1716361]
  - bpf: initialise map symbol before retrieving and comparing its type (Andrea Claudi) [1716361]
  - Include bsd/string.h only in include/utils.h (Andrea Claudi) [1716361]
  - Use libbsd for strlcpy if available (Andrea Claudi) [1716361]
  - bpf: check map symbol type properly with newer llvm compiler (Andrea Claudi) [1716361]
  - bpf: implement btf handling and map annotation (Andrea Claudi) [1716361]
  - bpf: implement bpf to bpf calls support (Andrea Claudi) [1716361]
  - bpf: remove strict dependency on af_alg (Andrea Claudi) [1716361]
  - bpf: move bpf_elf_map fixup notification under verbose (Andrea Claudi) [1716361]
  - iplink: add support for reporting multiple XDP programs (Andrea Claudi) [1716361]
  - rdma: Document IB device renaming option (Andrea Claudi) [1663228]
  - rdma: Add an option to rename IB device interface (Andrea Claudi) [1663228]
  - rdma: Introduce command execution helper with required device name (Andrea Claudi) [1663228]
  - rdma: Update kernel include file to support IB device renaming (Andrea Claudi) [1663228]
  - libnetlink: Convert GETADDR dumps to use rtnl_addrdump_req (Andrea Claudi) [1716772]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-15.el8]
changelog:
  - netns: make netns_{save,restore} static (Andrea Claudi) [1719759]
  - ip vrf: use hook to change VRF in the child (Andrea Claudi) [1719759]
  - netns: switch netns in the child when executing commands (Andrea Claudi) [1719759]
  - m_mirred: don't bail if the control action is missing (Andrea Claudi) [1711760]
  - tc: introduce support for chain templates (Andrea Claudi) [1710291]
  - ip: reset netns after each command in batch mode (Andrea Claudi) [1671016]


author: Wim Taymans <wtaymans@redhat.com> - 2.0.10-2
changelog:
  - Fix CVE-2019-13616 SDL: heap-based buffer overflow in SDL blit
    functions in video/SDL_blit*.c
  - Resolves: rhbz#1756279


author: Andreas Schneider <asn@redhat.com> - 4.11.2-4
changelog:
  - related: #1754409 - Add patch to avoid overlinking with libnsl and libsocket
  - related: #1754409 - Fix permissions for pidl
  - related: #1754409 - Fix logrotate script
  - related: #1754409 - Add missing README files


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.11.2-10
changelog:
  - resolves: #1790353 - Fix access check in DsRGetForestTrustInformation
  - resolves: #1791209 - Fix CVE-2019-14907


author: Andreas Schneider <asn@redhat.com> - 4.11.2-12
changelog:
  - related: #1781232 - Improve debug output of smbclient
  - resolves: #1794461 - Do not return bogus inode numbers in
                         cli_qpathinfo2()/cli_qpathinfo3() for SMB1
  - resolves: #1794442 - Fix segfault in smbd_do_qfilepathinfo()


author: Michal Židek <mzidek@redhat.com> - 2.0.0-36
changelog:
  - Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                             suggests using * for backend sss


author: Michal Židek <mzidek@redhat.com> - 2.0.0-38
changelog:
  - Resolves: rhbz#1578014 - sssd does not work under non-root user
  - Note: Actually the patches were in the 2.0.0-37, this one just adds this
          changelog because it was missing.


author: Michal Židek <mzidek@redhat.com> - 2.0.0-39
changelog:
  - Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                             1.x, this can result in time outs


author: Michal Židek <mzidek@redhat.com> - 2.0.0-40
changelog:
  -Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                            UnknownProperty: Unknown property


author: Michal Židek <mzidek@redhat.com> - 2.0.0-41
changelog:
  -Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                            subdomain service name being used


author: Michal Židek <mzidek@redhat.com> - 2.0.0-42
changelog:
  - Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                             of gen_new to avoid a subsequent switch call
                             failure


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-43
changelog:
  - Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                             card maps to multiple users


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.1
changelog:
  - Resolves: rhbz#1691750 - pam_sss failing for external users not configured
                             via sssd


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.2
changelog:
  - Resolves: rhbz#1696596 - AD user not found after establishing trust and
                             restarting sssd [ZStream Clone]


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.3
changelog:
  - Resolves: rhbz#1701135 - Include libsss_nss_idmap-devel in the Builder
                             repository


author: Marek Polacek <polacek@redhat.com> 8.3.1-5
changelog:
  - update from Fedora gcc-8.3.1-5 (#1747157)
  - use unspec_volatile for darn (PR target/91481, #1760205, CVE-2019-15847)


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-2
changelog:
  - fix cmakes location
  - remove -DENABLE_PKG_CONFIG=OFF (it was neither defined nor used)
  - remove confusing comment
  - WITH_GDAL=OFF (gdal dependency has been already removed)
    Related: #1694647


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-5
changelog:
  - Move libopencv_{calib3d,cvv,hfs}.so.* to their proper packages
  - Fix issues found by rpmdiff
    Related: #1694647


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.10-1.2
changelog:
  host: Fix defrag buffer reclaim logic that could cause delivery
          of corrupted data
    Resolves: rhbz#1763714
    PMTUd: Fix MTU calculation when using crypto
    Disable fun_pmtud_crypto_test as it can take several hours to run
    Resolves: rhbz#1763715


author: Mark Wielaard <mjw@redhat.com> - 0.178-2
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libcpu: Add RISC-V disassembler.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.
  - Fix libdebuginfod file list for debuginfo-client[-devel].


author: Mark Wielaard <mjw@redhat.com> - 0.178-4
changelog:
  - Add elfutils-debuginfod-client Provides and Requires with depsuffix
    to get multilib dependencies correct. Add %{version}-%{release} to
    keep subpackages in sync.


author: Thomas Haller <thaller@redhat.com> - 1:1.22.0-0.2
changelog:
  - Update to 1.22-rc1 (1.21.90)
  - large internal rework of libnm's NMClient
  - dhcp: switch implementation of "internal" DHCP to nettools' n-dhcp4
  - add support for carrier state of devices on D-Bus/libnm (rh #1722024)
  - cloud-setup: add initial and experimental tool for configuring in cloud (rh #1642461)
  - dhcp: support configuring FQDN hostname flags (rh #1649368)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.2-1
changelog:
  - Update to 1.22.2
  - core,libnm: expose capability for OVS support (rh #1785147)
  - dhcp: various bugfixes for nettools n-dhcp4 plugin


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.22.4-1
changelog:
  - Update to 1.22.4
  - dhcp: fix behavior of internal DHCP client when the server sends a NAK (rh #1787219)


author: Antonio Cardace <acardace@redhat.com> - 1:1.22.6-1
changelog:
  - Update to 1.22.6
  - nm-device: add new pending action to keep the device busy when in between states (rh #1759956)
  - cloud-setup: avoid unsupported settings in systemd service unit (rh #1791758)
  - do not create virtual device if master is not present (rh #1795919)
  - allow IPv6 RA timeout to be set to a value higher than 120 seconds (rh #1795957)
  - fix behaviour when 'ipv4.dhcp-timeout' option is set to 'infinity' (rh #1791378)


author: Antonio Cardace <acardace@redhat.com> - 1:1.22.8-1
changelog:
  - Update to 1.22.8
  - Added configuration option to customize IPv6 RA timeout (rh #1801158)
  - Removed length limitation for OVS Bridge, Patches and Interfaces (only Patch types) names (rh #1788432)
  - Reworked asynchronous deactivation of OVS interfaces (rh #1787989, rh #1782701)
  - Fixed failure when creating team interfaces (rh #1798947)
  - ifcfg-rh: fix clearing ovs slave type from ifcfg-rh file (rh #1804167)
  - Fixed bug causing virtual devices to not be available after AddConnection()/Update() (rh #1804350)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.22.8-3
changelog:
  - dhcp: keep trying after a send failure (rh #1806516)
  - ovs: fail port enslavement when the bridge is not found (rh #1797696)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.8-4
changelog:
  - core: fix leaking device state files in /run (rh #1810153)
  - dhcp: fix crash in nettools client when leaking GSource (rh #1810188)


author: Peter Jones <pjones@redhat.com> - 13-1
changelog:
  - Make a new shim-unsigned-x64 package like the shim-unsigned-aarch64 one.
  - This will (eventually) supersede what's in the "shim" package so we can
    make "shim" hold the signed one, which will confuse fewer people.


author: Javier Martinez Canillas <javierm@redhat.com> - 15-3
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715878
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717064


author: Peter Jones <pjones@redhat.com> - 15-4
changelog:
  - Rebuild for bug fixes and new signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-5
changelog:
  - Once more with the MokListRT config table patch added.
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Implement Lenny's workaround
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.8-5
changelog:
  - dhcp: fix handling IO error in nettools DHCPv4 client (rh #1843357)
  - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1843360, CVE-2020-10754)


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-3
changelog:
  - Fix loading of sets with dependencies on other sets (RHBZ#1647096), and
    hardcode 6.38-1.el7 for ipset-service upgrade and downgrade triggers, so that
    we don't run into issues with z-stream updates


author: Stefano Brivio <sbrivio@redhat.com> - 7.1-1
changelog:
  - Rebase to 7.1 (RHBZ#1649090):
    - Add compatibility support for strscpy()
    - Correct the manpage about the sort option
    - Add missing functions to libipset.map
    - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych)
    - Implement sorting for hash types in the ipset tool
    - Fix to list/save into file specified by option (reported by Isaac Good)
    - Introduction of new commands and protocol version 7, updated kernel include files
    - Add compatibility support for async in pernet_operations
    - Use more robust awk patterns to check for backward compatibility
    - Prepare the ipset tool to handle multiple protocol version
    - Fix warning message handlin
    - Correct to test null valued entry in hash:net6,port,net6 test
    - Library reworked to support embedding ipset completely
    - Add compatibility to support kvcalloc()
    - Validate string type attributes in attr2data() (Stefano Brivio)
    - manpage: Add comment about matching on destination MAC address (Stefano Brivio)
      (RHBZ#1649079)
    - Add compatibility to support is_zero_ether_addr()
    - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649085)
    - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649085)
    - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649085)
    - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) 
  - Fixes:
    - Fix all shellcheck warnings in init script (RHBZ#1649085)
    - Make error reporting consistent, introduce different severities (RHBZ#1683711)
    - While restoring, on invalid entries, remove them and retry (RHBZ#1683713)
    - Fix covscan SC2166 warning in init script (RHBZ#1649085)


author: Jarod Wilson <jarod@redhat.com> - 22.3-1
changelog:
  - Update to upstream v22.3 stable release for fixes
  - Enable support for Broadcom 57500 hardware
  - Enable support for Mellanox ConnectX-6 DX hardware
  - Resolves: rhbz#1678276
  - Resolves: rhbz#1687435


author: Jarod Wilson <jarod@redhat.com> - 26.0-2
changelog:
  - Add Obsoletes/Provides pair for infiniband-diags-devel
  - Pull in upstream stable-v26 branch patches
  - Fix %postun scriptlet failures by removing superfluous -p options
  - Add new BuildRequires: on pandoc
  - Related: rhbz#1722257


author: Steve Dickson <steved@redhat.com> 2.3.3-14_0
changelog:
  - Add nfs.conf equivalent for the statd --no-notify cmdline option (1690280)
  - Correct the modes on /etc/nfs.conf after a conversion (bz 1690266)


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Jan Friesse <jfriesse@redhat.com> 2.99.5-2
changelog:
  - Resolves: rhbz#1654630

  - man: Add some information about address resolution (rhbz#1654630)
  - merge upstream commit 8d50bd946dd7e01da75f06da3f885e7dc82f4f12 (rhbz#1654630)
  - config: Look up hostnames in a defined order (rhbz#1654630)
  - merge upstream commit 3d7f136f86a56dd9d9caa9060f7a01e8b681eb7f (rhbz#1654630)


author: Jan Friesse <jfriesse@redhat.com> 3.0.0-2
changelog:
  - Resolves: rhbz#1665211

  - totemip: Use AF_UNSPEC for ipv4-6 and ipv6-4 (rhbz#1665211)
  - merge upstream commit 2ab4d4188670356dcb82a80f2fc4598f5145c77d (rhbz#1665211)


author: Jan Friesse <jfriesse@redhat.com> 3.0.2-3.1
changelog:
  - Resolves: rhbz#1765619

  - totemsrp: Reduce MTU to left room second mcast (rhbz#1765619)
  - merge upstream commit ee8b8993d98b3f6af9c058194228fc534fcd0796 (rhbz#1765619)


author: Ondrej Holy <oholy@redhat.com> - 2:2.0.0-46.rc4.1
changelog:
  - CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837632)
  - CVE-2020-11523: Fix integer overflow in region.c (#1837633)
  - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837631)


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-12
changelog:
  - fixes bugs bz#1730914 bz#1731448 bz#1732770 bz#1732792 bz#1733531 
    bz#1734305 bz#1734534 bz#1734734 bz#1735514 bz#1737705 bz#1732774
    bz#1732793


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-14
changelog:
  - fixes bugs bz#1719171 bz#1728673 bz#1731896 bz#1732443 bz#1733970 
    bz#1745107 bz#1746027 bz#1748688 bz#1750241 bz#1572163


author: Caolán McNamara <caolanm@redhat.com> - 1:6.0.6.1-20
changelog:
  - Resolves: rhbz#1743958 CVE-2019-9849, etc.
  - Resolves: rhbz#1648281 Junk character gets added when some emojis are inserted


author: Florian Weimer <fweimer@redhat.com> - 2.28-65
changelog:
  - glibc-all-langpacks: Do not delete locale archive during update (#1717347)
  - Do not mark /usr/lib/locale/locale-archive as a configuration file
    because it is always automatically overwritten by build-locale-archive.


author: Jan Grulich <jgrulich@redhat.com> - 0.27.2-4
changelog:
  - Drop test for the previous CVE as we test it manually and we don't have POC available
    Resolves: bz#1800472


author: Brian C. Lane <bcl@redhat.com> - 0.26.8-1
changelog:
  - Update to 0.26.8
    Resolves: rhbz#1638880
  - Disable upstream online tests
    Related: rhbz#1638880
  - tests: Increase TOOBIG value used on i686
    Related: rhbz#1638880


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.10-3
changelog:
  PMTUd: Fix MTU calculation when using crypto
    Resolves: rhbz#1736872
    host: Fix defrag buffer reclaim logic that could cause delivery
          of corrupted data
    ResolveS: rhbz#1761711


author: Than Ngo <than@redhat.com> - 3.11.0-3
changelog:
  - Resolves: #1667941, 3des tests failures due to FIPS incompatible test scenarios
  - Resolves: #1651731, ep11 token: enhanced IBM z14 functions
  - Resolves: #1651732, ep11 token: support m_*Single functions from ep11 lib
  - Resolves: #1525407, use CPACF hashes in ep11 token
  - Resolves: #1651238, rebase to 3.11.0
  - Resolves: #1682530, gating


author: Milan Crha <mcrha@redhat.com> - 3.28.5-10
changelog:
  - Add patch for RH bug #1764563 (CVE-2018-15587: Reposition signature bar)
  - Add patch for RH bug #1753220 (GalA11yETableItem: Incorrect implementation of AtkObjectClass::ref_child())


author: Jerome Marchand <jmarchan@redhat.com> - 0.8.0-1
changelog:
  - Rebase on bcc-8.0.0
  - Replace the temporary s390x workaround by a proper fix
  - Remove the doc of excluded tool from the package
  - Fix print_log2_hist
  - Fix yet a few other python3 bytes vs strings issues


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-1
changelog:
  - Rebase to bcc-0.10.0
  - Drop criticalstat
  - Fix regression on vfscount and runqslower
  - Rebuild on LLVM 9


author: Marian Csontos <mcsontos@redhat.com> - 2.03.07-1
changelog:
  - Ensure minimum required region size on striped RaidLV creation.
  - Fix resize of thin-pool with data and metadata of different segtype.
  - Improve mirror type leg splitting.
  - Fix activation order when removing merged snapshot.
  - Experimental VDO support for lvmdbusd.
  - Correctly set read_ahead for LVs when pvmove is finished.
  - Add support for DM_DEVICE_GET_TARGET_VERSION into device_mapper.
  - Activate thin-pool layered volume as 'read-only' device.
  - Ignore crypto devices with UUID signature CRYPT-SUBDEV.
  - Synchronize with udev when dropping snapshot.
  - Add missing device synchronization point before removing pvmove node.
  - See WHATS_NEW for more.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.08-1
changelog:
  - VDO and writecache volume improvements.
  - Prohibit reshaping of stacked raid LVs to prevent corruption.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-5
changelog:
  - Resolves: #1713606 - Fix hangul preedit commit with mouse click
  - Resolves: #1682157 - Integrate ibus-desktop-testing and test cases


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-6
changelog:
  - fixes bugs bz#1668001 bz#1708043 bz#1708183 bz#1710701 
    bz#1719640 bz#1720079 bz#1720248 bz#1720318 bz#1720461


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-7
changelog:
  - fixes bugs bz#1573077 bz#1600918 bz#1703423 bz#1704207 bz#1708064
    bz#1709301 bz#1713664 bz#1716760 bz#1717784 bz#1720163 bz#1720192
    bz#1720551 bz#1721351 bz#1721357 bz#1721477 bz#1722131 bz#1722331
    bz#1722509 bz#1722801 bz#1720248


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-8
changelog:
  - fixes bugs bz#1698435 bz#1712591 bz#1715447 bz#1720488 bz#1722209
    bz#1722512 bz#1724089 bz#1726991 bz#1727785 bz#1729108


author: Jeff Moyer <jmoyer@redhat.com> - 67-1.el8
changelog:
  - Rebase to v67.  This brings in the following features:
    - support for the 'security frozen' sysfs attribute
    - support for using pmem as system ram
    - various cleanup and bug fixes
  - Fix load-keys failure in initramfs (Jeff Moyer)
  - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889


author: Michal Židek <mzidek@redhat.com> - 2.2.0-11
changelog:
  - Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                             non-root user


author: Michal Židek <mzidek@redhat.com> - 2.2.0-13
changelog:
  - Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
              systemd-user service in the account phase in RHEL-8


author: Michal Židek <mzidek@redhat.com> - 2.2.0-14
changelog:
  - Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                             should not cause files domain entries to be
                             qualified, this can break sudo access


author: Michal Židek <mzidek@redhat.com> - 2.2.0-15
changelog:
  - Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                             loop if wrong PIN was provided


author: Michal Židek <mzidek@redhat.com> - 2.2.0-16
changelog:
  - Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                             the IP address of the machine updated in IPA upon
                             sssd.service startup


author: Michal Židek <mzidek@redhat.com> - 2.2.0-17
changelog:
  - Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                             keyring
  - Also apply a patch to fix gating tests issue


author: Michal Židek <mzidek@redhat.com> - 2.2.0-18
changelog:
  - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  - Also sync. kcm multihost tests with master


author: Michal Židek <mzidek@redhat.com> - 2.2.0-19
changelog:
  - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                             new ones (kcm)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.0-19.1
changelog:
  - Resolves: rhbz#1816591 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module does not
                             implement it properly [rhel-8.1.0.z]


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-11
changelog:
  - IBM Z hardware-accelerated deflate for s390x architectures
  - IBM CRC32 optimalization for POWER 8+ architectures
  - fixed firefox crash due to zlib (#1741266)
  - added test for crc32


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-13
changelog:
  - Added -DDFLTCC parameter to configure to enable 
  - Z hardware-accelerated deflate for s390x architectures


author: Carlos Soriano <csoriano@redhat.com> - 3.28.1-7
changelog:
  - Disable extension doc generation, since generated files differ and
    rpmlint fails when checking that both architectures of the -devel
    library generate the same files.
    It's an issue in docbook, used by gtk-doc, and althought fixed upstream
    they didn't have a new release yet.
    https://github.com/docbook/xslt10-stylesheets/issues/54
    Resolves: RHBZ#1667136


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-9
changelog:
  - Fix criticals when connecting to remote locations (rhbz#1643175)
  - Remove geometry option from man page (rhbz#1612852)


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-10
changelog:
  - Add screenshots for GNOME Software in Appdata file (rhbz#1725107)
  - Add website link to About dialog (rhbz#1725101)
  - Use Files instead of Nautilus in Appdata file (rhbz#1725120)
  - Add nautilus-autorun-software man page (rhbz#1725766)


author: Richard W.M. Jones <rjones@redhat.com> - 0.7-0.2.alpha.4
changelog:
  - Fix for CVE-2019-1010305
  - Remove "fix" for CVE-2018-14680 as this fix is included in base tar ball.
    resolves: rhbz#1736745, rhbz#1736743


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-1
changelog:
  - Update Source to upstream version 0.8.0
    * Previous patches 0001-0006 & 0015-0019 are included in this commit
  - Rename files
    * Previous patches 0007-0014 are now 0018-0025
    * Previous patches 0020-0023 are now 0001, 0006 & 0007
  - Add 0002-libmultipath-handle-existing-paths-in-marginal_path-.patch
  - Add 0003-multipathd-cleanup-marginal-paths-checking-timers.patch
  - Add 0004-libmultipath-fix-marginal-paths-queueing-errors.patch
  - Add 0005-libmultipath-fix-marginal_paths-nr_active-check.patch
  - Add 0008-libmutipath-continue-to-use-old-state-on-PATH_PENDIN.patch
  - Add 0009-multipathd-use-update_path_groups-instead-of-reload_.patch
  - Add 0010-multipath.conf-add-missing-options-to-man-page.patch
  - Add 0011-libmultipath-add-get_uid-fallback-code-for-NVMe-devi.patch
  - Add 0012-libmulitpath-cleanup-uid_fallback-code.patch
  - Add 0013-multipathd-handle-changed-wwids-by-removal-and-addit.patch
    * Multipath will now automatically remove and re-add paths if
      their wwid changes
  - Add 0014-multipathd-remove-wwid_changed-path-attribute.patch
  - Add 0015-multipathd-ignore-disable_changed_wwids.patch
    * Since paths are now getting removed and re-added there is
      no need to disable them.
  - Add 0016-multipathd-Don-t-use-fallback-code-after-getting-wwi.patch
  - Add 0017-libmultipath-silence-dm_is_mpath-error-messages.patch
  - Add 0026-RH-Fix-nvme-compilation-warning.patch
  - Add 0027-Fix-systemd-version-detection.patch
    * The above 16 patches have been submitted upstream
  - Add 0028-RH-attempt-to-get-ANA-info-via-sysfs-first.patch
    * Red Hat has a sysfs method to access the ANA state, which isn't
      upstream, and will not be. This will probably go away in the
      future.
  - Resolves: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-2
changelog:
  - Add 0029-BZ-1700451-check-on-multipathd-without-starting-it.patch
  - Add 0030-BZ-1700451-test-socket-connection-in-non-blocking-mo.patch
    * the "multipath -u" call in 62-multipath.rules should no longer hang
      on multipathd startup.
  - Resolves: bz #1700451


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-3
changelog:
  - Add 0031-libmultipath-handle-clock_gettime-failures-in-tur-ch.patch
  - Add 0032-kpartx-fail-if-dup-of-dasd-file-descriptor-fails.patch
  - Add 0033-multipathd-fix-REALLOC_REPLY-with-max-length-reply.patch
  - Add 0034-multipathd-handle-NULL-return-from-genhelp_handler.patch
    * The above 4 patches have been submitted upstream
  - Related: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-4
changelog:
  - Add 0035-BZ-1700911-hwtable-add-Lenovo-DE-series.patch
  - Add 0036-libmultipath-make-vector_foreach_slot_backwards-work.patch
    * Fix for bz #1713459
  - Fixes for bz #1666322 and #1669097 were included in 0.8.0 upstream
    code
  - Resolves: bz #1666322, #1669097, #1700911, #1713459


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-1
changelog:
  - Update Source to upstream version 0.8.3
    * This version includes the fixes for bz #1690515, #1703439,
        * Previous patches 0001-0017 & 0031-0036 are included in this version
  - Rename files
    * Previous patches 0018-0026 & 0028 are now 0004-0013
    * 0008-RH-add-mpathconf.patch has been modified to add a
      --property_blacklist option to fix bz #1753729
  - Add 0001-multipathd-warn-when-configuration-has-been-changed.patch
    * Multipath now logs a warning message when the configuration file
      has been changed to fix bz #1750594
  - Add 0002-libmultipath-fix-leak-in-foreign-code.patch
  - Add 0003-Fix-leak-in-mpathpersist.patch
    * The above 3 patches have been submitted upstream
  - Resolves: bz #1690515, #1703439, #1719562, #1747534, #1750594, #1753729


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-3
changelog:
  - Rename files
    * Previous patches 0004-0013 are now 0010-0019
    * 0014-RH-add-mpathconf.patch now makes mpathconf default to not
      printing foreign devices (bz #1760709)
  - Add 0004-libmultipath-remove-unused-path-prio_args.patch
  - Add 0005-libmultipath-constify-get_unaligned_be.patch
  - Add 0006-libmultipath-add-missing-hwe-mpe-variable-merges.patch
  - Add 0007-libmultipath-fix-sgio_get_vpd-looping.patch
  - Add 0008-libmultipath-add-vend_id-to-get_vpd_sgio.patch
  - Add 0009-libmultipath-add-code-to-get-vendor-specific-vpd-dat.patch
    * Add the '%g' maps and paths format wildcard, and the vpd_vendor
      multipath.conf devices section parameter. (bz #1527212)
  - Resolves: bz #1527212, #1760709


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.7.1.el8_2]
changelog:
  - [sound] ALSA: timer: Fix incorrectly assigned timer instance (Jaroslav Kysela) [1821714 1798468] {CVE-2019-19807}
  - [netdrv] ibmvnic: Do not process device remove during device reset (Steve Best) [1836229 1813223]
  - [net] ipv4: really enforce backoff for redirects (Paolo Abeni) [1836302 1834184]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.8.1.el8_2]
changelog:
  - [vfio] vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson) [1837309 1837310] {CVE-2020-12888}
  - [vfio] vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson) [1837309 1837310] {CVE-2020-12888}
  - [vfio] vfio/type1: Support faulting PFNMAP vmas (Alex Williamson) [1837309 1837310] {CVE-2020-12888}
  - [vfio] vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Alex Williamson) [1837309 1837310] {CVE-2020-12888}
  - [vfio] vfio/pci: call irq_bypass_unregister_producer() before freeing irq (Alex Williamson) [1837309 1837310] {CVE-2020-12888}
  - [vfio] vfio_pci: Enable memory accesses before calling pci_map_rom (Alex Williamson) [1837309 1837310] {CVE-2020-12888}


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.9.1.el8_2]
changelog:
  - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844073 1844031] {CVE-2020-12654}
  - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844049 1844039] {CVE-2020-12653}
  - [netdrv] net/mlx5: FPGA, support network cards with standalone FPGA (Alaa Hleihel) [1843544 1789380]
  - [mm] hugetlbfs: don't retry when pool page allocations start to fail (Rafael Aquini) [1835789 1727288]
  - [mm] mm, compaction: raise compaction priority after it withdrawns (Rafael Aquini) [1835789 1727288]
  - [mm] mm, reclaim: cleanup should_continue_reclaim() (Rafael Aquini) [1835789 1727288]
  - [mm] mm, reclaim: make should_continue_reclaim perform dryrun detection (Rafael Aquini) [1835789 1727288]
  - [kernel] exit: panic before exit_mm() on global init exit (Oleg Nesterov) [1821378 1808944]
  - [documentation] x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
  - [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
  - [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
  - [x86] x86/cpu: Add 'table' argument to cpu_matches() (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
  - [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.10.1.el8_2]
changelog:
  - [misc] dma-mapping: zero memory returned from dma_alloc_* (Philipp Rudo) [1847453 1788928]
  - [nvme] nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths (Gopal Tiwari) [1846405 1781927]
  - [net] netfilter: nf_tables: fix infinite loop when expr is not available (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: autoload modules from the abort path (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: remove WARN and add NLA_STRING upper limits (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: store transaction list locally while requesting module (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: use-after-free in failing rule with bound set (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a module (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: force module load in case select_ops() returns -EAGAIN (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: add nft_expr_type_request_module() (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: bogus EBUSY in helper removal from transaction (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: fix set double-free in abort path (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nft_compat: don't use refcount_inc on newly allocated entry (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: unbind set in rule from commit path (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nft_compat: destroy function must not have side effects (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nft_compat: make lists per netns (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nft_compat: use refcnt_t type for nft_xt reference count (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: fix suspicious RCU usage in nft_chain_stats_replace() (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: asynchronous release (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: split set destruction in deactivate and destroy phase (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: flow event notifier must use transaction mutex (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: use dedicated mutex to guard transactions (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: avoid global info storage (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: take module reference when starting a batch (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: make valid_genid callback mandatory (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: add and use helper for module autoload (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nat: never update the UDP checksum when it's 0 (Guillaume Nault) [1847128 1794714]
  - [x86] x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches (Waiman Long) [1847395 1847396] {CVE-2020-10768}
  - [x86] x86/speculation: Prevent rogue cross-process SSBD shutdown (Waiman Long) [1847357 1847358] {CVE-2020-10766}
  - [x86] x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS (Waiman Long) [1847378 1847379] {CVE-2020-10767}
  - [x86] x86/speculation: Add support for STIBP always-on preferred mode (Waiman Long) [1847378 1847379] {CVE-2020-10767}
  - [x86] x86/speculation: Change misspelled STIPB to STIBP (Waiman Long) [1847378 1847379] {CVE-2020-10767}
  - [powerpc] powerpc/pseries/ddw: Extend upper limit for huge DMA window for persistent memory (Steve Best) [1842406 1817596]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.11.1.el8_2]
changelog:
  - [net] netfilter: conntrack: fix infinite loop on rmmod (Florian Westphal) [1851005 1832381]
  - [net] netfilter: conntrack: allow insertion of clashing entries (Florian Westphal) [1851003 1821404]
  - [net] netfilter: conntrack: split resolve_clash function (Florian Westphal) [1851003 1821404]
  - [net] netfilter: conntrack: place confirm-bit setting in a helper (Florian Westphal) [1851003 1821404]
  - [net] netfilter: never get/set skb->tstamp (Florian Westphal) [1851003 1821404]
  - [net] netfilter: conntrack: remove two args from resolve_clash (Florian Westphal) [1851003 1821404]
  - [net] netfilter: conntrack: tell compiler to not inline nf_ct_resolve_clash (Florian Westphal) [1851003 1821404]
  - [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843440 1843441] {CVE-2020-10757}
  - [x86] x86/vector: Remove warning on managed interrupt migration (Peter Xu) [1848545 1812331]
  - [s390] s390/cio: fix virtio-ccw DMA without PV (Philipp Rudo) [1842620 1814787]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.12.1.el8_2]
changelog:
  - [net] openvswitch: simplify the ovs_dp_cmd_new (Eelco Chaudron) [1851235 1819202]
  - [net] openvswitch: fix possible memleak on destroy flow-table (Eelco Chaudron) [1851235 1819202]
  - [net] openvswitch: add likely in flow_lookup (Eelco Chaudron) [1851235 1819202]
  - [net] openvswitch: simplify the flow_hash (Eelco Chaudron) [1851235 1819202]
  - [net] openvswitch: optimize flow-mask looking up (Eelco Chaudron) [1851235 1819202]
  - [net] openvswitch: optimize flow mask cache hash collision (Eelco Chaudron) [1851235 1819202]
  - [net] openvswitch: shrink the mask array if necessary (Eelco Chaudron) [1851235 1819202]
  - [net] openvswitch: convert mask list in mask array (Eelco Chaudron) [1851235 1819202]
  - [net] openvswitch: add flow-mask cache for performance (Eelco Chaudron) [1851235 1819202]
  - [net] netfilter: nf_tables: use-after-free in dynamic operations (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nf_tables: add missing ->release_ops() in error path of newrule() (Phil Sutter) [1845164 1757933]
  - [net] netfilter: nft_compat: use .release_ops and remove list of extension (Phil Sutter) [1845164 1757933]
  - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1837309 1837310] {CVE-2020-12888}
  - [pci] PCI: pciehp: Fix MSI interrupt race (Myron Stowe) [1852045 1779610]
  - [kernel] smp: Allow smp_call_function_single_async() to insert locked csd (Peter Xu) [1851406 1830014]
  - [x86] kvm: Clean up host's steal time structure (Jon Maloy) [1795128 1813987] {CVE-2019-3016}
  - [x86] kvm: Make sure KVM_VCPU_FLUSH_TLB flag is not missed (Jon Maloy) [1795128 1813987] {CVE-2019-3016}
  - [virt] x86/kvm: Cache gfn to pfn translation (Jon Maloy) [1795128 1813987] {CVE-2019-3016}
  - [virt] x86/kvm: Introduce kvm_(un)map_gfn() (Jon Maloy) [1795128 1813987] {CVE-2019-3016}
  - [x86] kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit (Jon Maloy) [1795128 1813987] {CVE-2019-3016}


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.13.1.el8_2]
changelog:
  - [x86] x86/efi: Allocate e820 buffer before calling efi_exit_boot_service (Lenny Szubowicz) [1846180 1824005]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.14.1.el8_2]
changelog:
  - [md] dm mpath: add DM device name to Failing/Reinstating path log messages (Mike Snitzer) [1852050 1822975]
  - [md] dm mpath: enhance queue_if_no_path debugging (Mike Snitzer) [1852050 1822975]
  - [md] dm mpath: restrict queue_if_no_path state machine (Mike Snitzer) [1852050 1822975]
  - [md] dm mpath: simplify __must_push_back (Mike Snitzer) [1852050 1822975]
  - [md] dm: use DMDEBUG macros now that they use pr_debug variants (Mike Snitzer) [1852050 1822975]
  - [include] dm: use dynamic debug instead of compile-time config option (Mike Snitzer) [1852050 1822975]
  - [md] dm mpath: switch paths in dm_blk_ioctl() code path (Mike Snitzer) [1852050 1822975]
  - [md] dm multipath: use updated MPATHF_QUEUE_IO on mapping for bio-based mpath (Mike Snitzer) [1852050 1822975]
  - [md] dm: bump version of core and various targets (Mike Snitzer) [1852050 1822975]
  - [md] dm mpath: Add timeout mechanism for queue_if_no_path (Mike Snitzer) [1852050 1822975]
  - [md] dm mpath: use true_false for bool variable (Mike Snitzer) [1852050 1822975]
  - [md] dm mpath: remove harmful bio-based optimization (Mike Snitzer) [1852050 1822975]
  - [scsi] scsi: libiscsi: fall back to sendmsg for slab pages (Maurizio Lombardi) [1852048 1825775]
  - [s390] s390/mm: fix panic in gup_fast on large pud (Philipp Rudo) [1853336 1816980]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.14.2.el8_2]
changelog:
  - [kernel] Move to dual-signing to split signing keys up better (pjones) [1837433 1837434] {CVE-2020-10713}
  - [crypto] pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1837433 1837434] {CVE-2020-10713}
  - [acpi] ACPI: configfs: Disallow loading ACPI tables when locked down (Lenny Szubowicz) [1852968 1852969] {CVE-2020-15780}
  - [firmware] efi: Restrict efivar_ssdt_load when the kernel is locked down (Lenny Szubowicz) [1852948 1852949] {CVE-2019-20908}


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-147.1.1.el8_1]
changelog:
  - [arm64] arm64/sve: Fix wrong free for task->thread.sve_state (Andrew Jones) [1767358 1756450]
  - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [zstream] switch to zstream (Frantisek Hrbata)


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.2.1.el8_1]
changelog:
  - [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
  - [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
  - [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
  - [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
  - [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
  - [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
  - [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
  - [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
  - [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
  - [fs] cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
  - [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
  - [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
  - [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
  - [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
  - [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
  - [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
  - [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
  - [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
  - [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
  - [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges >4GB (Steve Best) [1764826 1744062]
  - [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
  - [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
  - [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
  - [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.3.1.el8_1]
changelog:
  - [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.4.1.el8_1]
changelog:
  - [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
  - [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
  - [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
  - [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
  - [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
  - [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
  - [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
  - [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
  - [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
  - [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
  - [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
  - [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
  - [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
  - [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
  - [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
  - [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
  - [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
  - [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
  - [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
  - [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
  - [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
  - [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
  - [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
  - [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
  - [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
  - [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
  - [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
  - [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
  - [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
  - [pci] hv: Avoid use of hv_pci_dev->pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.5.1.el8_1]
changelog:
  - [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
  - [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]


author: Karel Zak <kzak@redhat.com> 2.32.1-18
changelog:
  - fix #1739443 - lscpu reports wrong hypervisor in nested virt on s390x
  - fix #1743555 - command chfn adds some useless commas with GECOS information into /etc/password


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.1.2.el8_0]
changelog:
  - [arm64] arm64/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [s390] s390/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [powerpc] powerpc/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [powerpc] powerpc/64: Disable the speculation barrier from the command line (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Add 'mitigations=' support for MDS (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [kernel] cpu/speculation: Add 'mitigations=' cmdline option (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Fix comment (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Add SMT warning message (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [documentation] Documentation: Add MDS vulnerability documentation (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [documentation] Documentation: Move L1TF to separate directory (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Add sysfs reporting for MDS (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation: Consolidate CPU whitelists (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/msr-index: Cleanup bit defines (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/speculation: Cast ~SPEC_CTRL_STIBP atomic value to int (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [include] locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a new <linux/bits.h> file (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}
  - [tools] tools include: Adopt linux/bits.h (Josh Poimboeuf) [1698809 1698896 1699001 1690338 1690360 1690351] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126}


author: Michal Židek <mzidek@redhat.com> - 2.2.0-10
changelog:
  - Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                             the trailing colon


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-7.el8
changelog:
  - libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025]
  - Resolves: bz#1581025
    (Remove --disable-werror from spec file)


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-185.el8]
changelog:
  - [fs] NFS: Add deferred cache invalidation for close-to-open consistency violations (Benjamin Coddington) [1803162]
  - [block] nbd: fix stack corruption in nbd_check_sock_type() (Ming Lei) [1803664]
  - [mm] mm/vmscan.c: don't round up scan size for online memory cgroup (Aristeu Rozanski) [1775691]
  - [tools] selftests/bpf: fix clearing buffered output between tests/subtests (Yauheni Kaliuta) [1786006]
  - [tools] libbpf: avoid usage of __builtin_preserve_field_info (Yauheni Kaliuta) [1786006]
  - [tools] selftests/bpf: samples/bpf: fix Split off legacy stuff from bpf_helpers.h (Yauheni Kaliuta) [1786006]
  - [tools] libbpf: fix Make DECLARE_LIBBPF_OPTS macro strictly a variable declaration (Yauheni Kaliuta) [1786006]
  - [tools] selftests: fix too long argument (Yauheni Kaliuta) [1786006]
  - [tools] libbpf: Add BPF-side definitions of supported field relocation kinds (Yauheni Kaliuta) [1786006]
  - [tools] selftests/bpf: add sub-tests support for test_progs (Yauheni Kaliuta) [1786006]
  - [tools] selftests/bpf: abstract away test log output (Yauheni Kaliuta) [1786006]
  - [tools] selftest/bpf: centralize libbpf logging management for test_progs (Yauheni Kaliuta) [1786006]
  - [tools] selftests/bpf: prevent headers to be compiled as C code (Yauheni Kaliuta) [1786006]
  - [tools] selftests/bpf: add test selectors by number and name to test_progs (Yauheni Kaliuta) [1786006]
  - [tools] selftests/bpf: revamp test_progs to allow more control (Yauheni Kaliuta) [1786006]
  - [net] core: Don't skip generic XDP program execution for cloned SKBs (Jiri Benc) [1802507]
  - [tools] selftests/bpf: De-flake test_tcpbpf (Jiri Benc) [1802507]
  - [net] bpf, sockmap: Check update requirements after locking (Jiri Benc) [1802507]
  - [net] bpf, sockhash: Synchronize_rcu before free'ing map (Jiri Benc) [1802507]
  - [net] bpf, sockmap: Don't sleep while holding RCU lock on tear-down (Jiri Benc) [1802507]
  - [net] net: bpf: Don't leak time wait and request sockets (Jiri Benc) [1802507]
  - [net] bpf/sockmap: Read psock ingress_msg before sk_receive_queue (Jiri Benc) [1802507]
  - [net] bpf: Clear skb->tstamp in bpf_redirect when necessary (Jiri Benc) [1802507]
  - [net] xdp: obtain the mem_id mutex before trying to remove an entry (Jiri Benc) [1802507]
  - [net] page_pool: do not release pool until inflight == 0 (Jiri Benc) [1802507]
  - [net] xsk: Fix registration of Rx-only sockets (Jiri Benc) [1802507]
  - [net] xsk: avoid store-tearing when assigning umem (Jiri Benc) [1802507]
  - [net] xsk: avoid store-tearing when assigning queues (Jiri Benc) [1802507]
  - [tools] bpftool: Don't crash on missing xlated program instructions (Jiri Benc) [1802507]
  - [tools] bpftool: Fix printing incorrect pointer in btf_dump_ptr (Jiri Benc) [1802507]
  - [tools] bpftool: Don't crash on missing jited insns or ksyms (Jiri Benc) [1802507]
  - [tools] bpftool: Match several programs with same tag (Jiri Benc) [1802507]
  - [tools] libbpf: Fix realloc usage in bpf_core_find_cands (Jiri Benc) [1802507]
  - [tools] libbpf: Add missing newline in opts validation macro (Jiri Benc) [1802507]
  - [tools] libbpf: Don't attach perf_buffer to offline/missing CPUs (Jiri Benc) [1802507]
  - [tools] libbpf: Extract and generalize CPU mask parsing logic (Jiri Benc) [1802507]
  - [tools] libbpf: Fix printf compilation warnings on ppc64le arch (Jiri Benc) [1802507]
  - [tools] libbpf: Fix sym->st_value print on 32-bit arches (Jiri Benc) [1802507]
  - [tools] libbpf: Make btf__resolve_size logic always check size error condition (Jiri Benc) [1802507]
  - [tools] libbpf: Fix another potential overflow issue in bpf_prog_linfo (Jiri Benc) [1802507]
  - [tools] libbpf: Fix potential overflow issue (Jiri Benc) [1802507]
  - [tools] libbpf: Fix memory leak/double free issue (Jiri Benc) [1802507]
  - [tools] libbpf: Fix off-by-one error in ELF sanity check (Jiri Benc) [1802507]
  - [tools] selftests/bpf: Fix test_attach_probe (Jiri Benc) [1802507]
  - [kernel] bpf: Fix bpf_event_output re-entry issue (Jiri Benc) [1802507]
  - [net] bpf: Fix incorrect verifier simulation of ARSH under ALU32 (Jiri Benc) [1802507]
  - [net] bpf: Fix passing modified ctx to ld/abs/ind instruction (Jiri Benc) [1802507]
  - [net] bpf: cgroup: prevent out-of-order release of cgroup bpf (Jiri Benc) [1802507]
  - [net] bpf: Fix precision tracking for unbounded scalars (Jiri Benc) [1802507]
  - [net] bpf: Fix cgroup local storage prog tracking (Jiri Benc) [1802507]
  - [net] bpf/stackmap: Fix deadlock with rq_lock in bpf_get_stack() (Jiri Benc) [1802507]
  - [net] bpf, offload: Unlock on error in bpf_offload_dev_create() (Jiri Benc) [1802507]
  - [powerpc] powerpc/bpf: Fix tail call implementation (Jiri Benc) [1802507]
  - [net] bpf: Fix use after free in bpf_get_prog_name (Jiri Benc) [1802507]
  - [net] bpf: Fix use after free in subprog's jited symbol removal (Jiri Benc) [1802507]
  - [uapi] bpf: fix BTF limits (Jiri Benc) [1802507]
  - [net] bpf: fix BTF verification of enums (Jiri Benc) [1802507]
  - [netdrv] ice: Don't tell the OS that link is going down (Jonathan Toppins) [1792670]
  - [powerpc] powerpc/powernv: implement opal_put_chars_atomic (Steve Best) [1806254]
  - [tty] powerpc/powernv: move opal console flushing to udbg (Steve Best) [1806254]
  - [powerpc] powerpc/powernv: Remove OPALv1 support from opal console driver (Steve Best) [1806254]
  - [powerpc] powerpc/powernv: Implement and use opal_flush_console (Steve Best) [1806254]
  - [powerpc] powerpc/powernv: opal-kmsg use flush fallback from console code (Steve Best) [1806254]
  - [powerpc] powerpc/powernv: opal-kmsg standardise OPAL_BUSY handling (Steve Best) [1806254]
  - [powerpc] powerpc/powernv: Fix OPAL console driver OPAL_BUSY loops (Steve Best) [1806254]
  - [powerpc] powerpc/powernv: opal_put_chars partial write fix (Steve Best) [1806254]
  - [x86] Mark Comet Lake-S as supported (David Arcari) [1805754]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-186.el8]
changelog:
  - [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
  - [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
  - [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
  - [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
  - [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
  - [block] blk-mq: insert passthrough request into hctx->dispatch directly (Ming Lei) [1788728]
  - [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-187.el8]
changelog:
  - [kernel] blktrace: Protect q->blk_trace with RCU (Ming Lei) [1798329]
  - [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
  - [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
  - [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
  - [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
  - [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
  - [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
  - [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
  - [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
  - [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
  - [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
  - [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
  - [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
  - [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
  - [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
  - [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
  - [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
  - [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
  - [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
  - [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-188.el8]
changelog:
  - [block] blk-mq: Keep set->nr_hw_queues and set->map.nr_queues in sync (Ming Lei) [1810523]
  - [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-189.el8]
changelog:
  - [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
  - [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
  - [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
  - [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
  - [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
  - [nvme] nvme: log additional message for controller status (David Milburn) [1752952]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-190.el8]
changelog:
  - [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
  - [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
  - [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-191.el8]
changelog:
  - [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
  - [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-192.el8]
changelog:
  - [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
  - [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
  - [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
  - [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
  - [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.el8]
changelog:
  - [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
  - [net] tcp: also NULL skb->dev when copy was needed (Florian Westphal) [1775961]
  - [net] tcp: ensure skb->dev is NULL before leaving TCP stack (Florian Westphal) [1775961]


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-6
changelog:
  - Prevent spawning new daemons if outgoing operation exists (#1739117)
  - Force NT1 protocol version for workgroup support (#1739116)


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-11
changelog:
  - Fix criticals when moving file to trash (rhbz#1721133)
  - Fix criticals when closing properties window (rhbz#1721124)


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to vesrion 1.2.0
    * Added threading support
    * Moved to modern cmake
    * Several smaller bugfixes


author: Marek Polacek <polacek@redhat.com> 9.1.1-2
changelog:
  - update from Fedora 9.1.1-2 (#1728745)
  - apply Fortran patches (#1722881)
  - do not include libasan5 and libubsan1 on RHEL 8 and use the system
    version (#1722892)


author: Jan Staněk <jstanek@redhat.com> - 2.8.29-2
changelog:
  - Remove unneeded legacy conditionals around %{nodejs_arches} and %{_jsdir}
    Resolves: rhbz#1737038
  - BuildRequire nodejs for test runs
  - Remove reference to non-applied patch
  - Use %bcond_without for conditional compilation


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-63.el8_0.1
changelog:
  - kvm-device_tree-Fix-integer-overflowing-in-load_device_t.patch [bz#1693116]
  - Resolves: bz#1693116
    (CVE-2018-20815 qemu-kvm: QEMU: device_tree: heap buffer overflow while loading device tree blob [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-63.el8.0.0.2
changelog:
  - kvm-target-i386-define-md-clear-bit-rhev.patch [bz#1704545]
  - Resolves: bz#1704545
    (CVE-2018-12126 virt:rhel/qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-8.0.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-64.el8.0.0.2
changelog:
  - Bump release version to fix the versioning problem (zstream release lower than ystream).
  - Resolves: bz#1704545
    (CVE-2018-12126 virt:rhel/qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-8.0.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-65.el8_0_0.3
changelog:
  - kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1732324]
  - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1732324]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1732324]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1732324]
  - kvm-virtio-scsi-Move-BlockBackend-back-to-the-main-AioCo.patch [bz#1718992]
  - kvm-scsi-disk-Acquire-the-AioContext-in-scsi_-_realize.patch [bz#1718992]
  - kvm-virtio-scsi-Forbid-devices-with-different-iothreads-.patch [bz#1718992]
  - Resolves: bz#1718992
    (qemu-kvm core dumped after hotplug the deleted disk with iothread parameter [rhel-8.0.0.z])
  - Resolves: bz#1732324
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu()  [rhel-8.0.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-65.el8_0_0.4
changelog:
  - kvm-Introduce-new-no_guest_reset-parameter-for-usb-host-.patch [bz#1719228]
  - kvm-usb-call-reset-handler-before-updating-state.patch [bz#1719228]
  - kvm-usb-host-skip-reset-for-untouched-devices.patch [bz#1719228]
  - kvm-usb-host-avoid-libusb_set_configuration-calls.patch [bz#1719228]
  - kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734750]
  - Resolves: bz#1719228
    (Detached device when trying to upgrade USB device firmware when in doing USB Passthrough via QEMU [rhel-8.0.0.z])
  - Resolves: bz#1734750
    (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-8.0.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-65.el8_0_0.5
changelog:
  - kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1718235]
  - kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1718235]
  - kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1718235]
  - kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1718235]
  - kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1718235]
  - kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1718235]
  - kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1718235]
  - kvm-i386-Make-arch_capabilities-migratable.patch [bz#1718235]
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1718235]
  - Resolves: bz#1718235
    ([Intel 8.1 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM - qemu-kvm [rhel-8.0.0.z])


author: Miro Hrončok <mhroncok@redhat.com> - 0.1.7-10
changelog:
  - Subpackage python2-wcwidth has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.4.2.el8_0]
changelog:
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719922 1719923] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719922 1719923] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719857 1719858] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719602 1719603] {CVE-2019-11477}


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.8.1.el8_0]
changelog:
  - [documentation] Documentation: Add ARM64 to kernel-parameters.rst (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64/speculation: Support 'mitigations=' cmdline option (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: ssbs: Don't treat CPUs with SSBS as unaffected by SSB (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: enable generic CPU vulnerabilites support (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: add sysfs vulnerability show for speculative store bypass (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: Always enable ssb vulnerability detection (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: add sysfs vulnerability show for spectre-v2 (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: Always enable spectre-v2 vulnerability detection (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: Use firmware to detect CPUs that are not affected by Spectre-v2 (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: Advertise mitigation of Spectre-v2, or lack thereof (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: add sysfs vulnerability show for meltdown (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: Add sysfs vulnerability show for spectre-v1 (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: Provide a command line to disable spectre_v2 mitigation (Jeremy Linton) [1726353 1640855]
  - [documentation] powerpc/fsl: Add FSL_PPC_BOOK3E as supported arch for nospectre_v2 boot arg (Jeremy Linton) [1726353 1640855]
  - [documentation] Documentation: Document arm64 kpti control (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: Add MIDR encoding for HiSilicon Taishan CPUs (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: kpti: Whitelist Cortex-A CPUs that don't implement the CSV3 field (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: kpti: Update arm64_kernel_use_ng_mappings() when forced on (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: kpti: Avoid rewriting early page tables when KASLR is enabled (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: capabilities: Merge duplicate Cavium erratum entries (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: capabilities: Merge entries for ARM64_WORKAROUND_CLEAN_CACHE (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: Use a raw spinlock in __install_bp_hardening_cb() (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: KVM: Guests can skip __install_bp_hardening_cb()s HYP work (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: fix SSBS sanitization (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: don't zero DIT on signal return (Jeremy Linton) [1726353 1640855]
  - [kvm] KVM: arm64: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: ssbd: Add support for PSTATE.SSBS rather than trapping to EL3 (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: ssbd: Drop #ifdefs for PR_SPEC_STORE_BYPASS (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: cpufeature: Detect SSBS and advertise to userspace (Jeremy Linton) [1726353 1640855]
  - [arm64] arm64: move SCTLR_EL{1,2} assertions to <asm/sysreg.h> (Jeremy Linton) [1726353 1640855]
  - Revert: [arm64] arm64/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf) [1726353 1640855] {CVE-2018-12130 CVE-2018-12127 CVE-2018-12126 CVE-2019-11091}
  - [kernel] ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (Aristeu Rozanski) [1730958 1730959] {CVE-2019-13272}


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.9.1.el8_0]
changelog:
  - [netdrv] thunderx: eliminate extra calls to put_page() for pages held for recycling (Dean Nelson) [1726354 1644011]
  - [netdrv] thunderx: enable page recycling for non-XDP case (Dean Nelson) [1726354 1644011]
  - [arm64] arm64: kaslr: ensure randomized quantities are clean also when kaslr is off (Mark Salter) [1726357 1673068]
  - [arm64] arm64: kaslr: ensure randomized quantities are clean to the PoC (Mark Salter) [1726357 1673068]
  - [mm] powerpc/mm/64s/hash: Reallocate context ids on fork (Gustavo Duarte) [1734689 1723808] {CVE-2019-12817}
  - [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Steve Best) [1733282 1720929]
  - [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Steve Best) [1733282 1720929]
  - [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Steve Best) [1733282 1720929]
  - [powerpc] powerpc/watchpoint: Restore NV GPRs while returning from exception (Steve Best) [1733281 1728557]
  - [hid] HID: i2c-hid: Don't reset device upon system resume (Perry Yuan) [1727098 1715385]
  - [netdrv] net/mlx5e: RX, Verify MPWQE stride size is in range (Alaa Hleihel) [1726372 1683589]
  - [sound] ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c (Jaroslav Kysela) [1726371 1658924] {CVE-2018-19824}
  - [sound] ALSA: hda - Enable runtime PM only for discrete GPU (Jaroslav Kysela) [1726361 1714817]
  - [cpufreq] cpufreq: intel_pstate: Ignore turbo active ratio in HWP (David Arcari) [1726360 1711970]
  - [infiniband] usnic_verbs: fix deadlock (Govindarajulu Varadarajan) [1726358 1688505]
  - [infiniband] IB/usnic: Fix locking when unregistering (Govindarajulu Varadarajan) [1726358 1688505]
  - [infiniband] IB/usnic: Fix potential deadlock (Govindarajulu Varadarajan) [1726358 1688505]
  - [netdrv] igb: shorten maximum PHC timecounter update interval (Corinna Vinschen) [1726352 1637098]
  - [netdrv] igb: shorten maximum PHC timecounter update interval (Corinna Vinschen) [1726352 1637098]
  - [x86] x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls (Frank Ramsay) [1724534 1677695]
  - [security] selinux: overhaul sidtab to fix bug and improve performance (Ondrej Mosnacek) [1717780 1656787]
  - [security] selinux: use separate table for initial SID lookup (Ondrej Mosnacek) [1717780 1656787]
  - [security] selinux: refactor sidtab conversion (Ondrej Mosnacek) [1717780 1656787]
  - [security] selinux: Cleanup printk logging in sidtab (Ondrej Mosnacek) [1717780 1656787]
  - [security] selinux: Cleanup printk logging in services (Ondrej Mosnacek) [1717780 1656787]
  - [security] selinux: Cleanup printk logging in policydb (Ondrej Mosnacek) [1717780 1656787]
  - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1715335 1707546]
  - [mm] mm, page_alloc: fix has_unmovable_pages for HugePages (David Gibson) [1714758 1688114]
  - [wireless] mwifiex: Abort at too short BSS descriptor element (Jarod Wilson) [1714475 1714476] {CVE-2019-3846}
  - [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Jarod Wilson) [1714475 1714476] {CVE-2019-3846}
  - [nvme] nvme-pci: add missing unlock for reset error (Gopal Tiwari) [1712261 1703201]
  - [nvme] nvme-pci: fix rapid add remove sequence (Gopal Tiwari) [1712261 1703201]
  - [wireless] brcmfmac: add subtype check for event handling in data path (Stanislaw Gruszka) [1733895 1704684] {CVE-2019-9503}
  - [wireless] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1705385 1705386] {CVE-2019-9500}
  - [include] fs: fix kABI for struct pipe_buf_operations (Miklos Szeredi) [1705006 1705007] {CVE-2019-11487}
  - [fs] fs: prevent page refcount overflow in pipe_buf_get (Miklos Szeredi) [1705006 1705007] {CVE-2019-11487}
  - [mm] mm: prevent get_user_pages() from overflowing page refcount (Miklos Szeredi) [1705006 1705007] {CVE-2019-11487}
  - [include] mm: add 'try_get_page()' helper function (Miklos Szeredi) [1705006 1705007] {CVE-2019-11487}
  - [include] mm: make page ref count overflow check tighter and more explicit (Miklos Szeredi) [1705006 1705007] {CVE-2019-11487}
  - [fs] fuse: call pipe_buf_release() under pipe lock (Miklos Szeredi) [1705006 1705007] {CVE-2019-11487}
  - [kvm] KVM: x86: nVMX: fix x2APIC VTPR read intercept (Vitaly Kuznetsov) [1697198 1697199]
  - [kvm] KVM: x86: nVMX: close leak of L0's x2APIC MSRs (CVE-2019-3887) (Vitaly Kuznetsov) [1697198 1697199]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.10.1.el8_0]
changelog:
  - [x86] x86/entry/64: Use JMP instead of JMPQ (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
  - [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
  - [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
  - [x86] x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}
  - [x86] x86/cpufeatures: Carve out CQM features retrieval (Josh Poimboeuf) [1724500 1724501] {CVE-2019-1125}


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.11.1.el8_0]
changelog:
  - [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Jarod Wilson) [1714475 1728992]
  - [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714475 1714476] {CVE-2019-3846}


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.6.1.el8_1]
changelog:
  - [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
  - [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
  - [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
  - [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
  - [mm] mm/page-writeback.c: don't break integrity writeback on ->writepage() error (Christoph von Recklinghausen) [1797962 1782117]
  - [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
  - [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
  - [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
  - [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
  - [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
  - [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
  - [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
  - [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
  - [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
  - [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
  - [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
  - [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
  - [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
  - [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
  - [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
  - [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
  - [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: remove RX seqno in skb->cb (Philipp Rudo) [1794059 1781085]
  - [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
  - [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
  - [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
  - [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
  - [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
  - [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
  - [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
  - [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
  - [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
  - [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
  - [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
  - [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
  - [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.7.1.el8_1]
changelog:
  - [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
  - [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
  - [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
  - [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
  - [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
  - [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
  - [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
  - [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
  - [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
  - [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
  - [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
  - [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
  - [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]


author: Pino Toscano <ptoscano@redhat.com> - 1.12.0-2.el8_1.1
changelog:
  - Krb5: improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1800552)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-92.el8
changelog:
  - kvm-x86-cpu-use-FeatureWordArray-to-define-filtered_feat.patch [bz#1689270]
  - kvm-i386-Add-x-force-features-option-for-testing.patch [bz#1689270]
  - kvm-target-i386-define-a-new-MSR-based-feature-word-FEAT.patch [bz#1689270]
  - kvm-i386-display-known-CPUID-features-linewrapped-in-alp.patch [bz#1689270]
  - kvm-target-i386-kvm-kvm_get_supported_msrs-cleanup.patch [bz#1689270]
  - kvm-target-i386-handle-filtered_features-in-a-new-functi.patch [bz#1689270]
  - kvm-target-i386-introduce-generic-feature-dependency-mec.patch [bz#1689270]
  - kvm-target-i386-expand-feature-words-to-64-bits.patch [bz#1689270]
  - kvm-target-i386-add-VMX-definitions.patch [bz#1689270]
  - kvm-vmxcap-correct-the-name-of-the-variables.patch [bz#1689270]
  - kvm-target-i386-add-VMX-features.patch [bz#1689270]
  - kvm-target-i386-work-around-KVM_GET_MSRS-bug-for-seconda.patch [bz#1689270]
  - kvm-target-i386-adjust-for-missing-VMX-features.patch [bz#1689270]
  - kvm-target-i386-add-VMX-features-to-named-CPU-models.patch [bz#1689270]
  - kvm-target-i386-add-VMX-features-to-named-CPU-models-RHE.patch [bz#1689270]
  - kvm-vhost-fix-vhost_log-size-overflow-during-migration.patch [bz#1776808]
  - Resolves: bz#1689270
    (Nested KVM: limit VMX features according to CPU models - Slow Train)
  - Resolves: bz#1776808
    (qemu-kvm crashes when Windows VM is migrated with multiqueue)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-93.el8
changelog:
  - kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771971]
  - kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771971]
  - Resolves: bz#1771971
    (CVE-2019-11135 virt:rhel/qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-94.el8
changelog:
  - kvm-util-mmap-alloc-Add-a-is_pmem-parameter-to-qemu_ram_.patch [bz#1539282]
  - kvm-mmap-alloc-unfold-qemu_ram_mmap.patch [bz#1539282]
  - kvm-mmap-alloc-fix-hugetlbfs-misaligned-length-in-ppc64.patch [bz#1539282]
  - kvm-util-mmap-alloc-support-MAP_SYNC-in-qemu_ram_mmap.patch [bz#1539282]
  - kvm-x86-cpu-Enable-MOVDIRI-cpu-feature.patch [bz#1634827]
  - kvm-x86-cpu-Enable-MOVDIR64B-cpu-feature.patch [bz#1634827]
  - kvm-add-call-to-qemu_add_opts-for-overcommit-option.patch [bz#1634827]
  - kvm-support-overcommit-cpu-pm-on-off.patch [bz#1634827]
  - kvm-i386-cpu-make-cpu-host-support-monitor-mwait.patch []
  - kvm-x86-cpu-Add-support-for-UMONITOR-UMWAIT-TPAUSE.patch [bz#1634827]
  - kvm-target-i386-Add-support-for-save-load-IA32_UMWAIT_CO.patch [bz#1634827]
  - Resolves: bz#1539282
    ([Intel 8.2 Feature][Crystal Ridge] Support MAP_SYNC  - qemu-kvm)
  - Resolves: bz#1634827
    ([Intel 8.2 Feat] KVM Enable SnowRidge Accelerator Interface Architecture (AIA) - qemu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-95.el8
changelog:
  - kvm-virtio-gpu-block-both-2d-and-3d-rendering.patch [bz#1674324]
  - kvm-x86-Intel-AVX512_BF16-feature-enabling.patch [bz#1642541]
  - Resolves: bz#1642541
    ([Intel 8.2 Feature] qemu-kvm Enable BFloat16 data type support)
  - Resolves: bz#1674324
    (With <graphics type='spice'><gl enable='on'/>, qemu either refuses to start completely or spice-server crashes afterwards)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-96.el8
changelog:
  - kvm-i386-Remove-cpu64-rhel6-CPU-model.patch [bz#1741346]
  - Resolves: bz#1741346
    (Remove the "cpu64-rhel6" CPU from qemu-kvm)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-97.el8
changelog:
  - kvm-exec-Fix-MAP_RAM-for-cached-access.patch [bz#1769613]
  - kvm-virtio-Return-true-from-virtio_queue_empty-if-broken.patch [bz#1769613]
  - kvm-usbredir-Prevent-recursion-in-usbredir_write.patch [bz#1752320]
  - kvm-xhci-recheck-slot-status.patch [bz#1752320]
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791566]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791566]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791566]
  - Resolves: bz#1752320
    (vm gets stuck when migrate vm back and forth with remote-viewer trying to connect)
  - Resolves: bz#1769613
    ([SEV] kexec mays hang at "[sda] Synchronizing SCSI cache " before switching to new kernel)
  - Resolves: bz#1791566
    (CVE-2020-7039 virt:rhel/qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-98.el8
changelog:
  - kvm-iscsi-Avoid-potential-for-get_status-overflow.patch [bz#1794501]
  - kvm-iscsi-Cap-block-count-from-GET-LBA-STATUS-CVE-2020-1.patch [bz#1794501]
  - kvm-clean-up-callback-when-del-virtqueue.patch [bz#1708480]
  - kvm-virtio-add-ability-to-delete-vq-through-a-pointer.patch [bz#1708480]
  - kvm-virtio-reset-region-cache-when-on-queue-deletion.patch [bz#1708480]
  - kvm-virtio-net-delete-also-control-queue-when-TX-RX-dele.patch [bz#1708480]
  - Resolves: bz#1708480
    ([Q35] No "DEVICE_DELETED" event in qmp after unplug virtio-net-pci device)
  - Resolves: bz#1794501
    (CVE-2020-1711 qemu-kvm: QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server [rhel-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-99.el8
changelog:
  - kvm-slirp-disable-tcp_emu.patch [bz#1791677]
  - kvm-target-i386-kvm-initialize-feature-MSRs-very-early.patch [bz#1790308]
  - Resolves: bz#1790308
    (qemu-kvm core dump when do L1 guest live migration with L2 guest running)
  - Resolves: bz#1791677
    (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-99.el8.1
changelog:
  - kvm-util-add-slirp_fmt-helpers.patch [bz#1834477]
  - kvm-dhcpv6-use-slirp_fmt.patch [bz#1834477]
  - kvm-misc-use-slirp_fmt0.patch [bz#1834477]
  - kvm-tftp-use-slirp_fmt0.patch [bz#1834477]
  - kvm-tcp_ctl-use-slirp_fmt.patch [bz#1834477]
  - kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1834477]
  - Resolves: bz#1834477
    (CVE-2020-8608 virt:rhel/qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-8.2.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-99.el8_2.2
changelog:
  - kvm-vnc-add-magic-cookie-to-VncState.patch [bz#1816763]
  - kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1816763]
  - Resolves: bz#1816763
    (CVE-2019-20382 virt:rhel/qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-8])


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.6.1.el8_2]
changelog:
  - [char] tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (Steve Best) [1827632 1808048]
  - [netdrv] bonding: fix active-backup transition after link failure (Jarod Wilson) [1838477 1819408]
  - [netdrv] bonding: fix state transition issue in link monitoring (Jarod Wilson) [1838477 1819408]
  - [kernel] sched/fair: Allow a per-CPU kthread waking a task to stack on the same CPU, to fix XFS performance regression (Phil Auld) [1834517 1745111]
  - [block] block, bfq: fix use-after-free in bfq_idle_slice_timer_body (Ming Lei) [1835531 1835532] {CVE-2020-12657}
  - [kvm] KVM: x86: use raw clock values consistently (Marcelo Tosatti) [1822498 1768622]
  - [kvm] KVM: x86: reorganize pvclock_gtod_data members (Marcelo Tosatti) [1822498 1768622]
  - [kvm] KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosatti) [1822498 1768622]


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-7.1
changelog:
  - Add 0024-BZ-1723746-check-on-multipathd-without-starting-it.patch
  - Add 0025-BZ-1723746-test-socket-connection-in-non-blocking-mo.patch
  - Update CI testing
  - Resolves: bz #1723746


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-78.el8
changelog:
  - kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1721983]
  - kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1721983]
  - Resolves: bz#1721983
    (qemu-kvm can't be build with new gluster version (6.0.6))


author: Jakub Hrozek <jhrozek@redhat.com> - 2.8.0-2
changelog:
  - Resolves: #rhbz1654223: CVE-2018-7159 http-parser: nodejs: HTTP parser
                            allowed for spaces inside Content-Length header
                            values [rhel-8]


author: Sergio Correia <scorreia@redhat.com> - 2.8.0-4
changelog:
  - Resolves: rhbz#1666382: CVE-2018-12121 http-parser: nodejs: Denial of
                            Service with large HTTP headers [rhel-8]


author: Sergio Corrreia <scorreia@redhat.com> - 2.8.0-7
changelog:
  - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
                             smuggling using malformed Transfer-Encoding header


author: Sergio Durigan Junior <sergiodj@redhat.com> - 0.0.4-12
changelog:
  - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. Recommend
    GDB, instead of requiring it.


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-90.el8
changelog:
  - kvm-i386-Don-t-print-warning-if-phys-bits-was-set-automa.patch [bz#1719127]
  - kvm-Disable-CONFIG_I2C-and-CONFIG_IOH3420.patch [bz#1693140]
  - kvm-usb-drop-unnecessary-usb_device_post_load-checks.patch [bz#1757482]
  - kvm-pc-bios-s390-ccw-define-loadparm-length.patch [bz#1664376]
  - kvm-pc-bios-s390-ccw-net-Use-diag308-to-reset-machine-be.patch [bz#1664376]
  - kvm-s390-bios-decouple-cio-setup-from-virtio.patch [bz#1664376]
  - kvm-s390-bios-decouple-common-boot-logic-from-virtio.patch [bz#1664376]
  - kvm-s390-bios-Clean-up-cio.h.patch [bz#1664376]
  - kvm-s390-bios-Decouple-channel-i-o-logic-from-virtio.patch [bz#1664376]
  - kvm-s390-bios-Map-low-core-memory.patch [bz#1664376]
  - kvm-s390-bios-ptr2u32-and-u32toptr.patch [bz#1664376]
  - kvm-s390-bios-Support-for-running-format-0-1-channel-pro.patch [bz#1664376]
  - kvm-s390-bios-cio-error-handling.patch [bz#1664376]
  - kvm-s390-bios-Extend-find_dev-for-non-virtio-devices.patch [bz#1664376]
  - kvm-s390-bios-Factor-finding-boot-device-out-of-virtio-c.patch [bz#1664376]
  - kvm-s390-bios-Refactor-virtio-to-run-channel-programs-vi.patch [bz#1664376]
  - kvm-s390-bios-Use-control-unit-type-to-determine-boot-me.patch [bz#1664376]
  - kvm-s390-bios-Add-channel-command-codes-structs-needed-f.patch [bz#1664376]
  - kvm-s390-bios-Support-booting-from-real-dasd-device.patch [bz#1664376]
  - kvm-s390-bios-Use-control-unit-type-to-find-bootable-dev.patch [bz#1664376]
  - kvm-s390x-vfio-ap-Implement-hot-plug-unplug-of-vfio-ap-d.patch [bz#1660906]
  - Resolves: bz#1660906
    ([IBM 8.2 FEAT] KVM s390x: Crypto Passthrough Hotplug - qemu part)
  - Resolves: bz#1664376
    ([IBM 8.2 FEAT] CCW IPL Support (kvm) - qemu part)
  - Resolves: bz#1693140
    (aarch64: qemu: remove smbus_eeprom and i2c from config)
  - Resolves: bz#1719127
    ([Intel 8.2 Bug] warning shown when boot VM with “–cpu host” or “–cpu other mode” on ICX platform (physical))
  - Resolves: bz#1757482
    (Fail to migrate a rhel6.10-mt7.6 guest with dimm device)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-91.el8
changelog:
  - kvm-qapi-fill-in-CpuInfoFast.arch-in-query-cpus-fast.patch [bz#1730969]
  - kvm-curl-Keep-pointer-to-the-CURLState-in-CURLSocket.patch [bz#1744602]
  - kvm-curl-Keep-socket-until-the-end-of-curl_sock_cb.patch [bz#1744602]
  - kvm-curl-Check-completion-in-curl_multi_do.patch [bz#1744602]
  - kvm-curl-Pass-CURLSocket-to-curl_multi_do.patch [bz#1744602]
  - kvm-curl-Report-only-ready-sockets.patch [bz#1744602]
  - kvm-curl-Handle-success-in-multi_check_completion.patch [bz#1744602]
  - kvm-curl-Check-curl_multi_add_handle-s-return-code.patch [bz#1744602]
  - Resolves: bz#1730969
    ([ppc] qmp: The 'arch' value returned by the command 'query-cpus-fast' does not match)
  - Resolves: bz#1744602
    (qemu-img gets stuck when stream-converting from http)


author: Marek Polacek <polacek@redhat.com> 9.2.1-2
changelog:
  - update from Fedora gcc-9.2.1-2 (#1747158)
  - fix ABI change in deque iterators (PR libstdc++/92267)
  - fix up sink select_best_block (PR tree-optimization/91355)
  - revert PR tree-optimization/91790 fix
  - allow MODE_PARTIAL_INT modes for integer constant input operands
    (PR other/92090)
  - fix adjust_unroll_factor (PR middle-end/90796)
  - fixes for SVE Vector PCS on AArch64: emit .variant_pcs for
    aarch64_vector_pcs symbol references (#1726641)


author: Jan Friesse <jfriesse@redhat.com> 3.0.2-4
changelog:
  - Resolves: rhbz#1745624
  - Resolves: rhbz#1745642
  - Resolves: rhbz#1749263
  - Resolves: rhbz#1765025

  - totem: fix check if all nodes have same number of links (rhbz#1749263)
  - merge upstream commit 816324c94cfb917b11f43954b8757424db28b390 (rhbz#1749263)
  - totem: Increase ring_id seq after load (rhbz#1745624)
  - merge upstream commit 3675daceeeeb72af043f5c051daed463fdd2d2a1 (rhbz#1745624)
  - man: Fix link_mode priority description (rhbz#1745642)
  - merge upstream commit 0a323ff2ed0f2aff9cb691072906e69cb96ed662 (rhbz#1745642)
  - totemsrp: Reduce MTU to left room second mcast (rhbz#1765025)
  - merge upstream commit ee8b8993d98b3f6af9c058194228fc534fcd0796 (rhbz#1765025)


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.1.1.el8_2]
changelog:
  - [x86] kvm: x86: clear stale x86_emulate_ctxt->intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
  - [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
  - [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
  - [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
  - [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
  - [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
  - [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
  - [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
  - [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
  - [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
  - [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.2.1.el8_2]
changelog:
  - [net] vti[6]: fix packet tx through bpf_redirect() in XinY cases (Sabrina Dubroca) [1821375 1795145]
  - [net] xfrm interface: fix packet tx through bpf_redirect() (Sabrina Dubroca) [1821375 1795145]
  - [net] vti[6]: fix packet tx through bpf_redirect() (Sabrina Dubroca) [1821375 1795145]
  - [scripts] redhat: fix modpost.c prerequisites (Frantisek Hrbata) [1828229 1818499]
  - [infiniband] IB/core: Avoid deadlock during netlink message handling (Kamal Heib) [1821381 1818986]
  - [infiniband] RDMA/core: Support netlink commands in non init_net net namespaces (Kamal Heib) [1821381 1818986]
  - [misc] mei: me: add comet point (lake) H device ids (Ken Cox) [1825262 1815355]
  - [misc] mei: me: add comet point (lake) LP device ids (Ken Cox) [1825262 1815355]
  - [misc] mei: define dma ring buffer sizes for PCH12 HW and newer (Ken Cox) [1825262 1815355]
  - [misc] mei: hbm: define dma ring setup protocol (Ken Cox) [1825262 1815355]
  - [net] SUNRPC: fix krb5p mount to provide large enough buffer in rq_rcvsize (Steve Dickson) [1826219 1825388]
  - [mm] mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa (Rafael Aquini) [1827619 1763878]
  - [mm] mm: thp: fix flags for pmd migration when split (Rafael Aquini) [1827619 1763878]
  - [mm] mm: thp: relocate flush_cache_range() in migrate_misplaced_transhuge_page() (Rafael Aquini) [1827619 1763878]
  - [mm] mm: thp: fix mmu_notifier in migrate_misplaced_transhuge_page() (Rafael Aquini) [1827619 1763878]
  - [mm] mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition (Rafael Aquini) [1827619 1763878]
  - [md] Revert "dm: always call blk_queue_split() in dm_process_bio()" (Mike Snitzer) [1821382 1820705]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.3.1.el8_2]
changelog:
  - [kernel] sched/isolation: Allow "isolcpus=" to skip unknown sub-parameters (Peter Xu) [1832367 1799014]
  - [firmware] efi: fix a mistype in comments mentioning efivar_entry_iter_begin() (Vladis Dronov) [1829527 1804417]
  - [firmware] efi: add a sanity check to efivar_store_raw() (Vladis Dronov) [1829527 1804417]
  - [firmware] efi: fix a race and a buffer overflow while reading efivars via sysfs (Vladis Dronov) [1829527 1804417]
  - [net] net/smc: keep vlan_id for SMC-R in smc_listen_work() (Philipp Rudo) [1827631 1796890]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.4.1.el8_2]
changelog:
  - [bluetooth] Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature" (Gopal Tiwari) [1827620 1811534]
  - [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
  - [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.6.2.el8_2]
changelog:
  - [documentation] x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
  - [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
  - [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
  - [x86] x86/cpu: Add 'table' argument to cpu_matches() (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
  - [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}


author: Phil Sutter <psutter@redhat.com> [1.1.1-2.el8]
changelog:
  - chain: Hash chain list by name (Phil Sutter) [1658533]
  - chain: Add lookup functions for chain list and rules in chain (Phil Sutter) [1658533]
  - chain: Support per chain rules list (Phil Sutter) [1658533]
  - src: remove nftnl_rule_cmp() and nftnl_expr_cmp() (Phil Sutter) [1658533]


author: Phil Sutter <psutter@redhat.com> [1.1.1-3.el8]
changelog:
  - src: chain: Fix nftnl_chain_rule_insert_at() (Phil Sutter) [1666495]
  - src: chain: Add missing nftnl_chain_rule_del() (Phil Sutter) [1666495]
  - flowtable: Fix for reading garbage (Phil Sutter) [1661327]
  - flowtable: Fix memleak in nftnl_flowtable_parse_devs() (Phil Sutter) [1661327]
  - flowtable: Fix use after free in two spots (Phil Sutter) [1661327]
  - flowtable: Add missing break (Phil Sutter) [1661327]
  - object: Avoid obj_ops array overrun (Phil Sutter) [1661327]


author: Phil Sutter <psutter@redhat.com> [1.1.4-2.el8]
changelog:
  - obj/ct_timeout: Fix NFTA_CT_TIMEOUT_DATA parser (Phil Sutter) [1758673]
  - set_elem: Validate nftnl_set_elem_set() parameters (Phil Sutter) [1758673]
  - obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data() (Phil Sutter) [1758673]
  - set: Don't bypass checks in nftnl_set_set_u{32,64}() (Phil Sutter) [1758673]
  - obj/tunnel: Fix for undefined behaviour (Phil Sutter) [1758673]
  - set_elem: Fix return code of nftnl_set_elem_set() (Phil Sutter) [1758673]
  - obj: ct_timeout: Check return code of mnl_attr_parse_nested() (Phil Sutter) [1758673]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el8]
changelog:
  - chain: Correctly check realloc() call (Phil Sutter) [1778952]
  - flowtable: Correctly check realloc() call (Phil Sutter) [1778952]
  - chain: Fix memleak in error path of nftnl_chain_parse_devs() (Phil Sutter) [1778952]
  - flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() (Phil Sutter) [1778952]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el8]
changelog:
  - set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END (Phil Sutter) [1795223]
  - set: Add support for NFTA_SET_DESC_CONCAT attributes (Phil Sutter) [1795223]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795223]


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-7
changelog:
  - Remove libbluray support (#1747972)
  - CVE-2019-12448: Add query_info_on_read/write functionality (rhbz#1754506)
  - CVE-2019-12447: Use fsuid to ensure correct file ownership (rhbz#1752926)
  - CVE-2019-12449: Ensure correct ownership when moving to file:// uri (rhbz#1753972)


author: Miro Hrončok <mhroncok@redhat.com> - 1.1.5-12
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-88.el8_1_0.3
changelog:
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791565]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791565]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791565]
  - kvm-iscsi-Avoid-potential-for-get_status-overflow.patch [bz#1794500]
  - kvm-iscsi-Cap-block-count-from-GET-LBA-STATUS-CVE-2020-1.patch [bz#1794500]
  - Resolves: bz#1791565
    (CVE-2020-7039 virt:rhel/qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-8.1.0.z])
  - Resolves: bz#1794500
    (CVE-2020-1711 qemu-kvm: QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server [rhel-8.1.0.z])


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-3
changelog:
  - Fix for CVE-2019-9755
    (heap-based buffer overflow leads to local root privilege escalation)
    resolves: rhbz#1698503


author: Steve Dickson <steved@redhat.com> 2.3.3-17
changelog:
  - Moved the gating tests out of a patch and into the top dir (bz 1653927)
  - Move the mode corrections on /etc/nfs.conf to nfsconvert.py (bz 1655880)
  - gssd: add verbosity options to the rpc.gssd man page (bz 1668026)


author: Peter Jones <pjones@redhat.com> - 15-8
changelog:
  - Fix a load-address-dependent forever loop.
    Resolves: rhbz#1861977
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311
    Related: CVE-2020-15705
    Related: CVE-2020-15706
    Related: CVE-2020-15707


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.1.2.el8_2]
changelog:
  - [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
  - [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.7.0-2
changelog:
  - Drop explicit locale setting for python3, use C.UTF-8 for python2
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Marian Csontos <mcsontos@redhat.com> - 2.03.09-1
changelog:
  - Fix support for lvconvert --repair of pools used by third party applications.
  - Fix formating of vdopool (vdo_slab_size_mb was smaller by 2 bits).
  - Fix busy loop in dmeventd.
  - Fix lvmlocks.service using incorrect option.


author: Thomas Haller <thaller@redhat.com> - 1:1.26.0-3
changelog:
  - core: fix managing devices after resuming from sleep (rh #1855563)
  - dhcp: fix BPF filter for internal client on big endian arch (rh #1861488)
  - core: support warning log setting IPv6 MTU with IPv6 disabled (rh #1840989)
  - wifi: fix crash parsing incomplete BSS info (rh #1866395)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-4
changelog:
  - bond: fix Reapply does not update bond options (rh #1847814)
  - dhcp: support DHCPv6 fqdn_fqdn option for hostname (rh #1858344)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-7
changelog:
  - dhcp: add dhcp-vendor-class-identifier option (rh #1871042)
  - initrd: parse 'rd.net.dhcp.vendor-class' kernel cmdline arg (rh #1872299)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.26.0-8
changelog:
  - initrd: accept mac address as interface specifier (rh #1879795)
  - initrd: fix parsing IPv6 prefix length (rh #1879795)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-11
changelog:
  - initrd: disable ipv4 and ipv6 by default for vlan parent connection (rh #1903698)
  - initrd: fix parsing of ip= argument with dotted interface name (rh #1903695)
  - initrd: fix parsing with empty token (rh #1902791)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-26
changelog:
  - qemu: blockjob: Don't base bitmap handling of active-layer block commit on QEMU_CAPS_BLOCKDEV_REOPEN (rhbz#1857779)
  - qemu: blockjob: Actually delete temporary bitmap on failed active commit (rhbz#1857779)
  - qemu: block: Remove 'active-write' bitmap even if there are no bitmaps to merge (rhbz#1857779)
  - qemuDomainBlockPivot: Rename 'actions' to 'bitmapactions' (rhbz#1857779)
  - qemuDomainBlockPivot: Ignore failures of creating active layer bitmap (rhbz#1857779)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-27
changelog:
  - src: assume sys/sysmacros.h always exists on Linux (rhbz#1860421)
  - virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1860421)
  - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1860421)
  - virdevmapper: Don't use libdevmapper to obtain dependencies (CVE-2020-14339, rhbz#1860421)
  - virDevMapperGetTargets: Don't ignore EBADF (rhbz#1860421)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-28
changelog:
  - virdevmapper: Don't cache device-mapper major (rhbz#1860421)
  - virdevmapper: Handle kernel without device-mapper support (rhbz#1860421)
  - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1860421)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-29
changelog:
  - qemu: substitute missing model name for host-passthrough (rhbz#1850680)
  - rpc: gendispatch: handle empty flags (CVE-2020-25637)
  - rpc: add support for filtering @acls by uint params (CVE-2020-25637)
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
  - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
  - qemu: Fix domfsinfo for non-PCI device information from guest agent (rhbz#1858771)
  - virDomainNetFindIdx: add support for CCW addresses (rhbz#1837495)
  - check for NULL before calling g_regex_unref (rhbz#1861176)
  - virhostcpu.c: fix 'die_id' parsing for Power hosts (rhbz#1876742)
  - qemuFirmwareFillDomain: Fill NVRAM template on migration too (rhbz#1880418)
  - node_device: refactor udevProcessCCW (rhbz#1853289, rhbz#1865932)
  - node_device: detect CSS devices (rhbz#1853289, rhbz#1865932)
  - virsh: nodedev: ability to filter CSS capabilities (rhbz#1853289, rhbz#1865932)
  - node_device: detect DASD devices (rhbz#1853289, rhbz#1865932)
  - udevProcessCSS: Check if def->driver is non-NULL (rhbz#1853289, rhbz#1865932)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-30
changelog:
  - cpu_map: Add missing x86 features in 0x7 CPUID leaf (rhbz#1861506)
  - cpu_map: Add missing x86 features in 0x80000008 CPUID leaf (rhbz#1861506)
  - cpu_map: Add missing AMD SVM features (rhbz#1861506)
  - Add testdata for AMD EPYC 7502 (rhbz#1861506)
  - cpu_map: Defined and enable EPYC-Rome model (rhbz#1861506)
  - cpu_map: Remove monitor feature from EPYC-Rome (rhbz#1861506)
  - tests: qemuxml2argv: Use existing machine type for 'numatune-distances' case (rhbz#1749518)
  - qemuxml2xmltest: Add "numatune-distance" test case (rhbz#1749518)
  - conf: Move and rename virDomainParseScaledValue() (rhbz#1749518)
  - numa_conf: Drop CPU from name of two functions (rhbz#1749518)
  - qemu_command: Rename qemuBuildNumaArgStr() (rhbz#1749518)
  - qemuBuildMachineCommandLine: Drop needless check (rhbz#1749518)
  - numa_conf: Make virDomainNumaSetNodeCpumask() return void (rhbz#1749518)
  - Allow NUMA nodes without vCPUs (rhbz#1749518)
  - conf: Parse and format HMAT (rhbz#1749518)
  - conf: Validate NUMA HMAT configuration (rhbz#1749518)
  - numa: expose HMAT APIs (rhbz#1749518)
  - qemu: Introduce QEMU_CAPS_NUMA_HMAT capability (rhbz#1749518)
  - qemu: Build HMAT command line (rhbz#1749518)
  - qemuBuildNumaCommandLine: Fix @masterInitiator check (rhbz#1749518)
  - numa_conf: Properly check for caches in virDomainNumaDefValidate() (rhbz#1749518)
  - RNG: Allow interleaving of /domain/cpu/numa/cell children (rhbz#1749518)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-31
changelog:
  - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1872610)
  - qemu: format 'ramfb' attribute for mediated devices (rhbz#1876297)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-32
changelog:
  - util: replace macvtap name reservation bitmap with a simple counter (rhbz#1874304)
  - util: assign tap device names using a monotonically increasing integer (rhbz#1874304)
  - util: virNetDevTapCreate: initialize fd to -1 (rhbz#1874304)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-33
changelog:
  - cpu_map: Fix Icelake Server model number (rhbz#1537734)
  - cputestdata: Add test data for Snowridge (rhbz#1537734)
  - cpu_map: Add support for fsrm CPU feature (rhbz#1537734)
  - cpu_map: Add support for core-capability CPU feature (rhbz#1537734)
  - cpu_map: Add support for split-lock-detect CPU feature (rhbz#1537734)
  - cpu_map: Define and enable Snowridge model (rhbz#1537734)
  - util: fix typo in VIR_MOCK_WRAP_RET_ARGS() (rhbz#1607929)
  - util/tests: enable locking on iptables/ebtables commandlines in unit tests (rhbz#1607929)
  - util/tests: enable locking on iptables/ebtables commandlines by default (rhbz#1607929)
  - tests: fix iptables test case commandline options in virfirewalltest.c (rhbz#1607929)
  - network: be more verbose about the reason for a firewall reload (rhbz#1607929)
  - util: always check for ebtables/iptables binaries, even when using firewalld (rhbz#1607929)
  - util: synchronize with firewalld before we start calling iptables directly (rhbz#1607929)
  - util: call iptables directly rather than via firewalld (rhbz#1607929)
  - util: virhostcpu: Fail when fetching CPU Stats for invalid cpu (rhbz#1915183)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-34
changelog:
  - qemu: move cgroup cpu period and quota defines to vircgroup.h (rhbz#1915733)
  - vircgroupv1: use defines for cpu period and quota limits (rhbz#1915733)
  - vircgroupv2: use defines for cpu period and quota limits (rhbz#1915733)
  - vircgroup: fix cpu quota maximum limit (rhbz#1915733)
  - util: add virNetDevGetPhysPortName (rhbz#1918708)
  - util: avoid manual VIR_FREE of a g_autofree pointer in virPCIGetName() (rhbz#1918708)
  - util: Add phys_port_name support on virPCIGetNetName (rhbz#1918708)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-35
changelog:
  - vircgroupv2: properly detect placement of running VM (rhbz#1798463)
  - virsystemd: export virSystemdHasMachined (rhbz#1798463)
  - virsystemd: introduce virSystemdGetMachineByPID (rhbz#1798463)
  - virsystemd: introduce virSystemdGetMachineUnitByPID (rhbz#1798463)
  - vircgroup: use DBus call to systemd for some APIs (rhbz#1798463)
  - vircgroupv1: refactor virCgroupV1DetectPlacement (rhbz#1798463)
  - vircgroupv2: move task into cgroup before enabling controllers (rhbz#1798463)
  - vircgroup: introduce virCgroupV1Exists and virCgroupV2Exists (rhbz#1798463)
  - vircgroup: introduce nested cgroup to properly work with systemd (rhbz#1798463)
  - tests: add cgroup nested tests (rhbz#1798463)
  - vircgroup: correctly free nested virCgroupPtr (rhbz#1798463)
  - qemu: Add virtio related options to vsock (rhbz#1931548)
  - domain_validate: use defines for cpu period and quota limits (rhbz#1798463)
  - docs: use proper cpu quota value in our documentation (rhbz#1798463)
  - vircgroup: enforce range limit for cpu.shares (rhbz#1798463)
  - cgroup: use virCgroupSetCpuShares instead of virCgroupSetupCpuShares (rhbz#1798463)
  - cpumap: Add support for ibrs CPU feature (rhbz#1926864)
  - cpumap: Add support for svme-addr-check CPU feature (rhbz#1926864)
  - cpu_map: Add EPYC-Milan x86 CPU model (rhbz#1926864)
  - cpu_map: Install x86_EPYC-Milan.xml (rhbz#1926864)
  - cpu_map: Fix spelling of svme-addr-chk feature (rhbz#1926864)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b05 (EA)
  - Update release notes for 8u282-b05 and make some minor corrections.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b06 (EA)
  - Update release notes for 8u282-b06.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b07 (EA)
  - Update release notes for 8u282-b07.
  - Fix placement issue in release notes, caught by comparing with vanilla version.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b08 (GA)
  - Update release notes for 8u282-b08.
  - Resolves: rhbz#1908967


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-2
changelog:
  - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
  - Resolves: rhbz#1913868


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b09 (EA)
  - Update release notes for 8u292-b09.
  - Switch to EA mode.
  - Update tarball generation script to use PR3822 which handles
      JDK-8233228 & JDK-8035166 changes
  - Remove RH1868759 patch as this is now resolved upstream by JDK-8258833.
  - Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  - Require tzdata 2020f due to JDK-8259048
  - Require tzdata 2021a due to JDK-8260356
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  - Update release notes for 8u292-b10.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: Than Ngo <than@redhat.com> - 3.15.0-1
changelog:
  - Resolves: #1847433, rebase to 3.15.0 
  - Resolves: #1851105, PKCS #11 3.0 - baseline provider support
  - Resolves: #1851108, openCryptoki ep11 token: enhanced functionality
  - Resolves: #1851109, openCryptoki key management tool: key deletion function


author: Than Ngo <than@redhat.com> - 3.15.1-1
changelog:
  - Related: #1847433
    upstream fixes:
      - Free generated key in all error cases
      - CCA: Zeroize key buffer to avoid CCA 8/32 error
      - Do not delete the map-btree entry if destroying an object is not allowed
      - Remove now unused header timeb.h
      - TESTCASES: Use FIPS conforming keys for 3DES CBC-MAC test vectors
      - Fix buffer overrun in C_CopyObject
      - TPM: Fix double free in openssl_gen_key


author: Than Ngo <than@redhat.com> - 3.15.1-3
changelog:
  - Resolves: #1902022
     Fix compiling with c++
     Added error message handling for p11sak remove-key command


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-3
changelog:
  - Fix debug and fastdebug descriptions to emphasise the difference is optimisation or no optimisation.
  - Resolves: rhbz#1908972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-4
changelog:
  - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs.
  - Resolves: rhbz#1915071


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-7
changelog:
  - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps)
  - Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
  - Resolves: rhbz#1814915


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-8
changelog:
  - Perform static library build on a separate source tree with bundled image libraries
  - Make static library build optional
  - Based on initial work by Severin Gehwolf
  - Resolves: rhbz#1930513


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.7-0.1.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Fixed not-including fastdebug build in case of --without fastdebug
  - Resolves: rhbz#1942310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.11.0+7
  - Update release notes to 11.0.11.0+7
  - Switch to EA mode for 11.0.11 pre-release builds.
  - Require tzdata 2020f to match upstream change JDK-8259048
  - Remove RH1868754 patch as this is now resolved upstream by JDK-8258833
  - Remove RH1868740 & RH1883849 patches as these are now resolved by JDK-8259319
  - Resolves: rhbz#1942310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1
changelog:
  - Update to jdk-11.0.11.0+9
  - Update release notes to 11.0.11.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-7
changelog:
  - Use major/minor macros from sys/sysmacros.h instead of linux/kdev_t.h (vtrefny)
    Resolves: rhbz#1644825


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-9
changelog:
  - Remove device-mapper-multipath dependency from fs and part plugins (vtrefny)
    Resolves: rhbz#1700297


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-12
changelog:
  - Use cryptsetup to check LUKS2 label
    Resolves: rhbz#1778689
  - Fix expected cache pool name with newest LVM
    Related: rhbz#1778689


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-23
changelog:
  - Ignore the user.WofCompressedData xattr
    resolves: rhbz#1811539
  - sysprep: new ipa-client and kerberos-hostkeytab operations
    resolves: rhbz#1789592


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-25
changelog:
  - Upgrade components in virt:rhel module:stream for RHEL-8.3 release (rhbz#1828317)
  - conf: Don't format http cookies unless VIR_DOMAIN_DEF_FORMAT_SECURE is used (CVE-2020-14301)
  - util: Introduce a parser for kernel cmdline arguments (rhbz#1848997)
  - qemu: Check if s390 secure guest support is enabled (rhbz#1848997)
  - qemu: Check if AMD secure guest support is enabled (rhbz#1848997)
  - tools: Secure guest check on s390 in virt-host-validate (rhbz#1848997)
  - tools: Secure guest check for AMD in virt-host-validate (rhbz#1848997)
  - docs: Update AMD launch secure description (rhbz#1848997)
  - docs: Describe protected virtualization guest setup (rhbz#1848997)


