# changelog

author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-126.el7_3.7
changelog:
  - kvm-char-serial-cosmetic-fixes.patch [bz#1452332]
  - kvm-char-serial-Use-generic-Fifo8.patch [bz#1452332]
  - kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1452332]
  - kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1452332]
  - kvm-char-serial-Fix-emptyness-check.patch [bz#1452332]
  - kvm-char-serial-Fix-emptyness-handling.patch [bz#1452332]
  - kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1452332]
  - kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1452332]
  - kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1452332]
  - kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1452332]
  - kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1452332]
  - kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1452332]
  - kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1452332]
  - kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1452332]
  - kvm-serial-make-tsr_retry-unsigned.patch [bz#1452332]
  - kvm-serial-simplify-tsr_retry-reset.patch [bz#1452332]
  - kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1452332]
  - kvm-serial-remove-watch-on-reset.patch [bz#1452332]
  - Resolves: bz#1452332
    (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-126.el7_3.8
changelog:
  - kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1452332]
  - Resolves: bz#1452332
    (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-126.el7_3.9
changelog:
  - kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1452332]
  - Resolves: bz#1452332
    (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)


author: hekui <hekui2@huawei.com> - 1.5.3-126.el7_3.10
changelog:
  - Types: cves
  - ID: CVE-2017-9524
  - SUG: NA
  - DESC: segmentation fault due to client non-negotiation.


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-120.el7
changelog:
  - kvm-Add-install-dependency-to-newer-libusbx-version.patch [bz#1351106]
  - kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359729]
  - Resolves: bz#1351106
    (symbol lookup error: /usr/libexec/qemu-kvm: undefined symbol: libusb_get_port_numbers)
  - Resolves: bz#1359729
    (CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-7.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-121.el7
changelog:
  - kvm-json-parser-drop-superfluous-assignment-for-token-va.patch [bz#1276036]
  - kvm-qjson-Apply-nesting-limit-more-sanely.patch [bz#1276036]
  - kvm-qjson-Don-t-crash-when-input-exceeds-nesting-limit.patch [bz#1276036]
  - kvm-check-qjson-Add-test-for-JSON-nesting-depth-limit.patch [bz#1276036]
  - kvm-qjson-Spell-out-some-silent-assumptions.patch [bz#1276036]
  - kvm-qjson-Give-each-of-the-six-structural-chars-its-own-.patch [bz#1276036]
  - kvm-qjson-Inline-token_is_keyword-and-simplify.patch [bz#1276036]
  - kvm-qjson-Inline-token_is_escape-and-simplify.patch [bz#1276036]
  - kvm-qjson-replace-QString-in-JSONLexer-with-GString.patch [bz#1276036]
  - kvm-qjson-Convert-to-parser-to-recursive-descent.patch [bz#1276036]
  - kvm-qjson-store-tokens-in-a-GQueue.patch [bz#1276036]
  - kvm-qjson-surprise-allocating-6-QObjects-per-token-is-ex.patch [bz#1276036]
  - kvm-qjson-Limit-number-of-tokens-in-addition-to-total-si.patch [bz#1276036]
  - kvm-json-streamer-Don-t-leak-tokens-on-incomplete-parse.patch [bz#1276036]
  - kvm-json-streamer-fix-double-free-on-exiting-during-a-pa.patch [bz#1276036]
  - kvm-trace-remove-malloc-tracing.patch [bz#1360137]
  - Resolves: bz#1276036
    (Crash on QMP input exceeding limits)
  - Resolves: bz#1360137
    (GLib-WARNING **: gmem.c:482: custom memory allocation vtable not supported)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-122.el7
changelog:
  - kvm-virtio-validate-the-existence-of-handle_output-befor.patch [bz#1367040]
  - Resolves: bz#1367040
    (QEMU crash when guest notifies non-existent virtqueue)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-123.el7
changelog:
  - kvm-Fix-backport-of-target-i386-add-feature-flags-for-CP.patch [bz#1371619]
  - kvm-Add-skip_dump-flag-to-ignore-memory-region-during-du.patch [bz#1373088]
  - Resolves: bz#1371619
    (Flags xsaveopt xsavec xgetbv1 are missing on qemu-kvm)
  - Resolves: bz#1373088
    ([FJ7.3 Bug]: virsh dump with both --memory-only and --format option fails)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-124.el7
changelog:
  - kvm-target-i386-Add-support-for-FEAT_7_0_ECX.patch [bz#1372459]
  - kvm-target-i386-Add-more-Intel-AVX-512-instructions-supp.patch [bz#1372459]
  - Resolves: bz#1372459
    ([Intel 7.3 Bug] SKL-SP Guest cpu doesn't support avx512 instruction sets(avx512bw, avx512dq and avx512vl) (qemu-kvm))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-125.el7
changelog:
  - kvm-nbd-server-Set-O_NONBLOCK-on-client-fd.patch [bz#1285453]
  - Resolves: bz#1285453
    (An NBD client can cause QEMU main loop to block when connecting to built-in NBD server)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-126.el7
changelog:
  - kvm-virtio-recalculate-vq-inuse-after-migration.patch [bz#1376542]
  - Resolves: bz#1376542
    (RHSA-2016-1756 breaks migration of instances)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-126.el7_3.1
changelog:
  - kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1393042]
  - kvm-hw-i386-regenerate-checked-in-AML-payload-RHEL-only.patch [bz#1392027]
  - kvm-SPEC-file-flip-the-build-from-IASL-to-checked-in-AML.patch [bz#1392027]
  - Resolves: bz#1392027
    (shutdown rhel 5.11 guest failed and stop at "system halted")
  - Resolves: bz#1393042
    (system_reset should clear pending request for error (IDE))


author: maotingting <maotingting1@huawei.com> - 1.5.3-126.el7_3.5
changelog:
  - Type:cves
  - ID:CVE-2017-2615,CVE-2017-2620
  - SUG:NA
  - DEC:oob access while doing bitblt copy backward mode


author: zhangyi <zhangyi79@huawei.com> - 1.5.3-126.el7_3.6
changelog:
  - Type:cves
  - ID:CVE-2016-9603
  - SUG:NA
  - DESC:A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx
         VGA emulator's VNC display driver support; the issue could occur
         when a VNC client attempted to update its display after a VGA
         operation is performed by a guest. A privileged user/process
         inside a guest could use this flaw to crash the QEMU process or,
         potentially, execute arbitrary code on the host with privileges
         of the QEMU process.


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-117.el7
changelog:
  - kvm-target-i386-add-feature-flags-for-CPUID-EAX-0xd-ECX-.patch [bz#1327599]
  - kvm-target-i386-add-Skylake-Client-cpu-model.patch [bz#1327599]
  - Resolves: bz#1327599
    (Add Skylake CPU model)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-118.el7
changelog:
  - kvm-util-introduce-MIN_NON_ZERO.patch [bz#1318199]
  - kvm-BlockLimits-introduce-max_transfer_length.patch [bz#1318199]
  - kvm-block-backend-expose-bs-bl.max_transfer_length.patch [bz#1318199]
  - kvm-scsi-generic-Merge-block-max-xfer-len-in-INQUIRY-res.patch [bz#1318199]
  - kvm-raw-posix-Fetch-max-sectors-for-host-block-device.patch [bz#1318199]
  - kvm-scsi-Advertise-limits-by-blocksize-not-512.patch [bz#1318199]
  - kvm-util-Fix-MIN_NON_ZERO.patch [bz#1318199]
  - Resolves: bz#1318199
    (expose host BLKSECTGET limit in scsi-block (qemu-kvm))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-119.el7
changelog:
  - kvm-qxl-factor-out-qxl_get_check_slot_offset.patch [bz#1355730]
  - kvm-qxl-store-memory-region-and-offset-instead-of-pointe.patch [bz#1355730]
  - kvm-qxl-fix-surface-migration.patch [bz#1355730]
  - kvm-qxl-fix-qxl_set_dirty-call-in-qxl_dirty_one_surface.patch [bz#1355730]
  - Resolves: bz#1355730
    (spice-gtk shows outdated screen state after migration [qemu-kvm])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-136.el7
changelog:
  - kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
  - kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
  - kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
  - kvm-Add-sample-images-to-srpm.patch [bz#1436280]
  - Resolves: bz#1327593
    ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
  - Resolves: bz#1436280
    (sample images  for qemu-iotests are missing in the SRPM)
  - Resolves: bz#1440987
    (Remove texi2html build dependancy from RPM)
  - Resolves: bz#1441778
    (Stop building qemu-img for 32bit architectures.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-137.el7
changelog:
  - kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
  - Resolves: bz#1299875
    (system_reset should clear pending request for error (IDE))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-138.el7
changelog:
  - kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
  - kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
  - kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
  - kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
  - kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
  - kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
  - kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
  - kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
  - kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
  - kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
  - kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
  - kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
  - kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
  - kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
  - kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
  - kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
  - kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
  - kvm-serial-remove-watch-on-reset.patch [bz#1451470]
  - Resolves: bz#1451470
    (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-139.el7
changelog:
  - kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
  - Resolves: bz#1451470
    (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-140.el7
changelog:
  - kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
  - Resolves: bz#1456983
    (Character device regression due to missing patch)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-141.el7
changelog:
  - kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
  - kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
  - kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
  - kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
  - kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
  - kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
  - Resolves: bz#1451614
    (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
  - Resolves: bz#1452067
    (migration can confuse serial port user)
  - Resolves: bz#1455745
    (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)


author: zhangwenlong <zhangwenlong13@huawei.com> - 1.5.3-141.h1
changelog:
  - Types: cves
  - ID: CVE-2017-10664
  - SUG: NA
  - DESC: add kvm-qemu-nbd-Ignore-SIGPIPE.patch, qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z]


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-141.4.h2
changelog:
  - kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
  - kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
  - kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
  - kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
  - kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
  - kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
  - kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
  - kvm-vga-drop-line_offset-variable.patch [bz#1501294]
  - kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
  - kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
  - kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
  - Resolves: bz#1501294
    (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-141.4.h2
changelog:
  - kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
  - Resolves: bz#1501120
    (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-141.el7_4.1
changelog:
  - kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
  - Resolves: bz#1468107
    (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-141.el7_4.2
changelog:
  - kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
  - kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
  - Resolves: bz#1482468
    (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-141.el7_4.5
changelog:
  - kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
  - Resolves: bz#1515110
    (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-134.el7
changelog:
  - kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
  - kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
  - kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
  - kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
  - kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
  - kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
  - kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
  - kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
  - kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
  - kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
  - vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
  - kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
  - kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
  - kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
  - kvm-iotests-Fix-test-039.patch [bz#1427176]
  - kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
  - kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
  - kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
  - kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
  - kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
  - kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
  - kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
  - kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
  - kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
  - Resolves: bz#1335751
    (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
  - Resolves: bz#1377977
    (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
  - Resolves: bz#1415830
    ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
  - Resolves: bz#1419818
    (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
  - Resolves: bz#1427176
    (test cases of qemu-iotests failed)
  - Resolves: bz#1433920
    (Switch from librdmacm-devel to rdma-core-devel)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-135.el7
changelog:
  - kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
  - kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
  - kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
  - kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
  - kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
  - kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
  - kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
  - Resolves: bz#1430060
    (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-151.el7
changelog:
  - kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
  - kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
  - kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
  - kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
  - kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
  - kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
  - kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
  - kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
  - kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
  - kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
  - kvm-fw_cfg-add-write-callback.patch [bz#1411490]
  - kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
  - kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
  - kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
  - kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
  - kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
  - kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
  - kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
  - kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
  - kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
  - kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
  - kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
  - kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
  - kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
  - kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
  - kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
  - kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
  - kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
  - kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
  - kvm-dump-add-guest-ELF-note.patch [bz#1411490]
  - kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
  - kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
  - kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
  - kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
  - kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
  - kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
  - kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
  - kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
  - kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
  - kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
  - kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
  - Resolves: bz#1411490
    ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-152.el7
changelog:
  - kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
  - kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
  - kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-153.el7
changelog:
  - kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
  - kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
  - Resolves: bz#1411490
    ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
  - Resolves: bz#1435432
    (Emulated ISA serial port hangs randomly when sending lots of data from guest -> host)
  - Resolves: bz#1473536
    (Hangs in serial console under qemu)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-154.el7
changelog:
  - kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
  - kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
  - kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
  - Resolves: bz#1411490
    ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
  - Resolves: bz#1460872
    (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
  - Resolves: bz#1536883
    ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-155.el7
changelog:
  - kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
  - kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
  - kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
  - kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
  - Resolves: bz#1534691
    (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
  - Resolves: bz#1536883
    ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
  - Resolves: bz#1538866
    (qemu will coredump after executing info qtree)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-156.el7
changelog:
  - kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
  - kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
  - kvm-vnc-update-fix.patch [bz#1527405]
  - kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
  - kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
  - kvm-buffer-add-buffer_move.patch [bz#1527405]
  - kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
  - kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
  - kvm-vnc-zap-dead-code.patch [bz#1527405]
  - kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
  - kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
  - kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
  - kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
  - kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
  - kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
  - kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
  - kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
  - kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
  - kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
  - kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
  - kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
  - kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
  - kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
  - kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
  - kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
  - kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
  - kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
  - Resolves: bz#1518711
    (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
  - Resolves: bz#1527405
    (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-156.el7_5.1
changelog:
  - kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
  - kvm-vga-fix-region-calculation.patch [bz#1567913]
  - Resolves: bz#1567913
    (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-156.el7_5.2
changelog:
  - kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
  - Resolves: bz#1574075
    (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-156.el7_5.3
changelog:
  - kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584363]
  - kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584363]
  - Resolves: bz#1584363
    (CVE-2018-3639 qemu-kvm: hw: cpu: AMD: speculative store bypass [rhel-7.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-156.el7_5.4
changelog:
  - kvm-target-i386-introduce-kvm_put_one_msr.patch [bz#1596302]
  - kvm-apic-fix-2.2-2.1-migration.patch [bz#1596302]
  - kvm-x86-lapic-Load-LAPIC-state-at-post_load.patch [bz#1596302]
  - kvm-apic-drop-debugging.patch [bz#1596302]
  - kvm-apic-set-APIC-base-as-part-of-kvm_apic_put.patch [bz#1596302]
  - Resolves: bz#1596302
    (Windows 2012 Guest hangs after live migration with RTC clock stopped. [rhel-7.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-156.el7_5.5
changelog:
  - kvm-multiboot-bss_end_addr-can-be-zero.patch [bz#1549824]
  - kvm-multiboot-Remove-unused-variables-from-multiboot.c.patch [bz#1549824]
  - kvm-multiboot-Use-header-names-when-displaying-fields.patch [bz#1549824]
  - kvm-multiboot-fprintf-stderr.-error_report.patch [bz#1549824]
  - kvm-multiboot-Reject-kernels-exceeding-the-address-space.patch [bz#1549824]
  - kvm-multiboot-Check-validity-of-mh_header_addr.patch [bz#1549824]
  - kvm-slirp-remove-mbuf-m_hdr-m_dat-indirection.patch [bz#1586248]
  - kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586248]
  - Resolves: bz#1549824
    (CVE-2018-7550 qemu-kvm: Qemu: i386:  multiboot OOB access while loading kernel image [rhel-7.5.z])
  - Resolves: bz#1586248
    (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.5.z])


author: zhangyujing<zhangyujing1@huawei.com> - 1.5.3-156.5.h15
changelog:
  - Type:cves
  - ID:CVE-2017-5579 CVE-2017-9373 CVE-2018-12126 CVE-2019-11091 CVE-2018-12130 CVE-2018-12127
  - SUG:restart
  - DESC:fix CVE-2017-5579 CVE-2017-9373 CVE-2018-12126 CVE-2019-11091 CVE-2018-12130 CVE-2018-12127


author: wangyue<wangyue92@huawei.com> - 1.5.3-156.5.h23
changelog:
  - Type:cves
  - ID:CVE-2013-4526 CVE-2013-4530 CVE-2013-4539 CVE-2013-4540 CVE-2015-5279 CVE-2016-7161 CVE-2017-5667 CVE-2017-5987 CVE-2017-9503
  - SUG:restart
  - DESC:fix CVE-2013-4526 CVE-2013-4530 CVE-2013-4539 CVE-2013-4540 CVE-2015-5279 CVE-2016-7161 CVE-2017-5667 CVE-2017-5987 CVE-2017-9503


author: yaokai<yaokai13@huawei.com> - 1.5.3-156.5.h27
changelog:
  - Type:cves
  - ID:CVE-2017-5525 CVE-2017-5526 CVE-2017-9330
  - SUG:restart
  - DESC:fix CVE-2017-5525 CVE-2017-5526 CVE-2017-9330


author: yaokai<yaokai13@huawei.com> - 1.5.3-156.5.h28
changelog:
  - Type:cves
  - ID:CVE-2020-7039 CVE-2015-5239 CVE-2015-5278 CVE-2015-5745
  - SUG:restart
  - DESC:fix CVE-2020-7039 CVE-2015-5239 CVE-2015-5278 CVE-2015-5745


author: dongqian<dongqian6@huawei.com> - 1.5.3-156.5.h35
changelog:
  - Type:cves
  - ID:CVE-2019-20382 CVE-2019-15890
  - SUG:restart
  - DESC:fix CVE-2019-20382 CVE-2019-15890


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-150.el7
changelog:
  - kvm-Build-only-x86_64-packages.patch [bz#1520793]
  - Resolves: bz#1520793
    (Do not build non-x86_64 subpackages)


author: zhangwenlong <zhangwenlong13@huawei.com> - 1.5.3-156.h1
changelog:
  - Types: Bug fix
  - SUG: NA
  - DESC: fix installation failed when use develop mode in line 18 and line 3938


author: wangqing<euleros@huawei.com> - 1.5.3-156.h2
changelog:
  - Type:security
  - ID:CVE-2017-13672 CVE-2017-13711 CVE-2017-15124 CVE-2017-15268 CVE-2018-5683
  - SUG:restart
  - DESC:upgrade from 1.5.3-141.el7_4.6 to 1.5.3-156.h2


author: Rex Dieter <rdieter@fedoraproject.org> - 0.0.4-2
changelog:
  - update summary/description/Source_url
  - %files: track soname
  - cleaner cmake-fu
  - upstream noexecstack patch


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.0.4-3
changelog:
  - require the main package with exact version-release in -examples
  - remove explicit Requires: qt4-devel pkgconfig from -devel, now autodetected


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.1-8
changelog:
  - skip stripping some compiler flags (undocumented)
  - %files: track files closer (lib soname in particular)
  - -devel: avoid dep on cmake 
  - %check: +make test, pkgconfig check


author: Doug Ledford <dledford@redhat.com> - 0.4.6-6
changelog:
  - Fix the fact that qperf was using the wrong PF_RDS define now that RDS
    is integrated upstream and its assigned number is no longer temporary


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.2.0-1
changelog:
  - update to 3.2.0
  - remove BuildRoot tag in spec file
  - remove "rm -rf $RPM_BUILD_ROOT" at the beginning of %install section
  - remove %clean section
  - remove %defattr lines
  - add a joker for libqrencode.so.* files


author: Peter Gordon <peter@thecodergeek.com> - 3.2.0-2
changelog:
  - Add patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    + fix-LIBPTHREAD-macro.patch
  - Resolves: #795582 (qrencode-devel: Malformed pkgconfig file causes build to
    fail ("@LIBPTHREAD@: No such file or directory"))


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.3.1-1
changelog:
  - update to 3.3.1
  - remove "Group" tag in spec file
  - fix manfile suffix
  - remove patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    - upstream issue


author: wangyue<wangyue92@huawei.com> - 4.8.5-12.h4
changelog:
  - Type:cves
  - ID:CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 CVE-2015-0295 CVE-2014-0190
  - SUG:restart
  - DESC:fix CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 CVE-2015-0295 CVE-2014-0190


author: lirui<lirui130@huawei.com> - 4.8.5-12.h5
changelog:
  - Type:cves
  - ID:CVE-2018-15518 CVE-2018-19872
  - SUG:restart
  - DESC:fix CVE-2018-15518 CVE-2018-19872


author: LinYan <linyanly.lin@huawei.com> 19-23.6
changelog:
  * Fri Nov 14 2014 Than Ngo <than@redhat.com> - 19-23.5
  - Resolves: bz#1124472,  shell namespace pollution


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-7
changelog:
  - quagga is service which might implement networking, thus it should not have
    WantedBy=network.target in its systemd configuration
  - resolves: #976883


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.3-1
changelog:
  - update to 0.99.22.3
  - disable ospfapi and ospfclient
  - fix bogus dates in changelog
  - resolves : #984532


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.4-4
changelog:
  - fix link to upstream tarball (#1059219)
  - reference pidfiles of quagga daemons in service files (#842309)


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-6
changelog:
  - obsolete quagga-sysvinit subpackage
  - use macro to specify location where to install tmpfiles configuration file
  - fix rpm scripts handling documentation in info format


author: Ondřej Lysoněk <olysonek@redhat.com> - 0.99.22.4-5
changelog:
  - Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
    certain forms of UPDATE message allowing to crash or potentially execute
    arbitrary code
  - Resolves: rhbz#1546015


author: zhangruifang<zhangruifang1@huawei.com> - 0.99.22.4-5.h4
changelog:
  - Type:cves
  - ID:CVE-2016-2342 CVE-2018-5380 CVE-2018-5381
  - SUG:restart
  - DESC:fix CVE-2016-2342 CVE-2018-5380 CVE-2018-5381


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-4
changelog:
  - Do not fiddle with quota files on XFS and GFS (bug #846296)
  - Make sure option -d at quotacheck provides at least as much information as
    option -v (SF#3602777)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-6
changelog:
  - Add LGPLv2+ and GPLv2 to license declaration
  - Correct changelog dates
  - Package additional LDAP scripts as a documentation
  - Package XFS-specific tools


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-9
changelog:
  - Move /sbin/* files under /usr (bug #983179)
  - Harden executables due to rpc.rquotad and quota_nld daemons (bug #983179)
  - Document quotagrpadmins(5), quotatab(5), warnquota.conf(5), rcp.rquota(8)
    (bug #983179)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-11.1
changelog:
  - Add rpc-rquotad.service file which was known as nfs-rquotad.service
    in nfs-utils (bug #1316440)
  - Add nfs-rquotad.service alias for backward compatibility (bug #1316440)
  - Start rpc-rquotad.service when starting nfs-server.service (bug #1316440)


author: Honza Horak <hhorak@redhat.com> - 5.8.1-2
changelog:
  - Provides: bundled(gnulib) added, as per #821786
  - minor spec file clean up
  - install-info run in postin/postun


author: Doug Ledford <dledford@redhat.com> - 7.1_3.17-1
changelog:
  - Update version to match kernel submission
  - Fix for usnic_verbs instead of enic in udev rules file
  - Add support for setting the GUIDs and MACs of SRIOV vfs
  - Resolves: bz1094538


author: Doug Ledford <dledford@redhat.com> - 7.1_3.17-4
changelog:
  - Move init of all RDMA related kernel modules from various user space
    driver libraries (libmlx4, libcxgb3, libcxgb4, etc.) to rdma
    package and make those packages require rdma package.  This excludes
    libipathverbs since the modprobe files are provided by upstream.
  - Resolves: bz1164618


author: Doug Ledford <dledford@redhat.com> - 7.1_3.17-5
changelog:
  - Bump and rebuild to eliminate an rpm version compare issue on alternate
    arches that don't use the .el7 dist tag
  - Related: bz1164618


author: Doug Ledford <dledford@redhat.com> - 7.1_3.17-6
changelog:
  - The system libmlx4.conf file had the name of the config script
    backwards and on systems with ethernet devices in ib/eth mode,
    the eth port was not getting set properly
  - Related: bz1164618


author: Michal Schmidt <mschmidt@redhat.com> - 7.2_3.17-2
changelog:
  - udev rules: Defer setting of node description to rdma-ndd if it is
    installed.
  - Related: bz1169968


author: Stef Walter <stefw@redhat.com> - 0.14.6-5
changelog:
  - Don't crash when full_name_format is not in sssd.conf [#1051033]
    This is a regression from a prior update.


author: Stef Walter <stefw@redhat.com> - 0.16.0-1
changelog:
  - Updated to upstream 0.16.0
  - Resolves: rhbz#1174911
  - Resolves: rhbz#1142191
  - Resolves: rhbz#1142148


author: Zoltan Kota <z.kota[AT]gmx.net> 3.6-29
changelog:
  - Fix build on x86_64. Run autoreconf to update config files.
    autoconf >= 2.64 needs to patch the flex.m4 file.
    Fixing FTBFS bug #564601.


author: Matthias Clasen <mclasen@redhat.com> - 12.0.1-1
changelog:
  * Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 10.0.1-4
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Florian Festi <ffesti@redhat.com> - 9.1.0-65
changelog:
  - Fix fix for ppc64le libtool issues (#1113618)
  - As this package is noarch we need to have a runtime solution


author: David Shea <dshea@redhat.com> - 0.8.9-1
changelog:
  - backup old product id certificates before installation of new ones (jdornak)
    Resolves: rhbz#1148783


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.5-9
changelog:
  - Install LICENSE file with javadoc package
  - Add maven POM file
  - Update to current packaging guidelines
  - Convert versioned JAR to unversioned


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.0-10.5
changelog:
  - Install license file with javadoc package
  - Convert versioned javadoc to versionless
  - Update to current packaging guidelines
  - Remove msv provides and obsoletes


author: Ade Lee <alee@redhat.com> - 2.3.2-11
changelog:
  - Removed unneeded maven-checkstyle-plugin BR
  - Removed Tomcat 6 dependency
  - Replaced maven BR with maven-local


author: Ade Lee <alee@redhat.com> - 2.3.2-12
changelog:
  - Removed modules not needed for pki-core
  - Bugzilla # 973224 - resteasy-base must be split into subpackages to 
    simplify dependencies.  With help from msrb.


author: Tom Lane <tgl@redhat.com> 9.0.0-1
changelog:
  - Update pg_filedump to version 9.0.0, to support PostgreSQL 9.0.
  - Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update pg_filedump to version 9.1.0, to support PostgreSQL 9.1.
  - Point to new upstream home at pgfoundry.org.


author: lansheng<lansheng@huawei.com> - 1.7R4-5.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:eliminate the timestamp difference of the Messages.properties file


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-1
changelog:
  - rebase to most up2date upstream tarball, remove patches already upstream, fix
    code movements in patches (#928758)
  - fix man-page-day objections (private #948866)
  - fix the build for aarch64 (#926571)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-2
changelog:
  - package spax and scpio separately (#959917)
  - fedora-review fixes, unapplied patch
  - make the spax to be pax alternative (#960007)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-7
changelog:
  - we should provide /etc/rmt symlink for a while (related to #968980)
  - use the ssh as the default remote access method


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-2
changelog:
  - Add dist tag, fix a few rpmlint issues, rebuild due to
    wrong vendor (#451229)
  - Added ncurses requirement(#469390)


author: Phil Knirsch <pknirsch@redhat.com> - 8.1-4
changelog:
  - Added the "we-are-upstream" comments according to Fedora review (#226376)
  - Added -p option to install to preserve timestamps (#226376)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-5
changelog:
  - removed clear from dot-bash_logout (synchronized with bash,
    related to #429406)
  - removed unset USERNAME from dot-bash_profile (synchronized with
    bash, related to #196735)


author: Than Ngo <than@redhat.com> - 3.11-1
changelog:
  - 3.11
  - bz#540763, add IP allocation by pppd ability to pppoe-server
  - bz#808676, add missing % symbol for triggerun


author: Steve Dickson <steved@redhat.com> - 0.2.0-25
changelog:
  - Fixed some warnings in in6_fillscopeid() (bz 884165)
  - Fixed typo in rpcinfo manpage (bz 963512)
  - Removed unnecessary targets from rpcbind.service  (bz 1036791)


author: Steve Dickson <steved@redhat.com> - 0.2.0-27
changelog:
  - Add nss-altfiles to rpcbind user lookup path (bz 1171291)
  - Add support for systemd socket activation (bz 1203820)
  - Added a tmpfiles.d configuration (bz 1181779)
  - Shutdown cleanly (bz 1174653)


author: Steve Dickson <steved@redhat.com> - 0.2.0-29
changelog:
  - Change RPCBDIR to be /run since that will exist after a
    reboot and bindings wil be perserved during upgrades
    but not reboots. (bz 1240817)


author: Steve Dickson <steved@redhat.com> - 0.2.0-35
changelog:
  - Restart rpcbind.socket on restarts (bz 1303751)
  - Added localhost:111 to rpcbind socket activation (bz 1293430)
  - Soft static allocate rpc uid/gid (bz 1321279)


author: zhangshaoning <zhangshaoning1@huawei.com> - 0.2.0-38_3.h2
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC:Static memory was being freed do to a bug in the fix for CVE-2017-8779


author: gulining<gulining@huawei.com>- 0.2.0-38_3.h3
changelog:
  - Type:bugfix
  - SUG:NA
  - ID:NA
  - DESC:rpcbind rpcuser not being set in Makefile.am
  	configure check for nss.h
  	configure.ac Check for rpcsvc mount.h


author: Florian Festi <ffesti@redhat.com> - 4.11.3-14
changelog:
  - Enable plugin system but disable collection plugins. Needed for
    systemd-inhibit plugin (#1160401)
  - Move systemd-inhibit plugin into its own sub packge


author: Na Shu<shuna@huawei.com> - 4.11.3-17.h2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: rpm-build delete requires /usr/bin/gdb-add-index for safely.


author: zhangshaoning<euleros@huawei.com> - 4.11.3-17.h3
changelog:
  - Type:cves
  - ID:CVE-2017-7501
  - SUG:restart
  - DESC:Following symlinks to files when installing packages allows privilege escalation


author: Tom Callaway <spot@fedoraproject.org> - 1.4-10
changelog:
  - fix handling of ruby RI files as text files (they are binary files)
  - apply upstream fix for macro regexp


author: Thomas Woerner <twoerner@redhat.com> - 1.5-4
changelog:
  - enable bash-completion again, fixes (RHBZ#495529)
  - fixed rpmlint reports missing-lsb-keyword Default-Stop (rhbz#976341)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.8-1
changelog:
  - New version
    Resolves: rhbz#966639
  - Updated and defuzzified patches
  - Still use lua-5.1 (fedoras < f20)


author: Michal Sekletar <msekleta@redhat.com> - 0.17-71
changelog:
  - resolves: RHBZ #737244 #896583 #947213
  - migrate from xinetd to systemd configuration
  - close pam session correctly when client does not ask for separate error channel
  - fix pty handling which was broken by changes in /bin/login


author: Michal Sekletar <msekleta@redhat.com> - 0.17-72
changelog:
  - unit files must not be marked as config files
  - fix handling of non-native IPv6 connections via AF_INET6 socket


author: Pavel Šimerda <psimerda@redhat.com> - 3.0.9-14
changelog:
  - Resolves: #1052814 - rsync command is terminated with SIGSEGV
  - Resolves: #1052814 - add missing patch file


author: zhangwenlong<zhangwenlong13@huawei.com> - 3.0.9-15.h4
changelog:
  - Type:cves
  - ID:CVE-2017-17433 CVE-2017-17434
  - SUG:NA
  - DESC:repair CVE-2017-17433 and CVE-2017-17434


author: zhangshaoning<zhangshaoning1@huawei.com> - 3.0.9-15.h5
changelog:
  - Type:cves
  - ID:CVE-2018-5764
  - SUG:restart
  - DESC:The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.


author: gulining<gulining@huawei.com> - 3.0.9-15.h6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Tweak includes to fix non defined NULL on some systems
  	Test asprintf failure with 0 not = 0
  	Fix delete missing args when relative is active
  	Another asprintf return value check tweak
  	Complain if the block size=N value is too large
  	flist in_progress is only needed wginc_recurese
  	Fix bogus vanished file with g prefixes
  	Improve description of max delete
  	Mention right option when using delete delay
  	Get GPL name right
  	Fix error in write_sparse on incomplete write


author: zhangyujing<zhangyujing1@huawei.com> - 3.0.9-15.h7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix only write batch hang with hard links
  	Set the modtime to 0 on a partial file
  	Fix the visit all
  	Return an error if a buffer overflows in do_mknod
  	Try to fix bug 7865 for some acl EINVAL results
  	Warn about lack of yodl2man at end of configure run
  	Avoid an xattr finding glitch on the receiver


author: gulining<gulining@huawei.com> - 3.0.9-15.h8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Make sure the link destination file doesnt exist
          Fixgimprove the sort functions
          Fix could not find xattr errors
          Makefile rounding.h generation requires proto.h via h
          Dont allow daemon or server alias via popt
          Fix double fuzzy + link dest issue
          Dont overflow an allocated dest buf when input path


author: gongwentao1<gongwentao1@huawei.com> - 3.0.9-15.h9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix When stopping the "rsyncd" service, the unit enters failed state
  		Version-Release number of selected component (if applicable):
  		rsyncd[1583]: rsync error: received SIGINT, SIGTERM, or SIGHUP 
  		(code 20) at rsync.c(551) [Receiver=3.0.9]


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-1
changelog:
  - rebase to 7.4.7
    add requirement on libestr >= 0.1.9
    resolves: #836485
    resolves: #1020854
    resolves: #1040036
  - drop patch 4; not needed anymore
    rsyslog-7.4.2-imuxsock-rfc3339.patch
  - install the rsyslog-recover-qi.pl tool
  - fix a typo in a package description
  - add missing defattr directives
  - add a patch to remove references to Google ads in the html docs
    rsyslog-7.4.7-bz1030044-remove-ads.patch
    Resolves: #1030043
  - add a patch to allow numeric specification of UIDs/GUIDs
    rsyslog-7.4.7-numeric-uid.patch
    resolves: #1032198
  - change the installation prefix to "/usr"
    resolves: #1032223
  - fix a bad date in the changelog
    resolves: #1043622
  - resolve a build issue with missing mysql_config by adding
    additional BuildRequires for the mysql package
  - add a patch to resolve build issue on ppc
    rsyslog-7.4.7-omelasticsearch-atomic-inst.patch


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-3
changelog:
  - replace rsyslog-7.3.15-imuxsock-warning.patch
    with rsyslog-7.4.7-bz1053669-imuxsock-wrn.patch
    resolves: #1053669
  - add rsyslog-7.4.7-bz1052266-dont-link-libee.patch to prevent
    linking the main binary with libee
    resolves: #1052266
  - add rsyslog-7.4.7-bz1054171-omjournal-warning.patch to fix
    a condition for issuing a warning in omjournal
    resolves: #1054171
  - drop the "v5" string from the conf file as it's misleading
    resolves: #1040036


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-5
changelog:
  - move the rscryutil man page to the crypto subpackage
    resolves: #1056565
  - add a patch to prevent message loss in imjournal
    rsyslog-7.4.7-bz1038136-imjournal-message-loss.patch
    resolves: #1038136


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-6
changelog:
  - disable the imklog plugin by default
    the patch for rhbz#1038136 caused duplication of kernel messages since the
    messages read by the imklog plugin were now also pulled in from journald
    resolves: #1078654


author: wangzezhi<wangzezhi2@huawei.com> - 7.4.7-7.2.h7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Revert Check whether the time zone is changed every 15 minutes


author: zhangwenlong<zhangwenlong13@huawei.com> - 7.4.7-7.2.h8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix same short name timezone chagne missing
         add reopenOnTruncate parameter of imfile module


author: zhangyujing<zhangyujing1@huawei.com> - 7.4.7-7.2.h13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: bugfix dont export uninitialized data
  	bugfix correct variable mismatch
  	bugfix add a missing flag and prevent memleak
  	bugfix allocate correct object type
  	bugfix prevent passing NULL to strstr strlen
  	bugfix prevent division by zero
  	fix inconsistent write deref in action config processing
  	bugfix check array bounds


author: zhangyujing<zhangyujing1@huawei.com> - 7.4.7-7.2.h14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bugfix check return value of calloc
         bugfix check return value of malloc
         bugfix prevent a double free
         bugfix check return value of calloc
         bugfix check return value of ratelimitNew
         bugfix plug a memleak      
         bugfix add a missing pointer assignment
         bugfix plug memleaks in imptcp


author: liuqianya<liuqianya@huawei.com> - 7.4.7-7.2.h15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bugfix plug more memleaks in imptcp                     
         bugfix plug more memleaks in imptcp                     
         bugfix add a missing cleanup in case of anerror        
         add file missing in last commit                         
         bugfix plug a memleak in imuxsock
         bugfix plug memleaks and refactor the SubmitMsg function
         Remove redundant return
         bugfix plug a memleak in mmsnmptrapd


author: liuqianya<liuqianya@huawei.com> - 7.4.7-7.2.h16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Dont assign unused value
         Dont assign unused value
         Remove dead code
         Prevent passing null to putenv
         bugfix check return value of malloc
         Remove unused variable
         bugfix dont leak memory when realloc fails
         bugfix check return value
         Prevent dereferencing a NULL pointer


author: cangyi<cangyi@huawei.com> - 7.4.7-7.2.h17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bugfix prevent a potential memleak
         Remove dead code
         bugfix prevent an invalid free and plug a memleak
         bugfix allocate correct object type
         bugfix plug a memleak in AddAllowedSender
         bugfix plug a memleak in addAllowedSenderLine
         bugfix plug a memleak in parsAddrWithBits
         bugfix dont leak memory when realloc fails
         bugfix dont leak an open FD


author: liuqianya<liuqianya@huawei.com> - 7.4.7-7.2.h18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bugfix check return value of malloc
         bugfix always initialize an output parameter
         dont allocate a 0B chunk of memory
         bugfix dont leak memory returned by newActive
         bugfix dont leak memory returned by newActive
         bugfix plug a memleak in rulesetProcessCnf
         fix regression from commit a955a9900629e2065e3ed1dd9
         fix regression mem leak during normal operations fro
         bugfix plug a memleak in imuxsock


author: zhaiwenbin<zhaiwenbin1@huawei.com> - 7.4.7-7.2.h19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:For ratelimit checking, added check for time going backwards


author: zhaoliang<zhaoliang45@huawei.com> - 7.4.7-7.2.h23
changelog:
  - Type:cves
  - ID:CVE-2019-17041 CVE-2019-17042
  - SUG:restart
  - DESC:fix CVE-2019-17041 CVE-2019-17042


author: wangce <euler.huawei.com> - 7.4.7-7.2.h3
changelog:
  - Type:enhancement
  - ID:  NA
  - SUG: NA
  - DESC: change os_rotate_and_save_log.sh file permissions to 700


author: wangce <euler.huawei.com> - 7.4.7-7.2.h4
changelog:
  - Type:enhancement
  - ID:  NA
  - SUG: NA
  - DESC:add rsyslog-7.4.7-imjournal-count.patch for modify imjournal.c to update imjournal.state


author: heyitao <euler.huawei.com> - 7.4.7-7.2.h5
changelog:
  - Type:enhancement
  - ID:  NA
  - SUG: restart
  - DESC:add rsyslog-7.4.7-imjournal-statefile.patch, make state file handling in imjournal more robust, 
         patch source: https://bugzilla.redhat.com/show_bug.cgi?id=1245194


author: gulining<gulining@huawei.com> - 7.4.7-7.2.h6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bugfix CMP_LE expression eval worked incorrectly for
  	fix double free introduced this morning
  	Fix instance configuration
  	ompgsql bugfix improper handling of auto backgroundi
  	json templates are improperly created
  	typo fix
  	Fix for https github.com rsyslog rsyslog issues 61
  	build system do not modify user variable CFLAGS
  	fix imtcp imgssapi did not always pick up configured
  	imtcp fix busy loop in the tcp listener
  	bugfix README.md was missing in release tarball


author: wangzezhi<wangzezhi2@huawei.com> - 7.4.7-7.2.h7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Initialize counter outside of while loop when updating imjournal.state file Set file permission of imjournal.state to 0600


author: Tomas Heinrich <theinric@redhat.com> 8.8.0-1
changelog:
  - rebase to 8.8.0
    resolves: rhbz#1069690
    - drop patches merged upstream
    - version the dependency on liblognorm-devel
    - enable mmcount, mmexternal modules,
      remove imdiag, omruleset and pmrfc3164sd modules
      resolves: rhbz#1156359
  - add dos2unix to build requirements
  - make the build process more verbose
  - in accordance with an upstream change, the rsyslog service is now
    restarted automatically upon failure
  - adjust the default configuration file for the removal of
    /etc/rsyslog.d/listen.conf by the systemd package
    resolves: rhbz#1116864
  - disable the imklog module by default; kernel messages are read from journald
    resolves: rhbz#1083564
  - if there is no saved position in the journal, log only messages that are
    received after rsyslog is started; this is a safety measure to prevent
    excessive resource utilization
  - use documentation from the standalone rsyslog-docs project
  - move documentation from all subpackages into a single directory
  - mark the recover_qi.pl script as documentation


author: Tomas Heinrich <theinric@redhat.com> 8.10.0-1
changelog:
  - rebase to 8.10.0
  - drop patches merged upstream
  - use the right macro to specify the default pidfile
    resolves: rhbz#1224972
  - make logrotate tolerate missing log files
    resolves: rhbz#1205889
  - set the default service umask to 0066
    resolves: rhbz#1228192
  - use systemctl for sending SIGHUP to the service
    related: rhbz#1224972
  - add a patch to prevent a crash on empty messages
    resolves: rhbz#1224538
  - add a patch to fix several default parameters for message queues
    resolves: rhbz#1205696
  - add a patch to fix the storage size for a configuration option


author: gaochong <gaochong4@huawei.com> - 8.10.0-1.h1
changelog:
  - Type:CVE
  - ID:CVE-2017-12588
  - SUG:NA
  - DESC: The zmq3 input and output modules in rsyslog before 8.28.0
        interpreted description fields as format strings,
        possibly allowing a format string attack with unspecified impact


author: zhangshaoning<zhangshaoning1@huawei.com> - 8.10.0-1.h2
changelog:
  - Type:cves
  - ID:CVE-2018-16881
  - SUG:restart
  - DESC:imptcp: integer overflow when Octet-Counted TCP Framing is enabled


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-22
changelog:
  - Fix FTBFS with new tzdata
    Resolves: rhbz#1144023
  - Fix FTBFS due to a support for RFC 5649 in OpenSSL
    Resolves: rhbz#1145692


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-23
changelog:
  - Add missing patch for new tzdata
    Related: rhbz#1144023
  - Add missing patch for RFC 5649 in OpenSSL
    Related: rhbz#1145692


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.598-24
changelog:
  - Rebased to Ruby 2.0.0-p598.
    * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
        default-.gems.patch; subsumed
    * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
        subsumed
    * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
        -succ.patch; subsumed
    * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
    Resolves: rhbz#1071187
  - Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
    Resolves: rhbz#1164000
  - Fix for Proxy Realm feature.
    Resolves: rhbz#1122140
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164000


author: zhangyi <zhangyi79@huawei.com> - 2.0.0.598-25.h1
changelog:
  - Type:cves
  - ID:CVE-2016-2339
  - SUG:NA
  - DESC:An exploitable heap overflow vulnerability exists
         in the Fiddle::Function.new "initialize" function
         functionality of Ruby. In Fiddle::Function.new
         "initialize" heap buffer "arg_types" allocation
         is made based on args array length. Specially
         constructed object passed as element of args array
         can increase this array size after mentioned
         allocation and cause heap overflow.


author: zhangyi <zhangyi79@huawei.com> - 2.0.0.598-25.h2
changelog:
  - Type:cves
  - ID:CVE-2015-3900
  - SUG:NA
  - DESC:ubygems: DNS hijacking vulnerability in api_endpoint()


author: zhangyi <zhangyi79@huawei.com> - 2.0.0.598-25.h3
changelog:
  - Type:cves
  - ID:CVE-2016-2337
  - SUG:NA
  - DESC:Type confusion exists in _cancel_eval Ruby's TclTkIp class method.
         Attacker passing different type of object than String as "retval"
         argument can cause arbitrary code execution.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-17
changelog:
  - Heap overflow in floating point parsing (CVE-2013-4164).
    * ruby-2.0.0-p353-CVE-2013-4164-ignore-too-long-fraction-part.patch
    - Resolves: rhbz#1033503
  - Allow MD5 in OpenSSL tests.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-18
changelog:
  - Fix FTBFS due to expired certificate for IMAP test case.
  - Fix test_aes_gcm_wrong_tag random failures.
    - Resolves: rhbz#1048899


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-30
changelog:
  - Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
    failures with newest openssl.
    Resolves: rhbz#1416123
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Extend 'gem_' macros for pre-release version support.
    Resolves: rhbz#1397390
  - Make symlinks for json gem.
    Resolves: rhbz#1308992


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-31
changelog:
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903
  - Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
    Resolves: CVE-2017-0899
  - Fix a DOS vulernerability in the query command (CVE-2017-0900).
    Resolves: CVE-2017-0900
  - Fix a vulnerability in the gem installer that allowed a malicious gem
      to overwrite arbitrary files (CVE-2017-0901).
    Resolves: CVE-2017-0901
  - Fix a DNS request hijacking vulnerability (CVE-2017-0902).
    * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
    Resolves: CVE-2017-0902
  - Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
    * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
    Resolves: CVE-2017-0898
  - Escape sequence injection vulnerability in the Basic
      authentication of WEBrick (CVE-2017-10784).
    * ruby-2.2.8-sanitize-any-type-of-logs.patch
    Resolves: CVE-2017-10784
  - Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
    * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
    Resolves: CVE-2017-14064
  - Command injection vulnerability in Net::FTP (CVE-2017-17405).
    * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
    Resolves: CVE-2017-17405
  - Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
    * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
    Resolves: CVE-2017-14033
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Resolves: CVE-2017-17790


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-32
changelog:
  - Add Psych.safe_load
    * ruby-2.1.0-there-should-be-only-one-exception.patch
    * ruby-2.1.0-Adding-Psych.safe_load.patch
    Related: CVE-2017-0903
  - Disable Tokyo TZ tests broken by recen tzdata update.
    * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
    Related: CVE-2017-0903


author: zhangshaoning<zhangshaoning1@huawei.com> - 2.0.0.648-33
changelog:
  - Type:cves
  - ID:CVE-2017-0898 CVE-2017-0899 CVE-2017-0900 CVE-2017-0901 CVE-2017-0902 CVE-2017-0903 \
       CVE-2017-10784 CVE-2017-14033 CVE-2017-14064 CVE-2017-17405 CVE-2017-17790
  - SUG:restart
  - DESC:update version to 2.0.0.648-33


author: zhangshaoning<zhangshaoning1@huawei.com> - 2.0.0.648-33.h5
changelog:
  - Type:cves
  - ID:CVE-2018-1000073 CVE-2018-1000075 CVE-2018-1000076
  - SUG:restart
  - DESC:fix CVE-2018-1000073 CVE-2018-1000075 CVE-2018-1000076


author: zhangshaoning<zhangshaoning1@huawei.com> - 2.0.0.648-33.h11
changelog:
  - Type:cves
  - ID:CVE-2018-6914 CVE-2018-8777 CVE-2018-8778 CVE-2018-8779 CVE-2018-8780
  - SUG:restart
  - DESC:fix CVE-2018-6914 CVE-2018-8777 CVE-2018-8778 CVE-2018-8779 CVE-2018-8780


author: zhaiwenbin<zhaiwenbin1@huawei.com> - 2.0.0.648-33.h12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix causing SEGV if closed IO object that is set Readline.input or Readline.output. Patched by akr [ruby-dev:47509] [Bug #8644]


author: yaolijun<yaolijun2@huawei.com> - 2.0.0.648-33.h13
changelog:
  - Type:cves
  - ID:CVE-2018-16395 CVE-2018-16396
  - SUG:restart
  - DESC:fix CVE-2018-16395 CVE-2018-16396


author: lunankun<lunankun@huawei.com> - 2.0.0.648-33.h14
changelog:
  - Type:cves
  - ID:CVE-2019-8321 CVE-2019-8322 CVE-2019-8323 CVE-2019-8324 CVE-2019-8325
  - SUG:restart
  - DESC:fix CVE-2019-8321 CVE-2019-8322 CVE-2019-8323 CVE-2019-8324 CVE-2019-8325


author: zhangyujing<zhangyujing1@huawei.com> - 2.0.0.648-33.h16
changelog:
  - Type:cves
  - ID:CVE-2017-9224 CVE-2017-9226 CVE-2017-9227 CVE-2017-9228
  - SUG:restart
  - DESC:fix CVE-2017-9224 CVE-2017-9226 CVE-2017-9227 CVE-2017-9228


author: ruanweidong<ruanweidong1@huawei.com> - 2.0.0.648-33.h18
changelog:
  - Type:cves
  - ID:CVE-2017-17742 CVE-2018-1000073 CVE-2018-1000074 CVE-2018-1000077 CVE-2018-1000078 CVE-2018-1000079
  - SUG:restart
  - DESC:fix CVE-2017-17742 CVE-2018-1000073 CVE-2018-1000074 CVE-2018-1000077 CVE-2018-1000078 CVE-2018-1000079


author: Pavel Valena <pvalena@redhat.com> - 2.0.0.648-26
changelog:
  - Rebase to Ruby 2.0.0-p648
    Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
    * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
        with-DESTDIR.patch; subsumed
    * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
    * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
        fails.patch; subsumed
  - Remove tests depending on europe/moscow to avoid failures due to tzdata change
    https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
  - Add checks for systemtap, abrt hook and rubygems version
  - Fix significant hash table performance slowdown on ppc64le
    Resolves: rhbz#1163032
  - Support in no_proxy for domain names with whitespaces and leading dots
    Resolves: rhbz#1300433


author: zhangshaoning<zhangshaoning1@huawei.com> - 2.0.0.648-33
changelog:
  - Type:cves
  - ID:CVE-2017-0898 CVE-2017-0899 CVE-2017-0900 CVE-2017-0901 CVE-2017-0902 CVE-2017-0903 CVE-2017-10784 CVE-2017-14033 CVE-2017-14064 CVE-2017-17405 CVE-2017-17790
  - SUG:restart
  - DESC:upgrade from 2.0.0.598-25.h6 to 2.0.0.648-33


author: zhangshaoning<zhangshaoning1@huawei.com> - 2.0.0.648-33.h2
changelog:
  - Type:cves
  - ID:CVE-2016-2339 CVE-2016-2337
  - SUG:restart
  - DESC:An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize" function functionality of Ruby(CVE-2016-2339).


author: <vondruch@redhat.com> - 1.7.8-2
changelog:
  - Update to Bundler 1.7.8.
    Resolves: rhbz#1194243
  - Use symlinks for vendored libraries.
    Resolves: rhbz#1163076


author: Vít Ondruch <vondruch@redhat.com> - 0.16.0-1
changelog:
  - Update to thor 0.16.0.
  - Remove rubygem(diff-lcs) dependency, since it is just optional.
  - Remove rubygem(ruby2ruby) dependnecy, since it is just optional, to allow
    conversion of Rakefiles to Thorfiles (but it doesnt work withou ParseTree anyway).


author: Honza Horak <hhorak@redhat.com> - 0.17-70
changelog:
  - Minor spec file changes
  - Use new systemd macros (Resolves: #850302)
  - Use systemd notify messages


author: Honza Horak <hhorak@redhat.com> - 0.17-77
changelog:
  - Free already alocated memory when parsing of RPC request failed
  - Require systemd instead of systemd-units
  - Remove SysV init converting


author: Jorge A Gallegos <kad@blegh.net> - 1.58-2
changelog:
  - Added docs to files section in spec
  - Password file passwd-s3fs is installed as 0644 and changed in post


author: Corey Gilmore <git@cfgci.com> - 1.61-1
changelog:
  - Initial build of 1.61. Disabled generation of useless debug package. Using spec from https://bugzilla.redhat.com/show_bug.cgi?id=725292


author: Nils Philippsen <nils@redhat.com> - 1.0.24-1
changelog:
  - version 1.0.24
  - use (hopefully stable) Alioth download URL
  - update udev patch, remove obsolete patches
  - use udev hwdb instead of huge rulesets


author: Nils Philippsen <nils@redhat.com> - 1.0.23-18
changelog:
  - build against libusb-1.0 on Fedora >= 18 (#1003193)
  - require libusbx-devel instead of libusb1-devel which is obsolete


author: Nils Philippsen <nils@redhat.com> - 1.0.14-10
changelog:
  - add missing documentation files AUTHORS, COPYING, README
  - don't distribute sane-style.rc
  - use %buildroot consistently
  - explain missing xcam.desktop file


author: Nils Philippsen <nils@redhat.com> - 1.0.14-14
changelog:
  - clean up:
    - don't BR: gimp-devel, R: sane-backends
    - get rid of buildroot, %makeinstall and %clean section
    - dont obsolete/provide "sane" (ancient)


author: Martin Milata <mmilata@redhat.com> - 0.13-5
changelog:
  - Fix minor bugs found by static analyzers
    - Resolves: #1142856
  - Return empty duphash for koopses with no reliable frames
    - Resolves: #1123262
  - Fix parsing of python SyntaxError exceptions
    - Resolves: #1142339
  - Fix parsing of ppc64 gdb stacktraces
    - Resolves: #1142338
  - Limit the depth of generated stacktrace to avoid huge reports
    - Resolves: #1142346
  - Add authentication support to uReport, needed for reporting to customer portal
    - Resolves: #1139555


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-11
changelog:
  - Fix mounted filesystem is shown as disabled when fstab entry uses link, UUID or LABEL
    Resolves: #921487


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.0-5
changelog:
  - Add support for arbitrary names of network devices in Linux_NetworkPortImplementsIPEndpoint
    association
    Resolves: #682386
  - Remove macros from changelog, register to sfcb


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.2.0-3
changelog:
  - Fix provider segfaults when enumerating instances of Linux_SysfsAttribute class
  - Fix provider doesn't show much sysfs entries
  - Add mofs registration for various CIMOMs


author: Tomas Bzatek <tbzatek@redhat.com> - 0.8.0-10.20120315cvs
changelog:
  - Add support for rsyslog $IncludeConfig directive (#971807)
  - Add support for filter definitions (#971807)
  - Various rsyslog compatibility fixes (#971807)


author: Roman Rakus <rrakus@redhat.com> - 2.2.7-3
changelog:
  - Fixed a typo
  - Added missing providers
  - improved providers registration
  - Fixed owning of filesystem's directories (man)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.16-11
changelog:
  - Fix connection fails to openwsman with sfcbLocal frontend
    Resolves: #1047781
  - Fix multilib issue with man page and config file
    Resolves: #1067842


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.16-3
changelog:
  - Fix indCIMXmlHandler crash in IndCIMXMLHandlerInvokeMethod with Embedded Instances 
    Resolves: #957747
  - Fix sfcb creates invalid XML with embedded object inside embedded object
    Resolves: #957742


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.5-6
changelog:
  - Move libcimcClientXML.so from -devel to main package - it's needed for proper function
    Resolves: #1056407


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-7
changelog:
  - Fix wrong usage of libcurl API, which caused segfaults when wbemcli was used
    with https scheme (patch by kdudka@redhat.com)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.23-1
changelog:
  - Rebase to upstream scap-security-guide-0.1.23 version
  - Update upstream tarball source URL to GitHub archive location
  - Drop the following patches that have been accepted upstream:
    * scap-security-guide-0.1.19-rhel7-include-only-rht-ccp-profile.patch
    * scap-security-guide-0.1.19-rhel7-drop-restorecond-since-in-optional.patch
    * scap-security-guide-0.1.19-update-man-page-for-rhel7-content.patch
    * scap-security-guide-0.1.19-rhel7-update-pam-XCCDF-to-use-pam_pwquality.patch
    * scap-security-guide-0.1.20-rhel7-shared-fix-limit-password-reuse-remediation.patch
    * scap-security-guide-0.1.20-rhel6-rhel7-PR#280-set-deny-prerequisite-#1.patch
    * scap-security-guide-0.1.20-rhel6-rhel7-set-deny-prerequisite-#2.patch
    * scap-security-guide-0.1.20-shared-fix-set-deny-for-failed-password-attempts-remediation.patch
    * scap-security-guide-0.1.20-rhel7-specify-exact-profile-name-when-generating-guide.patch
  - Include the datastream versions of Firefox and Java Runtime Environment (JRE) benchmarks
  - Include USGCB and DISA STIG profile kickstart files for Red Hat Enterprise Linux 6


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.24-1
changelog:
  - Rebase to upstream scap-security-guide-0.1.24 version
  - Start producing the -doc subpackage to provide the HTML formatted
    documents containing security guides generated from shipped XCCDF benchmarks


author: Martin Preisler <mpreisle@redhat.com> 0.1.24-2
changelog:
  - Break-down firewalld rule description for Red Hat Enterprise Linux 7 product
    into multiple lines, prevents HTML guide UX issues


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.24-3
changelog:
  - Add remediation script for 'accounts_passwords_pam_faillock_unlock_time' rule
    for Red Hat Enterprise Linux 7 product
  - Override title and description for all existing profiles for Red Hat
    Enterprise Linux 6 product that are extending another SCAP profile
    (RHBZ#1246529)
  - Correct various issues in the included Oscap Anaconda Addon PCI-DSS profile
    kickstart file for Red Hat Enterprise Linux 7 product
  - Add remediation script for 'audit_rules_time_clock_settime' rule for
    Red Hat Enterprise Linux 7 product
  - Add remediation scripts for 'audit_rules_time_adjtimex',
    'audit_rules_time_settimeofday', and 'audit_rules_time_stime' rules for
    Red Hat Enterprise Linux 7 product
  - Tag current PCI-DSS profile for Red Hat Enterprise Linux 7 product with
    "Draft" label
  - Disable the following rules in the PCI-DSS profile for the Red Hat Enterprise
    Linux 7 product:
    * dconf_gnome_screensaver_idle_delay -- missing remediation script,
    * dconf_gnome_screensaver_idle_activation -- missing remediation script,
    * dconf_gnome_screensaver_lock_enabled -- missing remediation script,
    * audit_rules_login_events -- incorrect OVAL check (upstream issue #607),
    * audit_rules_privileged_commands -- missing remediation script, and
    * audit_rules_immutable -- missing remediation script.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.25-3
changelog:
  - Drop "Verify and Correct File Permissions with RPM" rule from the PCI-DSS
    profile for Red Hat Enterprise Linux 7 (RH BZ#1267861)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.19-2
changelog:
  - Fix Limit Password Reuse remediation script error
  - Fix Set Deny For Failed Password Attempts remediation script error
  - Use RHT-CCP profile name when generating HTML guide
  - Describe RHT-CCP profile in the manual page


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
  - Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
  - change working directory to build directory when building ext (rhbz#916695)
  - use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
  - unbundle python-six (bug rhbz#1019642)


author: Lubos Kardos <lkardos@redhat.com> - 20130529-10
changelog:
  - Allow to use vendor prefix in packages names
  - Include %nfsmountable macro into scl's rpm macros file


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-13
changelog:
  - bump the version to get in sync with 7.1 branch
  - Reflect the state of %nfsmountable macro in collections' rpm macro files
  - escape all the % chars in changelog


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
  - Multiple packages are installing files under /etc/tmpfiles.d
  - comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
  - Resolves: rhbz#1121958


author: zhangshaoning<euleros@huawei.com> - 4.1.0-0.23.20120314git3c2946.h1
changelog:
  - Type:cves
  - ID:CVE-2015-6806
  - SUG:NA
  - DESC:Stack overflow due to deep recursion causing process freeze


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.5-2.el7
changelog:
  - seabios-Build-seabios-as-noarch.patch [bz#1118380]
  - Resolves: bz#1118380
    (Seabios build required for ppc64)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.5-4.el7
changelog:
  - seabios-smbios-set-bios-vendor-version-fields-to-Seabios-0.5.patch [bz#1123299]
  - Resolves: bz#1123299
    (smbios table 0 vendor string should be Seabios (for rhel6 compatibility) [7.1+7.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.5-5.el7
changelog:
  - seabios-Workaround-for-a-win8.1-32-S4-resume-bug.patch [bz#1050775]
  - seabios-boot-Fix-boot-order-for-SCSI-target-lun-9.patch [bz#1096560]
  - Resolves: bz#1096560
    (fail to assign correct order for the boot device in seabios as we specified the bootindex in qemu-kvm cli(under the same virtio-scsi-pci))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.5-6.el7
changelog:
  - seabios-Extend-ExclusiveArch-to-power64-architectures.patch [bz#1163924]
  - Resolves: bz#1163924
    (seabios is needed for ppc64 and ppc64le but marked ExclusiveArch aarch64)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.5-8.el7
changelog:
  - seabios-turn-off-stack-switching-for-vgabios.patch [bz#1182634]
  - Resolves: bz#1182634
    (Remove CONFIG_VGA_ALLOCATE_EXTRA_STACK)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.5-9.el7_1
changelog:
  - seabios-boot.c-delay-exiting-boot-if-menu-key-is-ESC.patch [bz#841638]
  - seabios-boot-switch-default-menu-key-to-ESC.patch [bz#841638]
  - Resolves: bz#841638
    (Provide a platform agnostic approach to invoking the BIOS, boot menu, or other BIOS functions)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.5-10.el7
changelog:
  - seabios-fw-pci-scan-all-buses-if-extraroots-romfile-is-prese.patch [bz#1235381]
  - seabios-fw-pci-map-memory-and-IO-regions-for-multiple-pci-ro.patch [bz#1235381]
  - Resolves: bz#1235381
    (RFE: configure guest NUMA node locality for guest PCI devices)


author: Yash Mankad <ymankad@redhat.com> - 1.7.5-11.el7
changelog:
  - seabios-bootorder-Update-extra-pci-root-buses-bootorder-form.patch [bz#1242968]
  - Resolves: bz#1242968
    (pci: support booting of devices behind PXB)


author: Rui Matos <rmatos@redhat.com> - 3.8.0-5
changelog:
  - Fix for "seahorse-nautilus broken by glib2 regression related to
    SIGCHLD warnings"
  - Resolves: #1093123


author: Guoqiang Deng <dengguoqiang@huawei.com> 2.0-1.6
changelog:
  - Modify the definition of readonly variable in /etc/profile
  - Modify errors of %post in spec
  - Optimized upgrade of spec


author: xuewenzhen<euleros@huawei.com> - 2.0-1.12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:set ALWAYS_SET_PATH option to yes in /etc/login.defs by default.


author: zhangyu<zhangyu235@huawei.com> - 2.0-1.21
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:remove unused config of ssh clients as attack requires that the server default to using unsecure algorithm


author: yuzhanzhan<yuzhanzhan@huawei.com> - 2.0-1.24
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:do not add repeated content when security hardening is broken


author: Martin Briza <mbriza@redhat.com> - 4.2.1-9
changelog:
  - Backported commit from upstream to fix treating "x26" as "&" character
  - Added virtual provide for gnulib according to http://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries 
    Resolves: #812067 #821776


author: Martin Briza <mbriza@redhat.com> - 4.2.2-1
changelog:
  - New release
  - Dropping included patches: sed-4.2.1-data-loss.patch sed-4.2.1-fix-0x26-on-RHS.patch sed-4.2.1-makecheck.patch
  - Dropping unused patch sed-4.2.1-dummyparam.diff
  - Regenerated sed-4.2.{1,2}-copy.patch
  - Minor change to patching (creating backup files)


author: Jan Pacner <jpacner@redhat.com> - 4.2.2-5
changelog:
  - Related: #948598 (Man page scan results for sed; introduce -c argument, add
    help for -b --binary arguments, cleanup arguments & help)


author: liangyun<liangyun2@huawei.com> - 4.2.2-5.h3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix mishandling of overlapping address ranges
         -i: don't leave behind a temporary sedXXXXXX file
         avoid warning about implicit declaration of unlink
         fix --follow-symlinks to work when reading stdin
         fix a heap-clobbering buffer overrun
         fix minor multibyte parsing bug
         avoid one-byte heap buffer overrun
         fix incorrect match for title case
         fix -Wformat-exposed errors in uses of "panic"
         avoid %x-format argument type mismatch
         refactor end-of-line parsing
         reject RE searches on buffers larger than INT_MAX
         fix heap buffer overflow from invalid references
         fix extraneous NUL in s///n command
         do not close stderr on exit
         avoid a UMR bug when processing an invalid multibyte sequence
         add cfg.mk, derived from grep's
         enable sc_const_long_option syntax check
         enable sc_cast_of_alloca_return_value syntax check
         avoid false-positive used-uninit. warning from gcc
         avoid gcc warning about unused macro
         avoid a gcc "const discard" warning
         add three casts-in-initialization to avoid warnings
         convert obsolescent @VAR@ notation to $(VAR)
         fix "y" to work with NUL in the RHS
         Modify documentation to note sed "-E" option,now in POSIX,for EREs
         Set PATH_MAX to some constant in ase it is not defined in system
         add an example on using | in extende
          avoid bootstrap failure


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.1
changelog:
  - Allow openvswitch read/write hugetlb filesystem.
  Resolves: rhbz#1299405
  - Allow smbcontrol domain to send sigchld to ctdbd domain.
  Resolves: rhbz#1301522


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.2
changelog:
  - Add fs_manage_hugetlbfs_files() interface.
  Resolves: rhbz#1299405
  - Allow openvswitch to manage hugetlfs files and dirs
  Resolves: rhbz#1299405


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.4
changelog:
  - Label /usr/bin/ganesha.nfsd as glusterd_exec_t to run ganesha as glusterd_t.
  - Allow glusterd_t stream connect to rpbind_t.
  - Allow cluster_t to create symlink /var/lib/nfs labeled as var_lib_nfs_t.
  - Add interface rpc_filetrans_var_lib_nfs_content()
  - Add new boolean: rpcd_use_fusefs to allow rpcd daemon use fusefs.
  Resolves: rhbz#1333875
  Resolves: rhbz#1333903


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.5
changelog:
  - Label /var/log/ganesha.log as gluster_log_t
  - Allow glusterd_t domain to create glusterd_log_t files.
  - Label /var/run/ganesha.pid as gluster_var_run_t.
  Resolves: rhbz#1333903


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-60.6
changelog:
  - Allow ganesha-ha.sh script running under unconfined_t domain communicate with glusterd_t domains via dbus.
  Resolves:#1340365


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.8
changelog:
  - Add SELinux support for ceph filesystem.
  Resolves: rhbz#1365640
  - Allow sanlock service to read/write cephfs_t files
  Resolves: rhbz#1365640


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.9
changelog:
  - Dontaudit ldconfig read gluster lib files.
  Resolves: rhbz#1372182
  - Add interface glusterd_dontaudit_read_lib_dirs()
  Resolves: rhbz#1372182
  - Dontaudit Occasionally observing AVC's while running geo-rep automation
  Resolves: rhbz#1372182
  - Allow glusterd to manage socket files labeled as glusterd_brick_t.
  Resolves: rhbz#1372191


author: zhouyi <zhouyi20@huawei.com> 3.13.1-60-10
changelog:
  - Type:bugfix
  - SUG:restart
  - DEC:fix selinux previent gnome-initial-setup adduser failed at first boot


author: lining <lining57@huawei.com> 3.13.1-60.11
changelog:
  - Type:bugfix
  - SUG:packages
  - DEC:fix selinux policy prevents packages creating files in '/var/run/' directory when installing GNOME in CLI


author: lining<lining57@huawei.com> - 3.13.1-60.11.h3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:reboot
  - DESC: add selinux policy for /etc/resolv.conf.XXXX(temp files created when updating /etc/resolv.conf)


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-60
changelog:
  Allow hypervvssd to list all mountpoints to have VSS live backup working correctly.
  Resolves:#1247880


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.6-2
changelog:
  - Fixed milter_helo regression (milter-helo-fix patch)
    Resolves: rhbz#895552
  - Fixed bogus dates in changelog


author: Petr Lautrbach <plautrba@redhat.com> 3.2.24-1.1
changelog:
  - Stop sending syslog.LOG_DEBUG Messages unless loglevel is set to debug
  - Add the policy rpm string to the user comments of an already reported bug from jfilak@redhat.com
  - Remove at_console lines from policykit so cockpit can use dbus interfaces.
  - Fix handling of target paths that decode screws up
  - Provide the policy rpm in Bugzilla bug reports by jfilak@redhat.com
  - setroubleshootd is set to be run as setroubleshoot user instead of root user
  - translations updated from https://fedora.zanata.org/project/view/setroubleshoot


author: Dan Walsh <dwalsh@redhat.com> - 3.0.52-1
changelog:
  - Update Translations
  - Only translate catchall_boolean descritpions if the are not unicode to start with.


author: Dan Walsh <dwalsh@redhat.com> - 3.0.53-1
changelog:
  - Update Translations
  - Add sandbox_connect plugin to point out the use of alternate types with the sandbox -X command.


author: Dan Walsh <dwalsh@redhat.com> - 3.0.57-1
changelog:
  - Add restorecon_source plugin, to check the source program is labeled correclty.
  - Fix restorecon.py to handle customized_files properly.
  - Update Translations


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-3
changelog:
  - add more securetty required for mainframes (#1067347)
  - set SHELL envvar to /bin/bash in bashrc (#1063552)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-5
changelog:
  - reserve uidgid pair 142:142 for activemq (#1086923)
  - add xfs to /etc/filesystems, fallback to /proc/filesystems
    (#1123832)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-6
changelog:
  - change reservation of 185:185 to jboss user (#1192413)
  - reserve uidgid pair 167:167 for ceph (#1221043)
  - reserve uidgid for systemd-network(192:192) (#1213820)
  - reserve uidgid for systemd-resolve(193:193) (#1213820)
  - mention systemd-jounal-gateway can be dynamic (#1213820)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-7
changelog:
  - add basic empty subuid/subgid files for docker (#1311278)
  - specify full path to utilities in /etc/profile and /etc/bashrc
    (#1331871)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-8
changelog:
  - fix group id for tape in /etc/group (should be 33) (#1433020)
  - provide a way how to override set envvars through sh.local file(#1344007)
  - provide a way how to override set ennvars through csh.local file


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-10
changelog:
  - fix crudp name in /etc/protocols (#1566469)
  - do not list /sbin/nologin and /usr/sbin/nologin in /etc/shells
    (#1571104)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.67-1
changelog:
  - assign 166:166 uidgid pair for ceilometer (#923891)
  - change 187:187 reservation from openstack-heat
    to just heat(#923858)
  - longer shell names support caused by UsrMove to
    the /etc/shells (#922527)
  - drop gopher (uid 13, gid 30) from groups created by default
    -> dropped completely - no gopher server in Fedora (#918206)
  - drop dip (gid 40) from groups created by default
    -> moved to ppp (#918206)
  - drop uucp (uidgid 14) from groups created by default
    -> moved to uucp (#918206)
  - create cdrom, tape, dialout, floppy groups in setup(#919285)


author: David Sommerseth <davids@redhat.com> - 1.37-7
changelog:
  - Avoid deletion of /dev/null (#1298737)
  - Fix syntax error in rescan-scsi-bus related to multipath flushing (#1255564)
  - Add upstream updates to sg_inq, sg_rdac and sg_vpd (#1170719)


author: tangxiaolan<tangxiaolan3@huawei.com> - 1.37-13
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:enhance findremapped to avoid missing flushing multipath devices


author: tangxiaolan<tangxiaolan3@huawei.com> - 1.37-12
changelog:
  - Type:security
  - ID:NA
  - SUG:NA
  - DESC:Revert "sg3_utils: enhance findremapped to avoid missing flushing multipath devices"


author: Dan Horák <dan@danny.cz> - 1.37-5
changelog:
  - fix various man pages (#948463)
  - add man page for the rescan-scsi-bus.sh script (#948463)
  - Resolves: #948463


author: Richard W.M. Jones <rjones@redhat.com> - 0-1.1.20110622svn
changelog:
  - Fix date in release string.
    NB: To make this version > than the previous, I had to use 1.1.20110622
    instead of 0.1.20110622, since the old second field was 20110623.
  - Unset MAKEFLAGS, since parallel make breaks the build.
  - Bring the spec file up to modern standards.


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-14
changelog:
  - label the newly created home dir correctly (#1077809)
  - mention that chage -d 0 forces password change (#1135010)
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - report error if usermod asked for moving homedir and it does not exist


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-16
changelog:
  - update auditing to cover more events and fix some incorrect audit
    records - patch by Steve Grubb (#1151580)


author: zhengshaoyu<zhengshaoyu@huawei.com> - 2:4.1.5.1-21.h3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix useradd -s input a invalid path, and check if it is invalid


author: Peter Jones <pjones@redhat.com> - 0.7-7
changelog:
  - Make sure we use the right keys on Aarch64.
    (It's only a demo at this stage.)
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.7-10
changelog:
  - Fix a couple more minor bugs aavmf has found in fallback.
    Related: rhbz#1190191
  - Build lib/ with the right CFLAGS
    Related: rhbz#1190191


author: Peter Jones <pjones@redhat.com> - 0.9-1
changelog:
  - Update to 0.9-1
  - Fix early call to BS->Exit()
    Resolves: rhbz#1115843
  - Implement shim on aarch64
    Resolves: rhbz#1100048
    Resolves: rhbz#1190191


author: Peter Jones <pjones@redhat.com> - 10-1
changelog:
  - Update to 10-1
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k


author: Peter Jones <pjones@redhat.com> - 11-1
changelog:
  - Update to 11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: zhangyu<zhangyu235@huawei.com> - 12-1.h2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:remove the shim_cert.h from shimxxx.efi to avoid binary difference


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.0-8
changelog:
  - Fix Obsolete: that was wrong when renaming the package.
  - The font base folder was listed twice (one was hidden in the font macro)


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-6
changelog:
  - delay sending responses from compat tree after map cache search
  - Resolves: #1281748
  - fix processing of ID views
  - Resolves: #1281750, #1281752


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-2
changelog:
  - Complete ID views support to BIND operation
  - Ignore ID views outside schema-compat subtrees
  - Use 389-ds API compatible with RHEL 7.0
  - Resolves: #1151436


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 5.0.1-1
changelog:
  - New upstream release 5.0.1 introducing Unicode 5.1 compatibility
  - Resolves Meera size issues
  - Drop upstreamed patches for RHBZ# 545683, 616324 and 781938
  - Resolves RHBZ# 803183
  - Spec cleanup


author: Pravin Satpute <psatpute@redhat.com> 5.0.1-2
changelog:
  - Resolved bug 803234
  - Updated panose for Meera, RaghuMalayalam and Kalyani
  - Changed conf file of Rachana from Sans to Serir


author: Pravin Satpute <psatpute@redhat.com> 6.0-1
changelog:
  - Resolves: rh#1023847 - Upstream new release with fix against Harfbuzz NG
  - New release 6.0 with many new features and bug fixes
  - v2 opentype spec support for Malayalam (mlm2) for Meera, Rachana, Raghumalayalam
  - Full support to Harfbuzz, Adobe and Uniscribe shaping engines
  - Cleaned up and updated lookup tables
  - Meaningful names to glyphs to help with Lookup tables reusability
  - Old Figures and other Typographical glyphs to Rachana
  - Dotreph positioning using GPOS 'abvm' lookup
  - Unicode 6.1 Malayalam glyphset for many fonts


author: Ondrej Kozina <okozina@redhat.com> - 0.1.3-1.20130418git7ca81a2
changelog:
  - updatet to latest upstream version
  - add support to compare extended attributes ('xadiff' command)
  - add support to revert modificiations in file's extended attributes
  - patch: avoid useless build dependency on libattr-devel


author: Ondrej Kozina <okozina@redhat.com> - 0.1.5-1
changelog:
  - updated to latest upstream
  - allow whitespace in ALLOW_USERS and ALLOW_GROUPS in snapper's config
  - enable new pam module
  - patch: pam module installed in proper libdir


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-3
changelog:
  - enable btrfs compare using send/receive in libbtrfs
  - patch: adapt sources to change in libtrfs API (btrfs_read_and_process_send_stream)
  - Resolves: #1055579


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-5
changelog:
  - patch: Fix failure in invoking btrfs internal comparison of subvolumes
  - patch: Remove references to missing programs from man pages
  - Resolves: #1060806, #1063844


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-6
changelog:
  - patch: Add norecovery option mounting XFS read-only snapshot
  - patch: Fix ACL modification failure with XFS filesystem
  - patch: Sync SELinux context of .snapshots subvolume (btrfs only)
  - Resolves: #1064111, #1065969, #1069312


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-7
changelog:
  - patch: fix empty-pre-post cleanup algorithm
  - patch: add conditionals for btrfs library versions
  - Resolves: #1071973 #1142954


author: Paul Wouters <paul@nohats.ca> - 1.7.2.0-1
changelog:
  - Upgraded to 1.7.2.0 which allows tun/tap interfaces without IP address
    and introduces options openssl-compress and max-children.


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.1-1
changelog:
  - Updated to 1.7.2.1 for CVE-2012-0219, rhbz#821553, rhbz#821688
  - Remove patch merged upstream
  - Remove --disable-fips from configure


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Resolves: rhel#1017015 Use readline, not compat-readline5-devel
  - Added two patches fixing -Wformat issues
  - Enable hardened build
  - Cleanup obsolete spec file lines


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-2
changelog:
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for epel6 softhsm-v1 installs)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package which is not built on all arches
  - Enable hardened build
  - Add upstream official source url
  - Add devel package
  - Excluding i686/ppc (make check fails and we are a leave package)
  - (thanks to Petr for jumping in for the initial build while I was too busy)


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)


author: Petr Spacek <pspacek@redhat.com> - 2.0.0rc1-1
changelog:
  - Resolves: rhbz#1193892 Rebase to latest upstream version
  - i686/ppc/s390 architectures are now included in the build


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-35.1
changelog:
  - [ceph] collect /var/lib/ceph and /var/run/ceph
    Resolves: bz1291347
  - [sosreport] prepare report in a private subdirectory
    Resolves: bz1290954


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 14.4.1-4
changelog:
  - removed liblpc10 from source tarball due to licensing uncertainity
  - added license file to libgsm
  - fixed bogus dates in changelog


author: zhangshaoning<zhangshaoning1@huawei.com> - 14.4.1-6.h1
changelog:
  - Type:security
  - ID:CVE-2017-18189
  - SUG:restart
  - DESC:NULL pointer dereference in startread function in xa.c


author: maqiang<maqiang42@huawei.com> - 14.4.1-6.h2
changelog:
  - Type:cves
  - ID:CVE-2019-8355  CVE-2019-8356 CVE-2019-8357 CVE-2019-13590 CVE-2017-11332 CVE-2017-11358 CVE-2017-11359 CVE-2017-15370 CVE-2017-15371 CVE-2017-15372 CVE-2017-15642
  - SUG:NA
  - DESC:fix CVE-2019-8355  CVE-2019-8356 CVE-2019-8357 CVE-2019-13590 CVE-2017-11332 CVE-2017-11358 CVE-2017-11359 CVE-2017-15370 CVE-2017-15371 CVE-2017-15372 CVE-2017-15642


author: Kevin Fenzi <kevin@scrye.com> - 3.3.2-12
changelog:
  - Fix sa-update not detecting spamd running. Fixes bug #755644
  - Add restart=always to systemd file to work around upstream bug. Bug #812359


author: Petr Lautrbach <plautrba@redhat.com> 3.3.2-17
changelog:
  - document rawbody's split into chunks (#892350)
  - avoid using array of cleaned uris <fkrska@redhat.com> (#892348)


author: Petr Lautrbach <plautrba@redhat.com> 3.4.0-1
changelog:
  - update to 3.4.0
  - Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654


author: maqiang<maqiang42@huawei.com> - 3.4.0-2.h2
changelog:
  - Type:cves
  - ID:CVE-2017-15705 CVE-2019-12420 CVE-2020-1931
  - SUG:NA
  - DESC:fix CVE-2017-15705 CVE-2019-12420 CVE-2020-1931


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2-0.17.rc1
changelog:
  - update config.guess and config.sub for aarch64 (#926562)
  - make some dependencies arch-specific
  - remove obsolete macros


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.22-1
changelog:
  - Rebase to 0.22
    Resolves: rhbz#1109397
  - Fix screenshot of secondary displays
    Resolves: rhbz#1029761
  - Fix potential crash when freeing primary surface.
    Resolves: rhbz#1082555
  - Add RHEL-only SPICE_NOSCALE to disable display scaling.
    Resolves: rhbz#1067346
  - Fix connection to RHEL5 Spice server
    Resolves: rhbz#1017862
  - Fix coroutine leak
    Resolves: rhbz#1007841
  - Fix clipboard hang on clipboard loop
    Resolves: rhbz#1073364


author: Jonathon Jongsma <jjongsma@redhat.com> - 0.22-2
changelog:
  - Additional display pop out when restarting service spice-vdagentd in guest
    Resolves: rhbz#1043782
  - Coverity scan fixes
    Resolves: rhbz#885719
  - Send data message for file copy of 0 size
    Resolves: rhbz#1135104
  - add spice_channel_get_error()
    Resolves: rhbz#1116048
  - Prefix proxy lookup errors
    Resolves: rhbz#1116048


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.26-1
changelog:
  - Rebase to 0.26
    Resolves: rhbz#1214101
  - Allow to transfer multiple files at once
    Resolves: rhbz#1167829
  - Fix smartcard cannot work after restart guest
    Resolves: rhbz#1205548


author: Fabiano Fidêncio <fidencio@redhat.com> - 0.26-5
changelog:
  - Connecting to VM changes its resolution
    Resolves: rhbz#1242602
  - Cannot enable display 1 when it was disabled in previous session
    Resolves: rhbz#1247907
  - Windows needs to send complete monitors_config message to client
    Resolves: rhbz#1244878
  - High Resolution Multi-Monitor Windows Guest freeze
    Resolves: rhbz#1235442
  - Print file transfer summary to the log
    Resolves: rhbz#1140512
  - Enable proxy when requested
    Related: rhbz#1182252


author: zhangshaoning<zhangshaoning1@huawei.com> - 0.26-5.h1
changelog:
  - Type:cves
  - ID:CVE-2017-12194
  - SUG:restart
  - DESC:Integer overflows causing buffer overflows in spice-client


author: zhangshaoning<zhangshaoning1@huawei.com> - 0.26-5.h2
changelog:
  - Type:cves
  - ID:CVE-2018-10873
  - SUG:restart
  - DESC:write_validate_array_item() allows for buffer overflow and denial of service


author: Pavel Grunt <pgrunt@redhat.com> - 0.33-4
changelog:
  - Make connection error message more clear
    Resolves: rhbz#1365736
  - Improve audio debug
    Resolves: rhbz#1436249
  - Fix wrong encoding of transferred files
    Resolves: rhbz#1440206


author: zhangshaoning<euleros@huawei.com> - 0.34-3.2.h1
changelog:
  - Type:security
  - ID:CVE-2018-10873 CVE-2017-12194
  - SUG:restart
  - DESC:update to version 0.34-3.2.h1


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-7
changelog:
  - Fix assert in mjpeg_encoder_adjust_params_to_bit_rate()
    Resolves: rhbz#1086823
  - Fix "Spice-ERROR **: reds.c:1464:reds_send_link_ack: assertion
    `link->link_mess->channel_type == SPICE_CHANNEL_MAIN' failed" assertion
    Resolves: rhbz#1058625
  - Lower a monitor-config warning to debug level
    Resolves: rhbz#1119220
  - mjpeg: Don't warn on unsupported image formats
    Resolves: rhbz#1070028


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8
changelog:
  - Fix defects reported by Coverity
    Resolves: rhbz#885717
  - Validate surface bounding box sent from QXL driver
    Resolves: rhbz#1052856
  - Fix assertion sometimes happening during migration while a client is
    connected
    Resolves: rhbz#1035184
  - Fix crash when restarting VM with old client
    Resolves: rhbz#1145919


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-10
changelog:
  - Fix qemu segmentation fault (core dumped) when boot KVM guest with
    spice in FIPS enabled mode.
    Resolves: rhbz#1071176


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-11
changelog:
  - Don't assert on invalid client message
    Resolves: rhbz#1227410
  - Don't truncate large 'now' values in _spice_timer_set
    Resolves: rhbz#1227408
  - Avoid race conditions reading monitor configs from guest
    Resolves: rhbz#1239128
  - Lock the pixmap image cache for the entire fill_bits call
    Resolves: rhbz#1235443


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-16
changelog:
  - Use autosetup
    Related: CVE-2016-0749
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-17
changelog:
  - Fix crash when the client sends a wrong header (for example when using spice-html5)
    Resolves: rhbz#1281442
  - Fix crash when guest provides wrong address
    Resolves: rhbz#1264356
  - Fix thread-safety issue causing a crash when playing a Youtube video spanning
    multiple monitors
    Resolves: rhbz#1253375
  - Add patches reducing QEMU wake-ups
    Related: rhbz#912763, rhbz#1186146
  - Fix use-after-free after resetting a VM
    Resolves: rhbz#1281455
  - Send KeepAlive probes every 10 minutes
    Resolves: rhbz#1298590
  - Add client to guest volume synchronization
    Resolves: rhbz#1264107


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-18
changelog:
  - Fix crash when connecting to VM using smartcard passthrough
    Resolves: rhbz#1340899
  - Fix hang after unredirecting a USB device
    Resolves: rhbz#1338752
  - Backport spice_qxl_set_max_monitors()
    Resolves: rhbz#1283202


author: Frediano Ziglio <fziglio@redhat.com> - 0.12.4-20
changelog:
  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578


author: Forrest <linyanly.lin@huawei.com> - 0.12.4-20
changelog:
  - Type:cves
  - ID:CVE-2016-9577|CVE-2016-9578
  - SUG:false
  - DESC:update for fixng CVE-2016-9577 and CVE-2016-9578


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-1
changelog:
  - Rebase to spice-server 0.12.8
    Resolves: rhbz#1388947
    Resolves: rhbz#1377551
    Resolves: rhbz#1283202


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-3
changelog:
  - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
    sent from an authenticated client
    Resolves: CVE-2017-7506


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-2.3
changelog:
  - Revert back to spice 0.12 behaviour where QXL guest resources for cursor
    commands are only released when the current cursor is replaced. This avoids
    a QEMU regression causing crashes during migration
    Resolves: rhbz#1572489


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-4
changelog:
  - Revert back to spice 0.12 behaviour where QXL guest resources for cursor
    commands are only released when the current cursor is replaced. This avoids
    a QEMU regression causing crashes during migration
    Resolves: rhbz#1567944


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-5
changelog:
  - Don't mute Record channel on client reconnection
    Resolves: rhbz#1549132
  - Allow to configure TLS protocol versions and ciphers which SPICE will use for
    TLS communications
    Resolves: rhbz#1562213
  - Enable ECDH ciphers with OpenSSL 1.0
    Resolves: rhbz#1566597


author: liuqianya<liuqianya@huawei.com> - 0.14.0-6.1
changelog:
  - Type:security
  - ID:CVE-2019-3813
  - SUG:restart
  - DESC:upgrade from 0.14.0-2.5 to 0.14.0-6.1 this fix CVE-2019-3813


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-3
changelog:
  - Advertise clipboard line-endings for copy and paste line-ending conversion
  - Build spice-vdagentd as pie + relro


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-5
changelog:
  - Silence session agent error logging when not running in a vm (rhbz#999804)
  - Release guest clipboard ownership on client disconnect (rhbz#1003977)


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-8
changelog:
  - Fix copy and paste issues with vncclient
    Resolves: rhbz#1130218
  - Make vdagent more robust against xrandr failures
    Resolves: rhbz#1066422
  - Fix autostart of vdagent in gdm
    Resolves: rhbz#1052172


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-9
changelog:
  - Don't install rsyslog config file. This can cause duplicate logging
    to syslog in rhel6->rhel7 upgrades, and is not really useful anyway
    as the same functionality can be achieved with journald
    Resolves: rhbz#1136881


author: zhangshaoning<zhangshaoning1@huawei.com> - 0.14.0-10.h1
changelog:
  - Type:cves
  - ID:CVE-2017-15108
  - SUG:restart
  - DESC:spice-vdagent up to and including 0.17.0 does not properly escape 
    save directory before passing to shell, allowing local attacker with 
    access to the session the agent runs in to inject arbitrary commands 
    to be executed.


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-1
changelog:
  - New upstream release 0.14.0
  - Adds support for file transfers from client to guest
  - Adds manpages for spice-vdagent and spice-vdagentd


author: Christophe Fergeau <cfergeau@redhat.com> 2.8-7
changelog:
  - Adjust selinux policy to allow use of USB redirection
    Resolves: rhbz#1075173
  - Add test page to package
    Resolves: rhbz#959194


author: zhangshaoning<zhangshaoning1@huawei.com> - 3.7.17-8.h1
changelog:
  - Type:cves
  - ID:CVE-2018-8740
  - SUG:restart
  - DESC:NULL pointer dereference with databases with schema corrupted with CREATE TABLE AS allows for denial of service


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.17.git5c6f0024
changelog:
  - Latest pre 4.3 snapshot
  - Includes fix for mksquashfs hangs
  - Switch to get pre-release updates from the stable branch at kernel.org


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.18.gitaae0aff4
changelog:
  - Latest pre 4.3 stable snapshot
  - A few minor bug fixes
  - Improvements in getting status info while running unsquashfs


author: Forrest <linyanly.lin@huawei.com> - 7:3.5.20-2.2
changelog:
  - Type:cves
  - ID:CVE-2016-10002
  - SUG:rstart
  - DESC:Information disclosure in HTTP request processing


author: nidailiang<nidailiang@huawei.com> - 3.5.20-2.2.h3
changelog:
  - Type:cves
  - ID:CVE-2019-12525 CVE-2019-13345
  - SUG:restart
  - DESC:fix CVE-2019-12525 CVE-2019-13345


author: shijian<shijian16@huawei.com> - 3.5.20-2.2.h5
changelog:
  - Type:cves
  - ID:CVE-2018-19131 CVE-2018-19132
  - SUG:restart
  - DESC:fix CVE-2018-19131 CVE-2018-19132


author: wangchong<wangchong56@huawei.com> - 3.5.20-2.2.h6
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8449 CVE-2020-8450 CVE-2020-8517
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8449 CVE-2020-8450 CVE-2020-8517


author: lijingyu<lijingyu15@huawei.com> - 3.5.20-2.2.h7
changelog:
  - Type:cves
  - ID:CVE-2019-12519 CVE-2019-12521 CVE-2020-11945
  - SUG:restart
  - DESC:fix CVE-2019-12519 CVE-2019-12521 CVE-2020-11945


author: zhengshaoyu<zhengshaoyu@huawei.com> - 3.5.20-2.2.h10
changelog:
  - Type:cves
  - ID:CVE-2020-15049 CVE-2020-15810 CVE-2020-15811
  - SUG:restart
  - DESC:fix CVE-2020-15049 CVE-2020-15810 CVE-2020-15811


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-6
changelog:
  - Related: #1349775 - Provide migration tools needed due to rebase
    to squid 3.5 as a separate sub-package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-4
changelog:
  - Resolves: #1349775 - Provide migration tools needed due to rebase
    to squid 3.5 as a separate sub-package


author: Doug Ledford <dledford@redhat.com> - 0.0.4-13
changelog:
  - Further tweaks to LSB init script headers
  - Add a %post and %preun scriptlets to add/remove the init script


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 1.1.0-1
  — Update to new stable release
  — Major refactoring now that some sanity prevailed upstream in font naming
    Be careful if you used the old font family names


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.0-2
changelog:
  - Fixed initialization crash of IMV and IMC particularly
    attestation imv/imc as libstrongswas was not getting initialized.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-1
changelog:
  Resolves: #1049523
  Resolves: #1036846
  Resolves: #1007548
  - Modified spec file significantly to reflect the current state of
    the package, as this rebase enables several major modules: TNC
    client and server (IF-TNCCS), IMC-IMV (IF-M), PT-TLS (RFC 6876),
    SWID IMC/IMV, charon daemon and it related libs and modules,
    tnc-pdp, tnc-ifmap plugins.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-2
changelog:
  Resolves: #1049523
  Resolves: #1036846
  Resolves: #1007548
  - A typo caused a patch not being applied, so fixed that and
    bumping the number number.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-4
changelog:
  Resolves:#1067119
  - Fixed full hardening for strongswan (full relro and PIE).
    The previous macros had a typo and did not work
    (see bz#1067119).
  - Fixed files permissions for executables and config files to
    correctly reflect their intent.
  - Fixed tnc package description to eliminate rpmlint errors.
  - Fixed pki binary and moved it to /usr/libexece/strongswan as
    others binaries are there too to eliminate rpmlint errors.
  - Fixed systemd service name to "strongimv TNC".
  - Removed the dependency on gmp-devel


author: Avesh Agarwal <avagarwa@redhat.com> - 5.2.0-1
changelog:
  Resolves: #1120371
  - Rebase to new upstream release 5.2.0
  - IMA/TPM based remote attestation
  - Aikgen tool to generate an Attestation Identity Key bound
    to a TPM
  - PT-EAP transport protocol (RFC 7171) for TNC
  - Enabled support for acert for checking X509 attribute certificate
  - Updates local patches
  - Spec file update
  - openac tool replaced with pki --acert


author: dingyue<dingyue5@huawei.com> - 5.2.0-3.h2
changelog:
  - Type:cves
  - ID:CVE-2018-17540 CVE-2018-16152 CVE-2018-16151 CVE-2018-10811 CVE-2017-9022 CVE-2017-11185 CVE-2015-8023 CVE-2015-4171
  - SUG:restart
  - DESC:fix CVE-2018-17540 CVE-2018-16152 CVE-2018-16151 CVE-2018-10811 CVE-2017-9022 CVE-2017-11185 CVE-2015-8023 CVE-2015-4171


author: Avesh Agarwal <avagarwa@redhat.com> - 4.55-1
changelog:
  - New upstream realease 4.55
  - Updated local patches
  - enabled fips mode
  - Fixed for pod2man as it build-requires perl-podlators


author: Avesh Agarwal <avagarwa@redhat.com> - 4.56-1
changelog:
  - New upstream realease 4.56.
  - Updated local patches.
  - Fixed upstream URL in spec file.
  - Sourced URL of sha256 hash file in spec file.


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-14
changelog:
  - RHEL 7.2 erratum
    - backported command digest specification
    - fixed CVE-2014-9680 sudo: unsafe handling of TZ environment variable
    - fixed typos in sudoers.ldap man page
    - fixed handling of double-quoted sudoOption values in ldap, sssd sources
    - fixed numeric uid specification support in ldap source
    - fixed authentication flag logic in ldap source
    - added the systemctl command to the SERVICES alias in the default sudoers file
    Resolves: rhbz#1144446
    Resolves: rhbz#1235570
    Resolves: rhbz#1138259
    Resolves: rhbz#1183818
    Resolves: rhbz#1233607
    Resolves: rhbz#1144419
    Resolves: rhbz#1135539
    Resolves: rhbz#1215400


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-15
changelog:
  - RHEL 7.2 erratum
    - fixed compilation of testing binaries during make check
    - added legacy group processing patch
    - replaced buggy base64 decoder with a public domain implementation
    Resolves: rhbz#1254621
    Resolves: rhbz#1183818
    Resolves: rhbz#1247591


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-18
changelog:
  - RHEL 7.3 erratum
    - removed requiretty flag from the default sudoers policy
    - backported pam_service and pam_login_service defaults options
    - implemented netgroup_tuple defaults option for changing netgroup
      processing semantics
    - fixed user matching logic in the LDAP nss backend
    - don't allow visudo to accept an invalid sudoers file
    - fixed a bug causing that non-root users can list privileges of
      other users
    - modified digest check documentation to mention the raciness of
      the checking mechanism
    Resolves: rhbz#1196451
    Resolves: rhbz#1247230
    Resolves: rhbz#1334331
    Resolves: rhbz#1334360
    Resolves: rhbz#1261998
    Resolves: rhbz#1313364
    Resolves: rhbz#1312486
    Resolves: rhbz#1268958
    Resolves: rhbz#1335039
    Resolves: rhbz#1335042
    Resolves: rhbz#1335045
    Resolves: rhbz#1273243
    Resolves: rhbz#1299883


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-19
changelog:
  - RHEL 7.3 erratum
    - removed INPUTRC from env_keep to prevent a potential info leak
    Resolves: rhbz#1340700


author: EulerOS Security <euleros-security@huawei.com> - 1.8.6p7-21.h2
changelog:
  - Add conf to support no probe net if
  - Modify sudoers, do not allow people in group wheel to run all commands


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p7-22
changelog:
  - Fixes CVE-2017-1000367 sudo: Privilege escalation in via improper get_process_ttyname() parsing [rhel-7.3.z]
    Resolves: rhbz#1455401


author: EulerOS Security <euleros-security@huawei.com> - 1.8.6p7-22.h2
changelog:
  - Type:cves
  - ID:CVE-2017-1000367
  - SUG:NA
  - DESC: Privilege escalation in via improper get_process_ttyname() parsing [rhel-7.3.z]


author: EulerOS Security <euleros-security@huawei.com> - 1.8.6p7-23.h3
changelog:
  - Type:cves
  - ID:CVE-2017-1000368
  - SUG:NA
  - DESC: It was found that the original fix for CVE-2017-1000367 was incomplete.
          A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem.
          A local user with privileges to execute commands via sudo could use this flaw to escalate their privileges to root.


author: liuxueping<liuxueping1@huawei.com> - 1.8.6p7-23.h5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:no use -g option to avoid debug id differences and
         rm find_path.o goodpath.o to avoid random differences,
         they will recreate when compiling visudo


author: panxiaohe<panxiaohe@huawei.com> - 1.8.6p7-23.h8
changelog:
  - Type:cves
  - ID:CVE-2019-19232 CVE-2019-19234
  - SUG:restart
  - DESC:fix CVE-2019-19232 CVE-2019-19234


author: Nils Philippsen <nils@redhat.com> - 4.0.2-10
changelog:
  - ship licenses as documentation in the base package (#1019315)
  - hardlink duplicate documentation/license files


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.3-1
changelog:
  - New upstream version 4.1.3.
  - Remove patch which is now upstream.
  - Add examples directory to documentation.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.9-1.4
changelog:
  - Completely remove dependency on prelink/execstack (RHBZ#1093261).
  - Rebuild for aarch64 and ppc64le (1125690).


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-1
changelog:
  - Rebase to supermin 5.1.15.
    resolves: rhbz#1271255
  - Create supermin5-devel package containing RPM dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-3
changelog:
  - Add all upstream patches since 5.1.15 was released.
  - These should improve boot performance and initrd size.


author: Noriko Hosoi <nhosoi@redhat.com> - 4.1.0-1
changelog:
  - release 4.1.0-1
  - Resolves: Bug 1324983 - Rebase: svrcore
              Added systemd ask password support (DS 48450)


author: Adam Tkac <atkac redhat com> 2.0.8-1
changelog:
  - update to 2.0.8 (#851364)
  - swig207-rh830660.patch merged
  - swig207-r13128.patch merged
  - swig-rh841245.patch merged


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.10-1
changelog:
  - Update to 2.0.10
  - swig203-rh706140.patch merged
  - swig204-rh752054.patch merged
  - Create swig-2.0.10-Fix-x390-build.patch


author: Tim Waugh <twaugh@redhat.com> 1.4-4
changelog:
  - Applied patches from Jiri Popelka:
    - Fix off-by-one error in call to readlink.
    - Fix possible buffer overrun found by coverity.


author: Peter Jones <pjones@redhat.com> - 4.05-4
changelog:
  - Fix build problem from kernel-headers' removeal of ext2_fs.h
    (fix backported from as-yet-unreleased upstream version.)


author: Peter Jones <pjones@redhat.com> - 4.05-12
changelog:
  - Toolchain changes between when this originally got built and 4.05-9 means
    4.05-9 - 4.05-11 don't actually work.
    Related: rhbz#1085434


author: chenxiaojie<chenxiaojie8@huawei.com> - 1.3.0-103
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix the problem new process couldn't be added to process monitor list when configure file name is special


author: zhengshaoyu<zhengshaoyu@huawei.com> - 1.3.0-108
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: clear task info in worker thread when task exited and remove log_printf in signal handle


author: Changpeng Liu<euleros@huawei.com> - 1.3.0-55
changelog:
  - Type:bugfix
  - SUG:restart
  - DESC: modify the return value when the configuration file has an error


author: Shaoshao Cui<euleros@huawei.com> - 1.3.0-63
changelog:
  - Type:bugfix
  - SUG:restart
  - DESC: modify monitor syslog physical  memory use more than 600M then restart rsyslog


author: Changpeng Liu<euleros@huawei.com> - 1.3.0-68
changelog:
  - Type:bugfix
  - SUG:restart
  - DESC: modify check_ssh.sh, if get tcp_socket_id failed then sleep 1s and get it again


author: chentongbiao<chentongbiao@huawei.com> - 1.3.0-76
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:do not start dhclient by sysmonitor when NetworkManager will start it


author: zhaiwenbin<zhaiwenbin1@huawei.com> - 1.3.0-79
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:simultaneously run 'systemctl restart sysmonitor',kernel Oops.


author: heyitao<heyitao@huawei.com> - 1.3.0-80
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:Increase the judgment of the return value of the EXECL family functions


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-5
changelog:
  - resolves: #1100365
    fixed issue when sa data files weren't correctly overwritten in some cases
  - resolves: #1097294
    count with xz compressed files as well in sa2 script
  - resolves: #1097292
    fix file mode of sysstat cron file
  - resolves: #1128569
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances
  - resolves: #1110852
    added better explanation of HISTORY setting to sysstat(5) man page
  - resolves: #1102610
    added possibility to set compress method in /etc/sysconfig/sysstat file


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-6
changelog:
  - resolves: #1146081
    fixed issue when cifsiostat and nfsiostat were reporting incorrect statistics
    on a single CPU machines


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-8
changelog:
  - resolves: #846699
    renamed nfsiostat to nfsiostat-sysstat, as nfsiostat is also provided
    by the nfs-utils package
  - resolves: #1224882
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #1258990
    added support for more CPUs
  - resolves: #1267972
    fixed bug when iostat didn't display the full device name if it's too long
  - resolves: #1328490
    fixed bug, when sadc could forward SIGINIT to init process and couse reboot


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-9
changelog:
  - related: #846699
    do the renaming of nfsiostat properly, with patch
  - resolves: #1332662
    added tapestat utility for monitoring tape drives


author: Nils Philippsen <nils@redhat.com> - 1.10.0-1
changelog:
  - use pkexec instead of consolehelper
  - read/write /etc/localtime as symbolic link and only fall back to using
    /etc/sysconfig/clock if it is present (#824033)


author: Nils Philippsen <nils@redhat.com> - 1.10.1-1
changelog:
  - don't trip over missing /etc/sysconfig/network file (#857412)
  - pull updated translations
  - install and use timezone translations properly


author: Nils Philippsen <nils@redhat.com> - 1.10.5-1
changelog:
  - pull updated and new translations (#878319)
  - catch (rare) errors from fork()
  - catch unavailable display (#766936)
  - pull updated time zones


author: Thomas Woerner <twoerner@redhat.com> 1.2.29-4
changelog:
  - fixed possible privilege escalation flaw via use of python pickle
    (CVE-2011-2520), replaced pickle by json (rhbz#717985) and (rhbz#722991)
  - stop D-BUS firewall mechanism on update


author: Martin Milata <mmilata@redhat.com> - 2.0.13-5
changelog:
  - Fix broken Reload button
  - Resolves: #1052042
  - Update default core_collector to use LZO compression
  - Resolves: #1047816


author: Martin Milata <mmilata@redhat.com> - 2.0.13-9
changelog:
  - Set PATH in backend so that zipl knows where to find dmsetup (affects only s390x)
  - Resolves: #1077113


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.1-11
changelog:
  - Add dependency on newt-python (#845391, Sandro Mani).
  - Fix bogus dates in %changelog and rpmlint tabs vs spaces warning.


author: Nils Philippsen <nils@redhat.com> - 1.3.1-12
changelog:
  - use consistent names for patches, create backup files
  - use polkit/pkexec instead of consolehelper
  - add man page


author: Nils Philippsen <nils@redhat.com> - 1.4.0-1
changelog:
  - version 1.4.0
  - remove ancient obsoletes and bogus requirements
  - require systemd >= 30 for localed
  - update gtk-update-icon-cache scriptlets


author: Chris Lumens <clumens@redhat.com> - 2.8.8-1
changelog:
  - Fix an importing bug caused by the previous patch. (clumens)
  - Don't traceback when starting up outside of X (#676338). (clumens)
  - Convert spec to UTF-8. (notting)


author: Chris Lumens <clumens@redhat.com> - 2.8.9-1
changelog:
  - Put /usr/share/system-config-kickstart at the front of the path (#820748). (clumens)
  - Fix "make local" to not pack up .git/ as well. (clumens)
  - Update Makefiles to work with new translation system. (clumens)
  - BuildRequires transifex-client. (clumens)
  - Ignore po/*.po files. (clumens)
  - Remove translation files. (clumens)
  - Fix translation files so "msgfmt -c " passes and they'll upload to transifex. (clumens)
  - Add transifex configuration file. (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.10-1
changelog:
  - Update glade file to fix translation building. (clumens)
  - Fix various problems when packaging up translations. (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.9.0-1
changelog:
  - Fix another problem updating the .po file.
  - Remove support for python-meh.  It requires gtk3.
  - Add the old anaconda GroupSelector.py to system-config-kickstart (#859928).
  - It helps to import the exceptions I want to catch (#893282).
  - Do @VERSION@ substitution on the main program, too (#866563).


author: Chris Lumens <clumens@redhat.com> - 2.9.1-1
changelog:
  - Fix an error reading the timezone in generate mode (#916346, #924764). (clumens)
  - Remove the documentation (#915737). (clumens)
  - Display hidden groups in the package selection UI (#915029). (clumens)
  - Default to SHA512, same as anaconda (#915013). (clumens)
  - Add the system-config-keyboard dep back in (#909355). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.9.2-1
changelog:
  - Transifex has moved, so update the config. (clumens)
  - Remove the Japanese-specific man page. (clumens)
  - Update the system-config-kickstart man page to something useful (#948447). (clumens)
  - Fix a typo. (clumens)


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-24
changelog:
  - Resolves:rh#956784 - Add Interlingua to the local-list file and include Interlingua localization to the package


author: Parag Nemade <pnemade AT redhat DOT com> - 1.4.0-2
changelog:
  - Resolves:rh#1040298 - OK button should be disabled always for the default selected language
  - Resolves:rh#1040309 - Fix 'No Group named...exists' dialog produced traceback & warning messages
  - Resolves:rh#1045993 - Change language name from Oriya to Odia.


author: Tim Waugh <twaugh@redhat.com> 1.4.1-17
changelog:
  - Applied upstream patch to fix job retrieval (bug #1119227).
  - Applied upstream patch to fix Gdk.color traceback (bug #1112334).


author: Nils Philippsen <nils@redhat.com> - 1.3.4-1
changelog:
  - don't ask libuser to create a home directory over an existing one (#908852,
    patch by Miloslav Trmač)
  - correct check if SELinux is enabled


author: Lukas Czerner <lczerner@redhat.com> 0.4-2
changelog:
  - Remove btrfs resize support (#986116)
  - Unmount all btrfs subvolumes when removing a filesystem
  - Fix size argument parsing for create and snapshot command
  - Fix list output for some cases
  - Add support to create encrypted volumes with crypt backend (#1012523)
  - Add dry-run option
  - Fix removing volumes with crypt backend
  - Add raid1 and raid10 support for lvm backend (#1012518)
  - Allow to check btrfs volumes (#986105)
  - Fix error handling when trying to resize btrfs subvolume (#986111)
  - Fix ssm mount command so it detects directory properly


author: Lukas Czerner <lczerner@redhat.com> 0.4-4
changelog:
  - Suppress backtrace when a command fails (#1054349)
  - Fix ssm to recognize units in new btrfs output properly (#1052327)
  - Use correct sysfs file to get size for a partition (#1053651)
  - Fix ssm to be able add a device with signature to btrfs file system (#1053741)
  - Resognize btrfs devices from new btrfs output properly (#1052330)


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.1.0-2
changelog:
  - Tolerate trailing newlines in alternatives file.
  - Handle Sun plugin alternative.
  - Do not use desktop-file-install.
  - Resolves: rhbz#195649


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.1.2-1
changelog:
  - Import system-switch-java 1.1.2.
  - Remove patches.
  - Resolves: rhbz#442399
  - Resolves: rhbz#404331


author: Deepak Bhole <dbhole@redhat.com> - 1.1.5-1
changelog:
  - Resolves: rhbz#663322
  - Sync with F14:
    - Update to 1.1.5 which fixes rhbz 493898 and adds more translations


author: Jiri Vanek <jvanek@redhat.com> - 1.1.5-4
changelog:
  - added jre-java patch to work corectly with java directories and not
    just with  jre  symlinks
    backward compatibility preserved
  - added correct recognition of icedtea-web plugin
  - added disabledUnderline patch
  - added tuiWidth patch
  - Resolves: rhbz#731039
  - Resolves: rhbz#725718


author: Omair Majid <omajid@redhat.com> - 1.1.5-9
changelog:
  - Remove libuser-python dependency
  - Update to work with newer alternatives
   - added new-jdk-paths.patch
   - this patch is disabled, untill more work is done in upstream
  - Resolves: rhbz#1070976


author: Jiri Vanek <jvanek@redhat.com> - 1.1.5-10
changelog:
  - Renamed (to baseurl) url macro to prevent shadowing
  - Added BSD license to list of Licenses
   - (COPYING.icon says it's a 2-clause BSD license)
  - removed buildroot definition and manual removing of it
  - Resolves: rhbz#1070976


author: Frank Ch. Eigler <fche@redhat.com> - 2.7-2
changelog:
  - Upstream release, incl. rhel6.7 post-release xmltohtml patch
  - pre-rebase-rebase for aarch64 mass-rebuild


author: Frank Ch. Eigler <fche@redhat.com> - 2.8-3
changelog:
  - rhbz1237098: handle symbol-table vs. linkage-name mismatches better
  - some runtime robustification fixes backported from upstream


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-9
changelog:
  - Add patch to fix CVE-2010-2642, CVE-2011-0433 (afm-fix patch)
  - New version of patch for CVE-2011-0764, also fixes CVE-2011-1552,
    CVE-2011-1553, CVE-2011-1554 (type1-inv-rw-fix patch)
    Resolves: rhbz#772899
  - Add explicit NVR requires to apps subpackage (consumes libt1(x).so)
  - Fix rpmlint warning (mixed-use-of-spaces-and-tabs)


author: panxiaohe<panxiaohe@huawei.com> - 1.11.1-5.h1
changelog:
  - Type:cves
  - ID:CVE-2018-11439 CVE-2017-12678
  - SUG:restart
  - DESC:fix CVE-2018-11439 CVE-2017-12678


author: Rex Dieter <rdieter@fedoraproject.org> 1.8-1
changelog:
  - taglib-1.8

  -* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.2-2
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: gil cattaneo <puntogil@libero.it> 0:1.2.1-1
changelog:
  - Upgraded to 1.2.1
  - remove ant-nodeps reference
  - changed group in javadoc sub package (from Development/Documentation in Documentation)
  - add maven metadata
  - add manual
  - Adapt to current guidelines.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-37
changelog:
  - Improve message with response directions to reflect new option
    for user names with dot character


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-42
changelog:
  - Add systemd support (thanks to Zbigniew Jędrzejewski-Szmek and Jóhann B. Guðmundsson)
    Resolves: #737219


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-23
changelog:
  - use /usr/bin/ssh as the default remote shell binary (#969015)
  - do not verbose-print xattrs when --no-xattrs option is used
  - do not override the config.{guess,sub} twice, this is already done by the
    redhat-rpm-config package (#951442)


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-25
changelog:
  - the /etc/rmt seems to be the best place where to look for rmt binary (see the
    commit message in Fedora's cpio.git for more info)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-21
changelog:
  - enable build for arm64 (#926610)
  - silence gcc warnings (lint fixes without risk from upstream) for RPMDiff


author: Andy Grover <agrover@redhat.com> - 2.1.fb31-1
changelog:
  - New upstream version
  - Move service handling to python-rtslib
  - Remove old packaging bits: clean, buildroot, defattr


author: Andy Grover <agrover@redhat.com> - 0.3.1-5
changelog:
  - Update require-password.patch
  - Change target.yaml to not include a commented-out default password


author: Andy Grover <agrover@redhat.com> 0.6.1-1
changelog:
  - Update to latest version, make needed changes
  - Drop patches:
    * require-password.patch
    * use-std-ssl.patch
  - Change requires from python-lvm to lvm2-python-libs


author: Petr Machata <pmachata@redhat.com> - 4.1-2.20130314
changelog:
  - Fix mfence patch.  Since the __TBB_full_memory_fence macro was
    function-call-like, it stole () intended for function invocation.


author: Petr Machata <pmachata@redhat.com> - 4.1-6.20130314
changelog:
  - Drop ExclusiveArch altogether. TBB has a fallback code that works
    irrespective of the architecture.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Fixed fork, enabled threading (by notifier-thread-fork-fix patch)
    Resolves: rhbz#869315
  - Rebuild to fix systemtap on aarch64
    Resolves: rhbz#1238479


author: Tom Lane <tgl@redhat.com> 1.8.0-1
changelog:
  - Update to pgtcl 1.8.0.
  - Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: Michal Sekletar <msekleta@redhat.com> - 14:4.5.1-3
changelog:
  - add support for nano second timestamps (#1151406)
  - fix cdp dissector, allow zero-length data frames (#1231246)


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-1
changelog:
  - New upstream version 4.9.0. Resolves: #1422473
  - Add legacy -P switch with warning. Related to #1422473 and #1292056


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-4
changelog:
  - Drop downstream patch (drop root privileges)
  - Add libcap-ng as a new build dependency
  - Related: #1262283


author: zhangchenfeng <zhangchenfeng1@huawei.com> - 14:4.9.0-5.h175
changelog:
  - Type:cves
  - ID:CVE-2017-13048,CVE-2017-13013,CVE-2017-13033,CVE-2017-13036,CVE-2017-13047,CVE-2017-13025,CVE-2017-13019,CVE-2017-12985,CVE-2017-13725,CVE-2017-12988,CVE-2017-12991,CVE-2017-13040,CVE-2017-13029,CVE-2017-13000,CVE-2017-13022,CVE-2017-13039,CVE-2017-13031,CVE-2017-13030,CVE-2017-12994,CVE-2017-13043,CVE-2017-13045,CVE-2017-13054,CVE-2017-12998,CVE-2017-13014,CVE-2017-13037,CVE-2017-13690,CVE-2017-13017,CVE-2017-12895,CVE-2017-13046,CVE-2017-13688,CVE-2017-13053,CVE-2017-12995,CVE-2017-12997,CVE-2017-13016,CVE-2017-13002,CVE-2017-12989,CVE-2017-12999,CVE-2017-12900,CVE-2017-13006,CVE-2017-12897,CVE-2017-13003,CVE-2017-12901,CVE-2017-13035,CVE-2017-13009,CVE-2017-13032,CVE-2017-13049,CVE-2017-13007,CVE-2017-13041,CVE-2017-12987,CVE-2017-12993,CVE-2017-13023,CVE-2017-13026,CVE-2017-13055,CVE-2017-13042,CVE-2017-13018,CVE-2017-13044,CVE-2017-13012,CVE-2017-13001,CVE-2017-13050,CVE-2017-13028,CVE-2017-13024,CVE-2017-12992,CVE-2017-13004,CVE-2017-13027,CVE-2017-13008,CVE-2017-13051,CVE-2017-13020,CVE-2017-12902,CVE-2017-13689,CVE-2017-13005,CVE-2017-12894,CVE-2017-13015,CVE-2017-13038,CVE-2017-12990,CVE-2017-13034,CVE-2017-13011,CVE-2017-13021,CVE-2017-13010,CVE-2017-12986,CVE-2017-12996,CVE-2017-13052,CVE-2017-13687,CVE-2017-12899,CVE-2017-12898,CVE-2017-12896,CVE-2017-12893
  - SUG:NA
  - DESC:fix above cves


author: yangjian <yangjian79@huawei.com> - 14:4.9.0-5.h176
changelog:
  - Type:cves
  - ID:CVE-2017-11108 CVE-2017-11542 CVE-2017-11541 CVE-2017-11543
  - SUG:NA
  - DESC:fix above cves


author: wangyue<wangyue92@huawei.com> - 14:4.9.0-5.h177
changelog:
  - Type:cves
  - ID:CVE-2018-16229 CVE-2018-16451 CVE-2018-16300 CVE-2018-14465 CVE-2018-14462 CVE-2018-14467 CVE-2018-14470 CVE-2018-16230 CVE-2018-14461 CVE-2018-16227 CVE-2018-16452 CVE-2018-14880 CVE-2018-14464 CVE-2018-14469 CVE-2018-14463 CVE-2018-14879 CVE-2018-14881
  - SUG:restart
  - DESC:fix CVE-2018-16229 CVE-2018-16451 CVE-2018-16300 CVE-2018-14465 CVE-2018-14462 CVE-2018-14467 CVE-2018-14470 CVE-2018-16230 CVE-2018-14461 CVE-2018-16227 CVE-2018-16452 CVE-2018-14880 CVE-2018-14464 CVE-2018-14469 CVE-2018-14463 CVE-2018-14879 CVE-2018-14881


author: wangyue<wangyue92@huawei.com> - 14:4.9.0-5.h178
changelog:
  - Type:cves
  - ID:CVE-2018-14466 CVE-2018-19519 CVE-2018-16228
  - SUG:restart
  - DESC:fix CVE-2018-14466 CVE-2018-19519 CVE-2018-16228


author: wangyue<wangyue92@huawei.com> - 14:4.9.0-5.h179
changelog:
  - Type:cves
  - ID:CVE-2018-14882 CVE-2019-15166 CVE-2018-14468
  - SUG:restart
  - DESC:fix CVE-2018-14882 CVE-2019-15166 CVE-2018-14468


author: wangyue<wangyue92@huawei.com> - 14:4.9.0-5.h180
changelog:
  - Type:cves
  - ID:CVE-2018-10103 CVE-2018-10105
  - SUG:restart
  - DESC:fix CVE-2018-10103 CVE-2018-10105


author: Fridolin Pokorny <fpokorny@redhat.com> 6.18.00-7
changelog:
  - File locking patch modified to reflect HIST_MERGE flag (#879371)
  - Drop tcsh-6.18.00-sigint-while-waiting-for-child.patch, accepted by upstream
  - Add tcsh-6.18.00-history-merge.patch to merge histlist properly (#919452)
  - Add tcsh-6.18.00-history-savehist.patch to store history with length
    $savehist, not only $history.


author: Fridolin Pokorny <fpokorny@redhat.com> 6.18.01-1
changelog:
  - Update to tcsh-6.18.01
  - Removed tcsh-6.18.00-history-savehist.patch, not accepted by upstream
    http://mx.gw.com/pipermail/tcsh-bugs/2013-March/000824.html


author: Jaromír Končický <jkoncick@redhat.com> - 6.18.01-4
changelog:
  - Fix regression in default $status value in case of lists/pipelines
    (Changed 'anyerror' variable to 'tcsh_posix_status' with opposite meaning)
    Resolves: #1025703


author: Jaromír Končický <jkoncick@redhat.com> - 6.18.01-5
changelog:
  - Readded reverse-history-handling-in-loops patch which was created for
    tcsh version 6.17.00 in RHEL 6.4 to fix bug #814069
    Resolves: #1035235


author: zhengshaoyu<zhengshaoyu@huawei.com> - 6.18.01-7.h1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:quality enhancement synchronization github patch
         backport-0047-make-postcmd_active-global.patch
         backport-0048-Don-t-update-the-line-location-if-we-are-inside-a-po.patch


author: Brian Pepple <bpepple@fedoraproject.org> - 0.6.0-1
changelog:
  - Update to 0.6.0
  - Drop python subpackage. gobject-introspection is used now.
  - Drop unnecessary buildroot cleaning in install section.
  - Update BR for farstream02-devel.


author: Brian Pepple <bpepple@fedoraproject.org> - 1:5.14.1-1
changelog:
  - Update to 5.14.1.
  - Drop defattr. No longer needed.
  - Drop ignore gnome keyring patch. Fixed upstream.


author: Debarshi Ray <rishi@fedoraproject.org> - 1:5.14.1-5
changelog:
  - Add %check to run the upstream test suite on each build (Red Hat #1000705)
  - Resort to using chrpath for removing rpaths instead of hacking libtool


author: Adam Tkac <atkac redhat com> 1:0.17-51
changelog:
  - add "-debug6" option to telnetd (#rh674942)
  - telnet wasn't interruptable (^C) when started with specious -b argument (#704604)


author: Dan Kenigsberg <danken@cs.technion.ac.il> - 0.1-12
changelog:
  - Rebuilt against existing David Type1 fonts. Bug #509697
  - Require specific culmus font packages and obsolete tetex-fonts-hebrew-0.1-9. Bug #485639


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-20
changelog:
  - Resolves:rh#921852 - Four culmus subpackages are not listed in build require
  - Added BR: and R: for the following packages
  - culmus-hadasim-clm-fonts, culmus-simple-clm-fonts
  - culmus-stamashkenaz-clm-fonts, culmus-stamsefarad-clm-fonts


author: Than Ngo <than@redhat.com> - 2:2012-34.20130427_r30134
changelog:
  - Resolves: bz#1064453, add missing texlive-metapost and groff.enc
    Resolves: bz#948532, add missing manpages for pdfxmltex, xmltex
    Resolves: bz#1213886, tex4ht-bin requires latex
    Resolves: bz#1217556, port for poppler-0.26.5
    Resolves: bz#1035679, scriptlet errors when installing texlive packages
    Resolves: bz#1184987, add texlive-titling


author: Jan Synáček <jsynacek@redhat.com> - 5.2-12
changelog:
  - remove unnecessary installation dependency on xinetd(#1136866)
  - improve systemd unit files(#1167777)


author: Daiki Ueno <dueno@redhat.com> - 0.5.0-2
changelog:
  - fix <test> usage in fontconfig files (Closes: #837538)
  - refresh fontconfig files with the latest upstream version


author: Daiki Ueno <dueno@redhat.com> - 0.5.0-4
changelog:
  - disable X fonts.dir generation
  - remove obsolete -compat subpackage
  - remove %defattr from %files
  - add missing "make" in %build


author: Jan Grulich <jgrulich@redhat.com> - 1.3.1-1
changelog:
  - Drop unecessary patches
  - Re-base to 1.3.1 (bug #1199453)
  - Re-build against re-based xserver (bug #1194898)
  - Check the return value from XShmAttach (bug #1072733)
  - Add missing part of xserver114.patch (bug #1140603)
  - Keep pointer in sync (bug #1100661)
  - Make input device class global (bug #1119640)
  - Add IPv6 support (bug #1162722)
  - Set initial mode as prefered (bug #1181287)
  - Do not mention that display number is required in the file name (bug #1195266)
  - Enable Xinerama extension (bug #1199437)
  - Specify full path for runuser command (bug #1208817)


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-1
changelog:
  - Update to 1.7.1
    Resolves: bz#1388620
    Resolves: bz#1343899
    Resolves: bz#1410164
    Resolves: bz#1415547
    Resolves: bz#1418945
    Resolves: bz#1416290
    Resolves: bz#1342956
  - Fix shared memory leakage
    Resolves: bz#1358090
  - Added systemd unit file for xvnc
    Resolves: bz#1393971


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-2
changelog:
  - Be more restrictive with shared memory mode bits
    Resolves: bz#1152552
    Limit max username/password size in SSecurityPlain [CVE-2017-7394]
    Resolves: bz#1438737
    Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
    Resolves: bz#1438742


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-3
changelog:
  - Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
    Resolves: bz#1439127
    Prevent double free by crafted fences [CVE-2017-7393]
    Resolves: bz#1439134


author: yaoxin<yaoxin23@huawei.com> - 1.8.0-1.h2
changelog:
  - Type:cves
  - ID:CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 CVE-2019-15695
  - SUG:restart
  - DESC:fix CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 CVE-2019-15695


author: Jan Grulich <jgrulich@redhat.com> - 1.3.1-6
changelog:
  - Do not fail to bind a network socket
    Resolves: bz#1332575
  - Do not die when port is already taken
    Resolves: bz#1322155


author: Petr Pisar <ppisar@redhat.com> - 1.7-39
changelog:
  - Fix maximal RSS report (bug #702826)
  - Clean spec file
  - Recompute CPU usage at finer level (bug #527276)


author: Peter Hanecak <hany@hany.sk> - 2.0.6-1
changelog:
  - new stable version
  - source tarball is now on GitHub, with slightly different structure
    (build requires autoconf and automake)
  - fixed license: only BSD (no piece of code in current version states GPL)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Enabled threading
    Resolves: rhbz#676880
  - Fixed crash if there are no fonts installed (by no-fonts-fix patch)
    Resolves: rhbz#1218943


author: Miloslav Trmač <mitr@redhat.com> - 2.11-3
changelog:
  - Drop the cron.daily script, systemd default configuration handles the same
    places.
    Resolves: #906455


author: Sven Lankes <sven@lank.es> 1.5-1
changelog:
  - New upstream release
  - Do the right thing (tm) and revert to $upstream-behaviour: 
     No longer install tmux setgid and no longer use /var/run/tmux 
     for sockets. Use "tmux -S /var/run/tmux/tmux-`id -u`/default attach"
     if you need to access an "old" tmux session
  - tmux can be used as a login shell so add it to /etc/shells


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-8
changelog:
  - Fix build failure in fedora rawhide. It was caused due to 
    removal of CMAKE_INSTALL_LIBDIR macro from /etc/rpm/cmake.macros 
    that was present in previous fedora releases.


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-12
changelog:
  - Fixes for rhbz #985785 to fix crash issue in Filecert manager
    in platidimv.
  - Fixed crashing of attestation imv so while loading due to
    wrong static initialization order in attestation imv.
  - Fixes some coverity scan errors.
  - Fixed comilation when sysconf dir variable is not defined on a
    local system. Added some messaging outputs during compilations.
  - Fixed erroneous data type conversion issues causing wrong outputs
    and with potential for data corruption.
  - Fixes tncutil build issue from upstream commit
  - Fixes typo in assignment in platidimv from upstream commit
  - Fixes Fix typo in variable declaraction in hostscannerimv
    from upstream commit
  - Fixes imcv shared library build issue from upstream commit


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-13
changelog:
  - Implemented support for dlopen
  - Removed libtool support
  - Fixed imv and imc build issues arising from a
    previous upstream patch
  - Fixed a few coverity scan error issues


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.1-12
changelog:
  - Allow unprivileged users to subscribe to indications
    Resolves: #1049313
  - Remove packages which are part of the minimum build environment from BR 
    Resolves: #1049651
  - Fix Pegasus malforms EmbeddedInstances in upcalls
    Resolves: #1038013


author: Stephen Gallagher <sgallagh@redhat.com> - 2:2.12.1-15
changelog:
  - Generate SSL certificates with x509v3 and CA:FALSE
  - Automatically import self-signed certificates into local trust-store
  - Move SSL certificate generation into the systemd service file
  - Resolves: #1041555


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-1
changelog:
  - Fix packaging of tmpfiles
    Resolves: #1180993
  - Add install Platform_LINUX_XSCALE_GNU.h, Linkage.h and CIMListener.h to -devel
    because of lmiwbem (CIMListener class), add symlink to libpeglistener.so.1
    Resolves: #1120701
  - Update to upstream version 2.14.1
    Resolves: #1097187, #1039050, #1007386
  - Fix sending of SNMPv3 traps
    Resolves: #1218954


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-2
changelog:
  - Remove files created in %check
    Resolves: #1232341
  - Fix setupSDK in -devel
    Resolves: #1127399
  - Add snmp tests to the -test rpm and enable them, configure snmptrapd
    in test setup phase
    Related: #1218954


author: Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-1
changelog:
  - Resolves: rhbz#1287928 Rebase to tomcat 7.0.69
  - Resolves: rhbz#1327326 rpm -V tomcat fails on /var/log/tomcat/catalina.out
  - Resolves: rhbz#1277197 tomcat user has non-existing default shell set
  - Resolves: rhbz#1240279 The command tomcat-digest doesn't work with RHEL 7
  - Resolves: rhbz#1229476 Tomcat startup ONLY options
  - Resolves: rhbz#1133070 Need to include full implementation of tomcat-juli.jar and tomcat-juli-adapters.jar
  - Resolves: rhbz#1201409 Fix the broken tomcat-jsvc service unit
  - Resolves: rhbz#1221896 tomcat.service loads /etc/sysconfig/tomcat without shell expansion
  - Resolves: rhbz#1208402 Mark web.xml in tomcat-admin-webapps as config file


author: Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-2
changelog:
  - Rebase Resolves: rhbz#1311622 Getting NoSuchElementException while handling attributes with empty string value in tomcat
  - Rebase Resolves: rhbz#1320853 Add HSTS support
  - Rebase Resolves: rhbz#1293292 CVE-2014-7810 tomcat: Tomcat/JBossWeb: security manager bypass via EL expressions
  - Rebase Resolves: rhbz#1347144 CVE-2016-0706 tomcat: security manager bypass via StatusManagerServlet
  - Rebase Resolves: rhbz#1347139 CVE-2015-5346 tomcat: Session fixation
  - Rebase Resolves: rhbz#1347136 CVE-2015-5345 tomcat: directory disclosure
  - Rebase Resolves: rhbz#1347129 CVE-2015-5174 tomcat: URL Normalization issue
  - Rebase Resolves: rhbz#1347146 CVE-2016-0763 tomcat: security manager bypass via setGlobalContext()
  - Rebase Resolves: rhbz#1347142 CVE-2016-0714 tomcat: Security Manager bypass via persistence mechanisms
  - Rebase Resolves: rhbz#1347133 CVE-2015-5351 tomcat: CSRF token leak


author: Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-4
changelog:
  - Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service


author: Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-9
changelog:
  - Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
  - Resolves: rhbz#1368122


author: Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-11
changelog:
  - Resolves: rhbz#1413591 CVE-2016-8745 tomcat: information disclosure due to incorrect Processor sharing
  - Resolves: rhbz#1402662 CVE-2016-6816 tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests


author: zhangyi <zhangyi79@huawei.com> - 0:7.0.69-11
changelog:
  - Type:cves
  - ID:CVE-2016-8745,CVE-2016-6816
  - SUG:NA
  - DESC:1) information disclosure due to incorrect Processor sharing
         2) HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-2
changelog:
  - Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
  - Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-3
changelog:
  - Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
  - Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
  - Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-3
changelog:
  - Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
  - Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
  - Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-5
changelog:
  - Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
  - Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user


author: zhangshaoning<euleros@huawei.com> - 7.0.76-8.h1
changelog:
  - Type:security
  - ID:CVE-2018-1336
  - SUG:restart
  - DESC:1)update to version 7.0.76-8
         2)fix CVE-2018-8014


author: wangchong<wangchong56@huawei.com> - 7.0.76-8.h7
changelog:
  - Type:cves
  - ID:CVE-2020-1938 CVE-2019-17563 CVE-2019-12418
  - SUG:restart
  - DESC:fix CVE-2020-1938 CVE-2019-17563 CVE-2019-12418


author: Matthew Harmsen <mharmsen@redhat.com> 7.0.0-3
changelog:
  - PKI TRAC Ticket #283 - Dogtag 10: Integrate Tomcat 6 'tomcatjss.jar' and
    Tomcat 7 'tomcat7jss.jar' in Fedora 18 tomcatjss package


author: Christina Fu <cfu@redhat.com> 7.1.1-1
changelog:
  - Bugzilla Bug #1058366 NullPointerException in tomcatjss searching
    for attribute "clientauth" (cfu)
  - Bugzilla Bug #871171 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 (cfu)
  - Bumped revision to 7.1.1


author: Endi Sukma Dewata <edewata@redhat.com> 7.1.2-2
changelog:
  - Bugzilla Bug #1344804 - Build failure on RHEL 7.3
    (patch for Bugzilla Bug #1245786 - Build failure on F23 was backported to
     RHEL 7 to coincide with Tomcat version change to 7.0.68+)


author: Bastien Nocera <bnocera@redhat.com> 3.14.3-1
changelog:
  - Update to 3.14.3
  - Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
  Resolves: #1174589


author: Bastien Nocera <bnocera@redhat.com> 3.14.3-4
changelog:
  - Remove Python3 plugins, they're mostly accessory plugins,
    and RHEL 7.2 only support Python2 for now
  Resolves: #1259643


author: Ray Strode <rstrode@redhat.com> 3.14.3-5
changelog:
  - Add more goo to the compat desktop file to prevent them
    from exposing in control-center
  Related: #1259292


author: John D. Ramsdell <ramsdell@mitre.org> - 1.0-6
changelog:
  - Changed URL to SourceForge development site.
  - Changed source to NEU site.
  - Quoted % references in macros within changelog.
  - README: Note tpm-tools only needed to take ownership of a TPM.


author: John Kacur <jkacur@redhat.com> - 2.2.1-8
changelog:
  - Remove patches from tar file, and apply them explicitly in the spec file
  - trace-split-Do-not-allow-spliting-of-latency-tracers.patch
  Resolves: rhbz#1198942


author: John Kacur <jkacur@redhat.com> - 2.2.2-1
changelog:
  - Update to trace-cmd-v2.2.2 which includes the following fixes
  - trace-input: Init kbuf back to NULL after free kbuf
  - kernelshark: Use ull annotation for 64bit numbers
  Resolves: rhbz#1219847


author: zhengshaoyu<zhengshaoyu@huawei.com> - 0.3.13-1.h1
changelog:
  - Type:cves
  - ID:CVE-2020-24330 CVE-2020-24331
  - SUG:restart
  - DESC:fix CVE-2020-24330 CVE-2020-24331


author: yaoxin<yaoxin23@huawei.com> - 0.3.13-1.h2
changelog:
  - Type:cves
  - ID:CVE-2020-24331
  - SUG:NA
  - DESC:require /etc/tcsd.conf to be owned by root:tss mode 0640 for CVE-2020-24331


author: Pravin Satpute <psatpute@redhat.com> 3.0.9-42
changelog:
  - Resolves: rh#1125703 ttmkfdir fails to build on arch: ppc64le (Generic build failure)
  - Patch from Peter Robinson <pbrobinson@redhat.com>


author: John Kacur <jkacur@redhat.com> - 0.11-3
changelog:
  - spec: Mark configuration files with %config (998984)
  - spec: Document the real location of the source in a comment (998987)
  - CLI: fix ps_show_thread call with bad args count (1000025)


author: John Kacur <jkacxur@redhat.com> - 0.11.1-4
changelog:
  - tuna: Do polkit auth for GUI BZ:919212,974027 (996885)
  - tuna: Auto Correction for config file errors (1015062)
  - Rebased to 0.11.1 upstream
  Resolves: rhbz#996885
  Resolves: rhbz#1015062


author: John Kacur <jkacur@redhat.com> - 0.11.1-6
changelog:
  - tuna-modified-sysctl-settings-in-example.conf (1031582)
  - CLI-fix-traceback-where-enter-p-policy-without-prio (1035794)
  Resolves: rhbz#1035794


author: John Kacur <jkacur@redhat.com> - 0.11.1-10
changelog:
  - dropped the git housekeeping patch, not relevant here
  - docs-Remove-stray-a.patch
  - CLI-Introduce-nohz_full-N-entity.patch
  - tuna-config-Fix-pygtk-import.patch
  - tuna-Make-isolate-include-operations-affect-proc-irq.patch
  - tuna-Decide-whether-to-isolate-a-thread-based-on-PF_.patch
  - tuna-Fix-race-in-is_hardirq_handler.patch
  - CLI-Do-not-show-column-headers-when-not-outputting-t.patch
  - Correct-a-typo-in-the-net.ipv4.ipfrag_time-help-stri.patch
  Resolves: rhbz#1234963


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-4.1
changelog:
  - fixed various verification issues (by verification-fixes patch)
    resolves: rhbz#1282565
  - realtime profile now sets cpumask of unbound workqueues
    (by realtime-set-unbound-workqueues patch)
    resolves: rhbz#1282566
  - fixed lapic_timer_adv_ns cache in realtime-virtual-host profile
    (by lapic-timer-adv-ns-cache-fix patch)
    resolves: rhbz#1282567
  - fixed find-lapictscdeadline-optimal-fix in realtime-virtual-host profile
    (by find-lapictscdeadline-optimal-fix patch)
    resolves: rhbz#1282592
  - removed nohz_full from the realtime profile (by realtime-remove-nohz-full
    patch)
    resolves: rhbz#1282570


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-4.2
changelog:
  - fixed race in modprobe in realtime-virtual-host profile and extended
    stop action to have hint why it is called
    resolves: rhbz#1298204


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-4.4
changelog:
  - fixed traceback by always stripping assignment modifiers even if not used
    (by assignment-modifiers-strip-fix patch)
    resolves: rhbz#1363682
  - added workaround for embedded slashes in device names
    (by embedded-slashes-in-device-name-fix patch)
    related: rhbz#1363682


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-4.5
changelog:
  - realtime: disabled timer migration
    resolves: rhbz#1360800
  - realtime-virtual-host/guest: added rcu_nocbs kernel boot parameter
    resolves: rhbz#1334479


author: swx443791<shuna@huawei.com> - 2.5.1-4.6.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: do not log error in _check_energy_perf_bias if EPB is not supported


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-1
changelog:
  - new-release
    related: rhbz#1155052
    - plugin_scheduler: work with nohz_full
      resolves: rhbz#1247184
    - fixed realtime-virtual-guest/host profiles packaged twice
      resolves: rhbz#1249028
    - fixed requirements of realtime and nfv profiles
    - fixed tuned-gui not starting
    - various other minor fixes
    - defuzzified gtk-3.8 patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.0-1
changelog:
  - new-release
    - rebase tuned to latest upstream
      resolves: rhbz#1289048
    - gui: fixed save profile
      resolves: rhbz#1242491
    - tuned-adm: added --ignore-missing parameter
      resolves: rhbz#1243807
    - plugin_vm: added transparent_hugepage alias
      resolves: rhbz#1249610
    - plugins: added modules plugin
      resolves: rhbz#1249618
    - plugin_cpu: do not show error if cpupower or x86_energy_perf_policy are
      missing
      resolves: rhbz#1254417
    - tuned-adm: fixed restart attempt if tuned is not running
      resolves: rhbz#1258755
    - nfv: avoided race condition by using synchronous mode
      resolves: rhbz#1259039
    - realtime: added check for isolcpus sanity
      resolves: rhbz#1264128
    - pm_qos: fixed exception if PM_QoS is not available
      resolves: rhbz#1296137
    - plugin_sysctl: reapply system sysctl after Tuned sysctl are applied
      resolves: rhbz#1302953
    - atomic: increase number of inotify watches
      resolves: rhbz#1322001
    - realtime-virtual-host/guest: added rcu_nocbs kernel boot parameter
      resolves: rhbz#1334479
    - realtime: fixed kernel.sched_rt_runtime_us to be -1
      resolves: rhbz#1346715
    - tuned-adm: fixed detection of no_daemon mode
      resolves: rhbz#1351536
    - plugin_base: correctly strip assignment modifiers even if not used
      resolves: rhbz#1353142
    - plugin_disk: try to workaround embedded '/' in device names
      related: rhbz#1353142
    - sap-hana: explicitly setting kernel.numa_balancing = 0 for better performance
      resolves: rhbz#1355768
    - libexec: fixed listdir and isdir in defirqaffinity.py
      resolves: rhbz#1252160
    - plugin_cpu: save and restore only intel pstate attributes that were changed
      resolves: rhbz#1252156
    - functions: fixed sysfs save to work with options
      resolves: rhbz#1251507
    - functions: fixed restore_logs_syncing to preserve SELinux context on rsyslog.conf
      resolves: rhbz#1268901
    - spec: correctly remove tuned footprint from /etc/default/grub
      resolves: rhbz#1268845
    - gui: fixed creation of new profile
      resolves: rhbz#1274609


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.1-1
changelog:
  - - new-release
    - rebase tuned to latest upstream
      resolves: rhbz#1289048
    - gui: fixed traceback caused by DBus paths copy&paste error
      related: rhbz#1356369
    - tuned-adm: fixed traceback of 'tuned-adm list' if daemon is not running
      resolves: rhbz#1358857


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-6
changelog:
  - fixed race in modprobe in realtime-virtual-host profile and extended
    stop action to have hint why it is called
    resolves: rhbz#1292117


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-3
changelog:
  -  Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
     not 06-13 and 07-18 as we had guessed.


author: Patsy Franklin <pfrankli@redhat.com> - 2015e-1
changelog:
  - Rebase to 2015e:
    - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
      not 06-13 and 07-18 as we had guessed.  (Thanks to Milamber.)
    - Assume Cayman Islands will observe DST starting next year, using US rules.
      Although it isn't guaranteed, it is the most likely.


author: Patsy Franklin <pfrankli@redhat.com> - 2015f-1
changelog:
  - Rebase to 2015f
    - North Korea switches to +0830 on 2015-08-15. 
      The abbreviation remains "KST". 
    - Uruguay no longer observes DST.


author: Patsy Franklin <pfrankli@redhat.com> - 2015g-1
changelog:
  - Rebase to 2015g
    - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
    - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
    - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
    - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
      effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
      New zone America/Fort_Nelson.


author: Patsy Franklin <pfrankli@redhat.com> - 2016a-1
changelog:
  - Rebase to 2016a
    - America/Cayman will not observe daylight saving this year after all.
      Revert our guess that it would.
    - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
    - Asia/Tehran now has DST predictions for the year 2038 and later,
      to be March 21 00:00 to September 21 00:00.  This is likely better
      than predicting no DST, albeit off by a day every now and then.


author: Patsy Franklin <pfrankli@redhat.com> - 2016b-1
changelog:
  - Rebase to 2016b
    - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
      Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
      2016-03-27 at 02:00 local time.  They need distinct zones since their
      post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
      Altai Republic, Russia, which will switch from +06 to +07 on the same date
      and local time.  The Astrakhan change is already official; the others have
      passed the first reading in the State Duma and are extremely likely.
      Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
    - As a trial of a new system that needs less information to be made up,
      the new zones use numeric time zone abbreviations like "+04"
      instead of invented abbreviations like "ASTT".
    - Haiti will not observe DST in 2016.
    - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
      Guess future transitions will be March's last
      Saturday at 01:00, not March's last Friday at 24:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016c-1
changelog:
  - Rebase to 2016c
    - Azerbaijan no longer observes DST.
    - Chile reverts from permanent to seasonal DST.


author: Patsy Franklin <pfrankli@redhat.com> - 2016d-1
changelog:
  - Rebase to 2016d 
    - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
    - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
    - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
      Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
      at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-1.prerelease
changelog:
  - Rebase to prerelease version of tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07. 
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-2
changelog:
  - Rebase to tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07.
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016i-1
changelog:
  - Rebase to tzdata-2016i:
    - Cyprus is now split into two time zones as of 2016-10-30
    - Tonga will reintroduce DST on 2016-11-06


author: Patsy Franklin <pfrankli@redhat.com> - 2016j-1
changelog:
  - Rebase to tzdata-2016ij
    - Saratov region of Russia is moving from +03 offset to +04 offset
      on 2016-12-04.


author: Patsy Franklin <pfrankli@redhat.com> - 2017a-1
changelog:
  - Rebase to tzdata-2017a.
    - Mongolia no longer observes DST. (BZ #1425214)
    - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
  - Add zone1970.tab file to the install list. (BZ #1414829)


author: Patsy Franklin <pfrankli@redhat.com> - 2018d-1
changelog:
  - Rebase to tzdata-2018d
    - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
    - Antarctica/Casey station changed to UTC+8 on March 11.


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-2
changelog:
  - Rebase to tzdata-2018e
    - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
    - In this update, the upstream project now defaults to using
      the "vanguard" data implementation which includes negative DST offsets.
      However, we are continuing to provide the "rearguard" format
      for data which does not use negative DST offsets to provide
      better compatibility with existing tools.  We intend to transition
      to the "vanguard" data implementation in the future.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018e-4
changelog:
  - Brazil moved the start of DST from the first Sunday in November
    to the third Sunday in November.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018f-1
changelog:
  - Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
  - Add patch to remove use of 25:00.
  - Drop previous change to DST in Brazil.  The government rescinded the
    change.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018g-1
changelog:
  - Rebase to tzdata-2018g
    - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
      planned.  This change is effective Octobober 28, 2018.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018i-1
changelog:
  - Rebase to tzdata-2018i (includes changes from tzdata-2018h)
    - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
    - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
    - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
      transition with the Qyzylorda change.
    - Metlakatla, Alaska will observe PST for this winter only.
    - Predict that Morocco will continue to adjust clocks around Ramadan.
    - Also include predictions for Iran from 2038 through 2090.


author: Patsy Griffin Franklin <patsy@redhat.com> - 2019a-1
changelog:
  - Rebase to tzdata-2019a
    - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
      previously predicted.
    - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
      of Pacific standard time.


author: Patsy Griffin <patsy@redhat.com> - 2019b-1
changelog:
  - Rebase to tzdata-2019b
    - Brazil will no longer observe DST going forward.
    - The 2019 spring transition for Palestine occurred 03-29, not 03-30.


author: Tomas Hozza <thozza@redhat.com> - 1.4.20-20
changelog:
  - Install tmpfiles configuration into /usr/lib/tmpfiles.d (#1180995)
  - Fix root key management to comply to RFC5011 (#1180267)


author: Tomas Hozza <thozza@redhat.com> - 1.4.20-26
changelog:
  - Added Conficts on redhat-release packages without unbound-anchor.timer in presets (Related #1215645)


author: Petr Menšík <pemensik@redhat.com> - 1.6.6-1
changelog:
  - Rebase to 1.6.6
  - Enable RFC 8145 Trust Anchor Signaling to help the root zone get keytag statistics
  - Enable ipsecmod support


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 1.6.6-1.h2
changelog:
  - Type:cves
  - ID:CVE-2020-12662 CVE-2020-12663
  - SUG:restart
  - DESC:fix CVE-2020-12662 CVE-2020-12663


author: Kamil Dudka <kdudka@redhat.com> - 2.01-3
changelog:
  - provide a man page for units_cur as a symlink to units.1
  - mention the --check-verbose option in units.1 man page


author: wangyue<wangyue92@huawei.com> - 2.3.1-11.h2
changelog:
  - Type:cves
  - ID:CVE-2018-7409 CVE-2018-7485
  - SUG:restart
  - DESC:rename CVE-2018-7409 and CVE-2018-7485 patch name


author: Tom Callaway <spot@fedoraproject.org> - 6.0-9
changelog:
  - Apply changes to match.c to sync with recmatch from util.c (from zip 3.0)
    This also resolves the license issue in that file.


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-15
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196134 #1196122 #1196126 #1196130


author: Richard Hughes <rhughes@redhat.com> - 0.9.19-1
changelog:
  - New upstream release
  - Add a Documentation tag to the service file
  - Add support for Logitech Unifying devices
  - Do not continue to poll if /proc/timer_stats is not readable
  - Fix device matching for recent kernels
  - Resolves: #848521


author: Richard Hughes <rhughes@redhat.com> - 0.9.20-1
changelog:
  - New upstream release
  - Factor out the Logitech Unifying support to support other devices
  - Fix batteries which report current energy but full charge
  - Fix several small memory leaks


author: Richard Hughes <rhughes@redhat.com> - 0.9.20-7
changelog:
  - Mark the devel-docs subpackage as noarch to silence a rpmdiff false positive.
  - Resolves: #1070661


author: Thomas Haller <thaller@redhat.com> 1.2.7-3
changelog:
  - Add manual page for usb_modeswitch_dispatcher and fix errors in
    manual page of usb_modeswitch (rhbz#948451, rhbz#884203).


author: Hans de Goede <hdegoede@redhat.com> - 0.6-3
changelog:
  - Fix usbredirserver not listening for ipv6 connections (rhbz#957470)
  - Fix a few (harmless) coverity warnings


author: Hans de Goede <hdegoede@redhat.com> - 0.6-5
changelog:
  - Use the new libusb autodetach kernel driver functionality
  - Fix a usbredirparser bug which causes tcp/ip redir to not work (rhbz#1005015)


author: Victor Toso <victortoso@redhat.com> - 0.6-8
changelog:
  - Fix migration due lack of capabilities from source host
    Resolves: rhbz#1185167
  - New callback to drop isoc packets in order to avoid high memory
    consumption in the client
    Resolves: rhbz#1312913


author: Miloslav Trmač <mitr@redhat.com> - 1.110-1
changelog:
  - Update to usermode-1.110.
    Note that this drops halt/poweroff/reboot helpers, the respective
    implementations in systemd now include PolicyKit support.  Spec file change
    based on a patch by Lennart Poettering <lpoetter@redhat.com>.
    Resolves: #804088, #849208


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-20
changelog:
  - drop last man page change, that option is just for compatibility
  - fix NAME section of man pages to be whatis friendly


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-23
changelog:
  - drop uuid-pgsql subpackage, it is outdated and does not work, use 
    uuid-ossp module from postgresql-contrib instead


author: Mark Wielaard <mjw@redhat.com>
changelog:
  - Add valgrind-3.9.0-manpage-memcheck-options.patch. (#1040914)
  - Add valgrind-3.9.0-s390-fpr-pair.patch. (#1036615)


author: Mark Wielaard <mjw@redhat.com> - 3.10.0-1
changelog:
  - Update to 3.10.0 final.
  - Don't run dwz or generate minisymtab.
  - Remove valgrind-3.9.0-s390x-ld-supp.patch fixed upstream.
  - Add valgrind-openmpi for ppc64le.


author: Mark Wielaard <mjw@redhat.com> - 3.10.0-2
changelog:
  - Fix ppc32 multilib handling on ppc64[be].
  - Drop ppc64 secondary for ppc32 primary support.
  - Except for armv7hl we don't support any other arm[32] arch.


author: Mark Wielaard <mjw@redhat.com> - 3.10.0-4
changelog:
  - Add valgrind-3.10.0-aarch64-times.patch
  - Add valgrind-3.10.0-aarch64-getsetsid.patch
  - Add valgrind-3.10.0-aarch64-dmb-sy.patch


author: <sshedmak@redhat.com> - 1.1.2-1
changelog:
  - Fixed FSType, Preferred Styles, UniqueID and Fullname
  - Fixed Invalid Glyph Names reported by fontlint
  - with exceptions string added in License


author: Forrest <linyanly.lin@huawei.com> 7.4.160-2.h1
changelog:
  - Type:cves
  - ID:CVE-2016-1248
  - SUG:false
  - DESC:Lack of validation of values for few options results in code exection


author: Forrest <linyanly.lin@huawei.com> 7.4.160-2.h2
changelog:
  - Type:cves
  - ID:CVE-2017-5953
  - SUG:false
  - DESC:Add CVE-2017-5953.patch to fix possible overflow with corrupted spell file CVE-2017-5953 bsc#1024724


author: zhouyi <zhouyi20@huawei.com> 7.4.160-2.h3
changelog:
  - Type:cves
  - ID:CVE-2017-6305
  - SUG:false
  - DESC:An issue was discovered in ytnef before 1.9.1. This is related to a patch
  described as "8 of 9. Out of Bounds read and write."


author: liangyun<liangyun2@huawei.com> - 7.4.160-2.h10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix garbled characters display when file name matches warning or error in tar file


author: Karsten Hopp <karsten@redhat.com> 7.4.5-1
changelog:
  - patchlevel 5
  - when closing a window fails ":bwipe" may hang
  - "vaB" while 'virtualedit' is set selects the wrong area


author: Karsten Hopp <karsten@redhat.com> 7.4.009-1
changelog:
  - patchlevel 009
    mkdir("foo/bar/", "p") gives an error message
    creating a preview window on startup messes up the screen
    new regexp engine can't be interrupted
    too easy to write a file was not decrypted (yet)


author: Marek Kasik <mkasik@redhat.com> - 3.8.2-8
changelog:
  - Allow to customize desktop size for RDP protocol
  - Add available translations for new strings
  - Resolves: #862389


author: Marek Kasik <mkasik@redhat.com> - 3.8.2-9
changelog:
  - Use FreeRDP API in RDP plugin
  - Request RDP certificate verification if needed
  - Add available translations for new strings
  - Resolves: #1091765


author: Marek Kasik <mkasik@redhat.com> - 3.14.3-1
changelog:
  - Update to 3.14.3
  - Add translations update from translation team
  - Add translation fix from upstream
  - Remove unused patches
  - Resolves: #1174568


author: Fabiano Fidêncio <fidencio@redhat.com> 0.6.0.12
changelog:
  - Show a debug message instead of an error message when trying to
    connect to a non-existent guest using ovirt
    Resolves: rhbz#1168495


author: Fabiano Fidêncio <fidencio@redhat.com> 2.0-1
changelog:
  - Rebase to 2.0
    Resolves: rhbz#1181288
  - virt-viewer cannot connect to spice VM when libvirt uses tcp port
    with sasl encryption
    Resolves: rhbz#1167354
  - virt-viewer will core dump with -r option via ssh when destroying
    the guest
    Resolves: rhbz#1163647
  - virt-viewer cannot set zoom level in command line for vnc guest
    Resolves: rhbz#1170071
  - launching virt-viewer using --attach makes it crashes
    Resolves: rhbz#1196552
  - --attach doesn't work with SELinux
    Resolves: rhbz#1141228


author: Jonathon Jongsma <jjongsma@redhat.com> - 2.0-2
changelog:
  - Add 'admin' key to [ovirt] .vv file section
    Resolves: rhbz#1210248
  - Shortcuts missing from "Send key" menu when started using plugin
    Resolves: rhbz#1230602
  - Add minimum version check to rhev spice-client
    Resolves: rhbz#1223469


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-4
changelog:
  - set keepAlive on libvirt connection
    Resolves: rhbz#1164052
  - Rebase to 2.0: Add a missing bug
    Resolves: rhbz#1228759


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-5
changelog:
  - Allow to resize window to any size
    Resolves: rhbz#1242509
  - Upate virt-viewer-events.c to match libvirt-glib's event file
    Resolves: rhbz#1243228


author: Victor Toso <victortoso@redhat.com> - 2.0-6.1
changelog:
  - Utilize SSO to authenticate against oVirt engine for foreign menu support
    Resolves: rhbz#1344635


author: Pavel Grunt <pgrunt@redhat.com> - 2.0-6.2
changelog:
  - Adjust timer to refresh ovirt foreign menu
    Resolves: rhbz#1353627
  - Fix crash when disabling the last display
    Resolves: rhbz#1354283


author: Fabiano Fidêncio <fidencio@redhat.com> 0.6.0.11
changelog:
  - Fix crash when connecting to a guest through VNC and typing a wrong
    password
    Resolves: rhbz#1159731


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-2
changelog:
  - Include two upstream patches for detecting Xen and Linux VServer better
    (RHBZ#973663).
  - Modernize the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-3
changelog:
  - Suppress warning message on Amazon EC2:
    "grep: /proc/xen/capabilities: No such file or directory"


author: Akira TAGOH <tagoh@redhat.com> - 20121230-2
changelog:
  - Drop -common package and keep consistent state of the directory
    by using the macro. (#893789)
  - Drop old Obsoletes and Provides line.


author: Martin Osvald <mosvald@rehat.com> - 3.0.2-10
changelog:
  - Resolves: #1058704 - vsftpd does not support DHE cipher suites
  - Resolves: #1058712 - vsftpd does not support ECDHE cipher suites
  - Resolves: #1198259 - The vsftpd hangs in a SIGCHLD handler when the pam_exec.so is used in pam.d configuration


author: Richard W.M. Jones <rjones@redhat.com> - 5.13-2
changelog:
  - Enable /etc/watchdog.d directory for storing test binaries
    (RHBZ#657750, RHBZ#831190).
  - Missing BR systemd-units.
  - Update .gitignore.
  - Drop Group line, not required by modern RPM.


author: Ales Ledvinka <aledvink@redhat.com> - 5.13-9
changelog:
  - SELinux: Add /usr/libexec/watchdog/scripts/ for test-bin and repair-bin to inherit from.
  - systemd: service with network available dependency
  - systemd: correct cgroup for realtime settings
  - Document SELinux and systemd.


author: Peter Lemenkov <lemenkov@gmail.com> 4.60.1-1
changelog:
  - Version 4.60.1 (bugfix release)
  - Added man-pages
  - The only patch was rebased
  - Small cosmetic spec-file cleanups


author: Tomas Popela <tpopela@redhat.com> - 2.0.4-6
changelog:
  - Enable higher compression for output rpms
  - Resolves: rhbz#1039590
  - Avoid video player to set system volume to 100%
  - Resolves: rhbz#1029783


author: Tomas Popela <tpopela@redhat.com> - 2.4.9-2
changelog:
  - Compile with -fno-strict-aliasing
  - Resolves: rhbz#1174556
  - Update translations
  - Resolves: rhbz#1223643


author: Tomas Hozza <thozza@redhat.com> - 1.14-5
changelog:
  - Added BuildRequires: perl-podlators for pod2man
  - Patched manpage to silent new Tex errors
  - Resolves: (#914571)


author: Tomas Hozza <thozza@redhat.com> - 1.14-6
changelog:
  - add missing options accept-regex and reject-regex to man page
  - fix errors in texi2pod introduced in Perl-5.18


author: Tomas Hozza <thozza@redhat.com> - 1.14-8
changelog:
  - Fix deadcode and possible use of NULL in vprintf (#913153)
  - Add documentation for --regex-type and --preserve-permissions
  - Fix --preserve-permissions to work as documented (and expected)
  - Fix bug when authenticating using user:password@url syntax (#912358)
  - Document and fix --backups option


author: Tomas Hozza <thozza@redhat.com> - 1.14-12
changelog:
  - Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
  - Run internal test suite during build (#1295846)
  - Fix -nv being documented as synonym for two options (#1147572)


author: EulerOS Security <euleros-security@huawei.com> - 1.14-13.h1
changelog:
  - Fix CVE-2016-7098 files rejected by access list are kept on the disk for the duration of HTTP connection
  - Skip Test-c-partial


author: Tomas Hozza <thozza@redhat.com> - 1.14-15
changelog:
  - Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
  - Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)


author: Peter Hatina <phatina@redhat.com> - 1.10.3-20
changelog:
  - add master secret extension decoding in TLS extension
  - add encrypt-then-mac extension decoding in TLS extension
  - Resolves: #1222901


author: Peter Hatina <phatina@redhat.com> - 1.10.14-4
changelog:
  - Security patches
  - Resolves: CVE-2015-6243
              CVE-2015-6244
              CVE-2015-6245
              CVE-2015-6246
              CVE-2015-6248


author: Peter Hatina <phatina@redhat.com> - 1.10.14-7
changelog:
  - Rebase some tvbuff API from upstream to 1.10.14
  - Fixes crash when tvb_length_remaining() is used
  - Related: CVE-2015-6244


author: wangyue<wangyue92@huawei.com> - 1.10.14-7.h3
changelog:
  - Type:cves
  - ID:CVE-2015-8723 CVE-2015-8729 CVE-2015-8731 CVE-2016-2530 CVE-2016-2523
  - SUG:restart
  - DESC:fix CVE-2015-8723 CVE-2015-8729 CVE-2015-8731 CVE-2016-2530 CVE-2016-2523


author: wangyue<wangyue92@huawei.com> - 1.10.14-7.h4
changelog:
  - Type:cves
  - ID:CVE-2016-2531 CVE-2016-2532 CVE-2016-4006 CVE-2016-4077
  - SUG:restart
  - DESC:CVE-2016-2531 CVE-2016-2532 CVE-2016-4006 CVE-2016-4077


author: wangyue<wangyue92@huawei.com> - 1.10.14-7.h5
changelog:
  - Type:cves
  - ID:CVE-2016-4081 CVE-2016-4085 CVE-2016-5350 CVE-2016-5353
  - SUG:restart
  - DESC:fix CVE-2016-4081 CVE-2016-4085 CVE-2016-5350 CVE-2016-5353


author: wangyue<wangyue92@huawei.com> - 1.10.14-7.h6
changelog:
  - Type:cves
  - ID:CVE-2016-5359 CVE-2016-6505 CVE-2016-6507 CVE-2016-6508 CVE-2016-6510
  - SUG:restart
  - DESC:fix CVE-2016-5359 CVE-2016-6505 CVE-2016-6507 CVE-2016-6508 CVE-2016-6510


author: wangyue<wangyue92@huawei.com> - 1.10.14-7.h7
changelog:
  - Type:cves
  - ID:CVE-2016-7177 CVE-2016-7179 CVE-2016-7958 CVE-2016-9375
  - SUG:restart
  - DESC:fix CVE-2016-7177 CVE-2016-7179 CVE-2016-7958 CVE-2016-9375


author: wangyue<wangyue92@huawei.com> - 1.10.14-7.h8
changelog:
  - Type:cves
  - ID:CVE-2017-7703 CVE-2017-9345 CVE-2017-9352 CVE-2018-16057
  - SUG:restart
  - DESC:fix CVE-2017-7703 CVE-2017-9345 CVE-2017-9352 CVE-2018-16057


author: huanghaitao<huanghaitao8@huawei.com> - 1.10.14-7.h9
changelog:
  - Type:cves
  - ID:CVE-2017-13765 CVE-2017-17083 CVE-2015-8712 CVE-2015-8713
  - SUG:restart
  - DESC:fix CVE-2017-13765 CVE-2017-17083 CVE-2015-8712 CVE-2015-8713


author: nidailiang<nidailiang@huawei.com> - 1.10.14-7.h11
changelog:
  - Type:cves
  - ID:CVE-2017-9347 CVE-2017-9349 CVE-2018-14340 CVE-2018-14341 CVE-2018-19622
  - SUG:restart
  - DESC:fix CVE-2017-9347 CVE-2017-9349 CVE-2018-14340 CVE-2018-14341 CVE-2018-19622


author: nidailiang<nidailiang@huawei.com> - 1.10.14-7.h12
changelog:
  - Type:cves
  - ID:CVE-2018-14340 CVE-2018-14341 CVE-2018-5336 CVE-2018-7418
  - SUG:restart
  - DESC:fix CVE-2018-14340 CVE-2018-14341 CVE-2018-5336 CVE-2018-7418


author: Karel Zak <kzak@redhat.com> - 3.0-13
changelog:
  - fix #428582 - linux.words contains misspelled word "flourescent"
  - fix #440146 - misspelled word in /usr/share/dict/words (architecure)


author: Karel Zak <kzak@redhat.com> - 3.0-14
changelog:
  - fix #457309 - contains both 'unnecessary' and 'unneccesary'
  - fix #470921 -"Barack" and "Obama" are not in /usr/share/dict/words
  - update spec file (#226542 - Merge Review)


author: <danw@redhat.com> - 1:2.0-15
changelog:
  - Add domain_match config option from upstream (rh #1178263)
  - Include peer certificate in EAP events for use by clients


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-5
changelog:
  - macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
  - nl80211: Fix race condition in detecting MAC change (rh #1447073)


author: zhangchenfeng <zhangchenfeng1@huawei.com> - 1:2.6-5.h8
changelog:
  - Type:CVE
  - ID:CVE-2017-13077,CVE-2017-13078,CVE-2017-13079,CVE-2017-13080,CVE-2017-13081,CVE-2017-13082,CVE-2017-13086,CVE-2017-13087,CVE-2017-13088
  - SUG:NA
  - DESC:CVE-2017-13082:rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
         [CVE-2017-13078, CVE-2017-13079,CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088]:
         rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch,
         rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
         CVE-2017-13077:rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
         CVE-2017-13086:rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
         others:rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch,
         rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch,
         rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch


author: Peng Wu <pwu@redhat.com> - 0.2.0-0.3.beta
changelog:
  - get rid of binding="same", fixes [rhbz#578050] (New: lang-specific overrides rule doesn't work as expected).


author: Peng Wu <pwu@redhat.com> - 0.2.0-0.4.beta
changelog:
  - Improves Simplified Chinese and Traditional Chinese fonts.
    In order to keep the WenQuanYi Zen Hei as default Simplified Chinese font,
    the fontconfig file of this WenQuanYi Micro Hei font is removed.


author: Roland Grunberg <rgrunber@redhat.com> 0:0.5.2-1
changelog:
  - Update to 0.5.2.
  - Remove xmldb-api due to deprecation.
  - Fix ws-jaxme-ant-scripts.patch to apply cleanly.


author: Ondrej Vasik <ovasik@redhat.com> - 1.61-2
changelog:
  - Merge review cleanup (#226546), comment patches, license
    to LGPLv2+, specify names in files section...


author: Parag Nemade <paragn AT fedoraproject DOT org> - 3.3.12ga11-5
changelog:
  - Remove vendor tag from desktop file as per https://fedorahosted.org/fesco/ticket/1077
  - Cleanup spec as per recently changed packaging guidelines


author: Samantha N. Bueno <sbueno[at]redhat.com> - 3.3.12ga12-1
changelog:
  - updated to 3.3.12ga12
  - fixes CVE-2012-5662 (#889373, #924228)
  - add support for aarch64 to build system (#926737)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.7.1-15
changelog:
  - Add NOTICE.txt file to subpackages
  - Remove bundled sources of other packages used to build javadocs


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:2.7.1-17
changelog:
  - Remove classpaths from manifests, resolves: rhbz#575635
  - Remove jlex from classpath
  - Fix source URL to archive.apache.org
  - Don't mix spaces and tabs in spec file
  - Fix end-of-line encoding of some documentation files


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.3.8-2
changelog:
  - Specfile cleanups as suggested in the review.
  - Remove unneeded BR on pkgconfig.
  - Remove unneeded chrpath call.


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.7-2
changelog:
  - really remove the gcc-warning patch & remove old Makefile from git
  - s/Url/URL/, for both fixes thanks to pshiffer


author: Kalev Lember <kalevlember@gmail.com> - 0.9-1
changelog:
  - Update to 0.9
  - Adjust BuildRequires to build with gtk3
  - Drop lxde patch, merged upstream
  - Validate the desktop file


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.0-0.10.20110714git
changelog:
  - fix gnome-screensaver detection bogosity (#702540,#736159)
  - xdg-open: x-www-browser: command not found (#755553)
  - drop htmlview hackage


author: Kalev Lember <kalev@smartlink.ee> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - Dropped CVE-2009-1885 patch.
  - Use dos2unix -k instead of unrecognized option -U
  - Removed the multilib conflict workaround as Xerces_autoconf_config.hpp
    no longer contains the conflicting XERCES_SIZEOF_LONG define.


author: Eric Sandeen <sandeen@redhat.com> 3.1.3-2
changelog:
  - Preserve xattrs on multi-part stream restores (#1034014)
  - Prevent segfault on multi-part stream restores (#1034015)


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.8.alpha2
changelog:
  - mkfs.xfs fix default log size for small filesystems (#1034003)
  - xfs_copy: partial fixups for CRC filesystems (#1043570)
  - xfs_logprint: Don't error out after split items lose context (#1043591)


author: Eric Sandeen <sandeen@redhat.com> 3.2.1-1
changelog:
  - New upstream release (#1119940)
  - xfs_copy: fix data corruption of target (#1105170)
  - mkfs.xfs: handle mkfs of file on 4k block device (#1101236)
  - xfs_copy: don't exit with error code on success (#1100376)


author: Eric Sandeen <sandeen@redhat.com> 3.2.1-2
changelog:
  - xfs_quota: fix segfault when reporting on nonexistant path (#1077826)
  - xfs_quota: fix reporting on symlinked paths (#1077841)


author: Eric Sandeen <sandeen@redhat.com> 3.2.1-6
changelog:
  - xfs_repair: fix maximum block offset test (#1173146)
  - xfs_copy: fix assert failure on 4k sector devices (#1162414)
  - xfs_quota: man page updates (#175133, #1175627)


author: Eric Sandeen <sandeen@redhat.com> 3.2.2-1
changelog:
  - Update to upstream v3.2.2, plus fixes from v3.2.3 (#1223991)
  - repair: fix unnecessary secondary scan if only last sb is corrupt (#1201238)
  - repair: check ino alignment value to avoid mod by zero (#1223444)


author: Peter Hutterer <peter.hutterer@redhat.com> - 2.7-3
changelog:
  - Rebuild with fixed xkbcomp, re-create the right directory listing (not
    that anyone actually uses it)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.2.19-3
changelog:
  - Fix duplicate documentation (#1001250)
  - Turn on verbose build output via V=1 make
  - Use %?_isa in explicit package deps
  - Fix base package Group tag to "System Environment/Libraries"
  - Remove %defattr


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
  - New upstrema version with memleaks, crl checks and other fixes
  - enable make check during build
  - drop ecdsa patch as it has been included upstream


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.24-1
changelog:
  - new release 0.0.24, basic support for docbook->epub
    conversion, use backend extensions by default
    (--noextensions) to disable it


author: Peter Hutterer <peter.hutterer@redhat.com> 7.7-3
changelog:
  - luit 1.1.1
  - oclock 1.0.3
  - xclock 1.0.6
  - xbiff 1.0.3
  - xpr 1.0.4
  - xcursorgen 1.0.5
  - xclipboard 1.1.2
  - xfontsel 1.0.4
  - xfd 1.1.1
  - xlogo 1.0.4
  - xvidtune 1.0.3


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-3
changelog:
  - Git snapshot of the day to bring in various DPMS and other fixes
  - Update gpu-tools to 1.9
  - Xserver 1.17 ABI rebuild


author: Marc-Andre Lureau <mlureau@redhat.com> 0.1.1-12
changelog:
  - Try to fallback to previous working configuration if
    drmModeSetCrtc() failed.
    Resolves: rhbz#1127552


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.1.1-16
changelog:
  - Fix glitches when restarting X server
    Resolves: rhbz#1102175
  - Fix restarting X server
    Resolves: rhbz#1185807


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-17
changelog:
  - Fix freeze in xfig when entering space character
    Resolves: rhbz#1221909
  - Fix memory leak
    Resolves: rhbz#1222038
  - Fix cursor leak causing a crash when running RHEL6 anaconda in a VM
    Resolves: rhbz#1222040


author: Peter Hutterer <peter.hutterer@redhat.com> 1:7.5-14
changelog:
  - mkfontscale 1.1.0
  - mkfontdir 1.0.7
  - bdftopcf 1.0.4
  - Document mkfontscale's -u/-U in the man page (#948841)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-11
changelog:
  - Require xorg-x11-font-utils >= 7.2-11 for font-utils 1.1.0
  - Fix bashism in spec file (&>)
  - Remove perl hack for DEFAULT_FONTS_DIR, fixed upstream 
  - Remove perl and autoconf requirement.
  - Create %ghost files {misc|705dpi|...}/fonts.scale.
  - Drop fontdir alias patches
  - Update a few fonts (well, all of them)
      - encodings-1.0.3
      - font-adobe-100dpi-1.0.1
      - font-adobe-75dpi-1.0.1
      - font-adobe-utopia-100dpi-1.0.2
      - font-adobe-utopia-75dpi-1.0.2
      - font-adobe-utopia-type1-1.0.2
      - font-alias-1.0.2
      - font-arabic-misc-1.0.1
      - font-bh-100dpi-1.0.1
      - font-bh-75dpi-1.0.1
      - font-bh-lucidatypewriter-100dpi-1.0.1
      - font-bh-lucidatypewriter-75dpi-1.0.1
      - font-bitstream-100dpi-1.0.1
      - font-bitstream-75dpi-1.0.1
      - font-bitstream-type1-1.0.1
      - font-cronyx-cyrillic-1.0.1
      - font-cursor-misc-1.0.1
      - font-daewoo-misc-1.0.1
      - font-dec-misc-1.0.1
      - font-isas-misc-1.0.1
      - font-jis-misc-1.0.1
      - font-micro-misc-1.0.1
      - font-misc-cyrillic-1.0.1
      - font-misc-ethiopic-1.0.1
      - font-misc-misc-1.1.0
      - font-mutt-misc-1.0.1
      - font-schumacher-misc-1.1.0
      - font-screen-cyrillic-1.0.2
      - font-sony-misc-1.0.1
      - font-sun-misc-1.0.1
      - font-winitzki-cyrillic-1.0.1
      - font-xfree86-type1-1.0.2


author: Hans de Goede <hdegoede@redhat.com> - 7.7-10
changelog:
  - fontsproto-2.1.3
  - videoproto-2.3.2
  - xextproto-7.3.0
  - xproto-7.0.26
  - Cherry pick some unreleased fixes from upstream git


author: Adam Jackson <ajax@redhat.com> 1.17.2-8
changelog:
  - Add 32->24bpp downconversion and tile-based double buffering to the
    shadow framebuffer support in modesetting


author: nidailiang<nidailiang@huawei.com> - 1.17.2-10.h2
changelog:
  - Type:cves
  - ID:CVE-2017-10971 CVE-2017-10972 CVE-2017-12176
  - SUG:restart
  - DESC:fix CVE-2017-10971 CVE-2017-10972 CVE-2017-12176


author: nidailiang<nidailiang@huawei.com> - 1.17.2-10.h3
changelog:
  - Type:cves
  - ID:CVE-2017-12177 CVE-2017-12178 CVE-2017-12179 CVE-2017-12180 CVE-2017-12181 CVE-2017-12182 CVE-2017-12183 CVE-2017-12184 CVE-2017-12185 CVE-2017-12186 CVE-2017-12187 CVE-2017-13721 CVE-2017-2624 CVE-2018-14665
  - SUG:restart
  - DESC:CVE-2017-12177 CVE-2017-12178 CVE-2017-12179 CVE-2017-12180 CVE-2017-12181 CVE-2017-12182 CVE-2017-12183 CVE-2017-12184 CVE-2017-12185 CVE-2017-12186 CVE-2017-12187 CVE-2017-13721 CVE-2017-2624 CVE-2018-14665


author: jiangjun<jiangjun34@huawei.com> - 1.17.2-10.h4
changelog:
  - Type:cves
  - ID:CVE-2020-14346 CVE-2020-14361 CVE-2020-14362
  - SUG:NA
  - DESC:fix CVE-2020-14346 CVE-2020-14361 CVE-2020-14362


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-12
changelog:
  - Update sources for latest tarballs, some changes got lost before the commit
  - require gettext-devel for AM_ICONV (now required by xwininfo)


author: Hans de Goede <hdegoede@redhat.com> - 1.3.2-14
changelog:
  - Xclients: only try to start gnome classic session if installed
  - Resolves: rhbz#1078948
  - startx: Only specify vt argument automatically when run from a vt
  - Resolves: rhbz#1083188


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-1
changelog:
  - xinit 1.3.4
  - Drop xorg-x11-xinit-1.3.2-systemd-logind.patch (included upstream in 1.3.4)
  - Add patches from Fedora to fix automatically finding a free display-number
  - Resolves: rhbz#1194894


author: Kevin Fenzi <kevin@scrye.com> 1.3.2-7
changelog:
  - Add patch to not switch tty's, so systemd-logind works right with startx. 
  - Partially Fixes bug #806491


author: Peter Hutterer <peter.hutterer@redhat.com> 7.7-4
changelog:
  - xkbcomp: Fix generation of XKB directory listing, missing reset on file
    handler caused parse errors and incomplete directory listings


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.1.3.8-4
changelog:
  - Fix pom filenames (Resolves rhbz#655829)
  - Changes according to new guidelines (versionless jars)
  - Fix few packaging problems (post/postun deps)


author: Nils Philippsen <nils@redhat.com> - 0.998-21
changelog:
  - don't dereference NULL preview objects when quitting (#963696)
  - fix vendor tag logic in a prettier way


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.12.3-1
changelog:
  - update to 0.12.3
  - drop upstreamed immodule patch
  - rewrite Net/ThemeName handling: set it based on .gtkrc-2.0-kde4 (kcm-gtk)


author: yaokai<yaokai13@huawei.com> - 31.6.0-3.h2
changelog:
  - Type:cves
  - ID:CVE-2012-6702 CVE-2016-4472 CVE-2016-0718
  - SUG:restart
  - DESC:fix CVE-2012-6702 CVE-2016-4472 CVE-2016-0718


author: Pavel Raiskup <praiskup@redhat.com> - 5.1.2-5alpha
changelog:
  - fix manual page inconsistencies with help output (private #948533)
  - enable/fix the 'xzgrep -h' (private #850898)


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: Honza Horak <hhorak@redhat.com> - 2.12-9
changelog:
  - Do not check old passwords using passwd.adjunct feature
  - Patch from Paul Wouters to handle crypt() returning NULL
    Resolves: #814803


author: Honza Horak <hhorak@redhat.com> - 3:1.37.1-5
changelog:
  - Remove SysV init conversion and systemd macros compatible code
  - Require systemd instead systemd-units
  - Remove systemd-sysv


author: Honza Horak <hhorak@redhat.com> - 2.31-4
changelog:
  - Remove systemd-units and systemd-sysv requirements
  - Clean-up SysV init conversion code
  - Clean-up systemd preset macros compatibility code
  - Remove fedora-releated stuff for maps upgrading


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-119
changelog:
  - Don't create lockdir directories.
  - Resolves: rhbz#1130939
  - Mask st_mode to fix verifying permissions for ghost files.
  - Resolves: rhbz#1113395
  - Check /usr for writability before running a transaction.
  - Resolves: rhbz#1097383
  - Make --setopt handle spaces properly.
  - Resolves: rhbz#1095161
  - Fix traceback when the history dir is empty.
  - Resolves: rhbz#1095157
  - Test for lvm binary before using.
  - Resolves: rhbz#1047793


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-121
changelog:
  - Fix variable substitution.
  - Resolves: bug#1102585
  - Fix history searching for [abc] character lists failures.
  - Resolves: bug#1096147
  - Fix update-minimal command in the man page.
  - Resolves: bug#1087911


author: James Antill <james.antill@redhat.com> - 3.4.3-116
changelog:
  - Fix traceback on removing doc dirs.
  - Resolves: rhbz#1062959
  - Tweak docs for groups info, showing yum remove results.
  - Resolves: rhbz#833087


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-26
changelog:
  - yum-post-transaction-actions: allow colons in command part.
  - Resolves: bug#1134989
  - reposync: show urls for all repos when using -u option.
  - Resolves: bug#1133125
  - yum-config-manager: fix --save when --setopt contains wildcards.
  - Resolves: bug#1129590
  - post-transaction-actions: fix filename matching.
  - Resolves: bug#1127782
  - reposync: add missing switches to the manpage.
  - Resolves: bug#1121714
  - yumdownloader: print depsolving errors instead of ignoring them.
  - Resolves: bug#1113391
  - yumdownloader: make --destdir less of a hack.
  - Resolves: bug#1104995
  - needs-restarting: multiple fixes.
  - Resolves: bug#1095150


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-27
changelog:
  - reposync: preserve directory structure.
  - Resolves: bug#1139032
  - reposync: check for existing packages when using -u option.
  - Resolves: bug#1140864


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-30
changelog:
  - yum-config-manager: update config file specified using -c option.
  - Resolves: bug#1075708
  - yum-config-manager: require \* syntax to disable all repos.
  - Resolves: bug#1151154
  - Add plugin for overlayfs issue workaround.
  - Resolves: bug#1213602


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-32
changelog:
  - ovl plugin: change copy-up strategy, execute when root fs is mounted OverlayFS, add logging.
  - Related: bug#1213602


author: zhangshaoning<zhangshaoning1@huawei.com> - 1.1.31-34.h1
changelog:
  - Type:cves
  - ID:CVE-2018-10897
  - SUG:restart
  - DESC:reposync: improper path validation may lead to directory traversal


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0-1
changelog:
  - Update to 3.4.0
  - Don't run autoreconf and intltoolize in the spec file; the tarball should be
    good enough


author: Karel Klic <kklic@redhat.com> - 3.0-1
changelog:
  - New upstream version
  - Removed zip23.patch, because ZMEM is not used anyway
  - Removed zip-2.31-install.patch, problem solved in upstream
  - Removed zip23-umask.patch, upstream uses mkstemp which solves the problem
  - Removed zip-2.31-near-4GB.patch, because upstream version
    handles large files well
  - Removed zip-2.31-configure.patch, configure is better in the current version
  - Removed zip-2.3-sf.patch, the error message doesn't exist in upstream anymore
  - Removed zip-2.31-umask_mode.patch, which fixes also removed near-4GB patch
  - Updated zip-2.31-time.patch for zip 3.0
  - Updated exec-shield.patch for zip 3.0
  - Updated zip-2.3-currdir.patch for zip 3.0


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.7-7
changelog:
  - resolves: #844791
    rank Z_BLOCK flush below Z_PARTIAL_FLUSH only when last flush was Z_BLOCK
  - done some minor .spec file cleanup


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.7-8
changelog:
  - related: #832545
    reverted changes for this bug, static libraries shouldn't be compiled with
    -fPIC flag


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-30
changelog:
  - fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
  - fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
  - fix stack-based buffer overflow in exec.c:hashcmd() (CVE-2018-1071)
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - fix buffer overrun in xsymlinks (CVE-2017-18206)
  - fix NULL dereference in cd (CVE-2017-18205)
  - fix buffer overflow when scanning very long path for symlinks (CVE-2014-10072)
  - fix buffer overflow for very long fds in >& fd syntax (CVE-2014-10071)


author: zhangshaoning<euleros@huawei.com> - 5.0.2-31.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:1)update version to 5.0.2-31.h1
         2)fix CVE-2014-10070


author: James Antill <james@fedoraproject.org> - 5.0.2-7
changelog:
  - Remove unneeded build require on tetex.
  - Resolves: rhbz#1037828
  - Depend on hostname package instead of /bin/hostname.


author: zhangshaoning<zhangshaoning1@huawei.com> - 5.0.2-7.h5
changelog:
  - Type:cves
  - ID:CVE-2014-10070 CVE-2014-10071 CVE-2017-18206 CVE-2018-7549 CVE-2017-18205
  - SUG:NA
  - DESC:fix cves and remove C02cond.ztst to resolve compile


author: Jakub Martisko <jamartis@redhat.com> - 0.13.62-9
changelog:
  - Fix covscan warning
  - "Variable "file" going out of scope leaks the storage it points to."
    has been introduced by the original version of 0001-fix-CVE-2018-7725.patch
  - Related: 1558596


author: wangyue<wangyue92@huawei.com> - 0.13.62-9.h1
changelog:
  - Type:cves
  - ID:CVE-2017-5974 CVE-2017-5976 CVE-2017-5977 CVE-2017-5975 CVE-2017-5977 CVE-2017-5978
  - SUG:restart
  - DESC:fix CVE-2017-5974 CVE-2017-5976 CVE-2017-5977 CVE-2017-5975 CVE-2017-5977 CVE-2017-5978


author: nidailiang<nidailiang@huawei.com> - 0.13.62-9.h3
changelog:
  - Type:cves
  - ID:CVE-2018-16548 CVE-2018-6381 CVE-2018-6484 CVE-2018-6540 CVE-2018-6541 CVE-2018-6869
  - SUG:restart
  - DESC:CVE-2018-16548 CVE-2018-6381 CVE-2018-6484 CVE-2018-6540 CVE-2018-6541 CVE-2018-6869


