# changelog

author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-17
changelog:
  - release 1.3.4.0-17
  - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-18
changelog:
  - release 1.3.4.0-18
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-19
changelog:
  - release 1.3.4.0-19
  - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192)
  - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-20
changelog:
  - release 1.3.4.0-20
  - Resolves: bug 1278729 - Share nsslapd-threadnumber in the case nunc-stans is enabled (DS 48339)
  - Resolves: bug 1278730 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)
  - Resolves: bug 1279572 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325)
  - Resolves: bug 1279573 - nunc-stans: Attempt to release connection that is not acquired (DS 48311)
  - Resolves: bug 1280210 - deadlock in mep delete post op (DS 47976)
  - Resolves: bug 1281522 - acl - regression - trailing ', (comma)' in macro matched value is not removed (DS 48344)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-21
changelog:
  - release 1.3.4.0-21
  - Resolves: bug 1278730 - SimplePagedResults -- abandon could happen between the abandon check and sending results -- Fixing a regression introduced in 1.3.4.0-20 (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-22
changelog:
  - release 1.3.4.0-22
  - Resolves: bug 1290725 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375)
  - Resolves: bug 1290726 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same modify operation (DS 48370)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-23
changelog:
  - release 1.3.4.0-23
  - Resolves: bug 1295684 - many attrlist_replace errors in connection with cleanallruv (DS 48283)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-24
changelog:
  - release 1.3.4.0-24
  - Resolves: bug 1298105 - 389-ds hanging after a few minutes of operation (DS 48406)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-25
changelog:
  - release 1.3.4.0-25
  - Resolves: bug 1299757 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-13
changelog:
  - Release 1.3.5.10-13
  - Resolves: bug 1402030 - Non tombstone entry which dn starting with "nsuniqueid=...," cannot be deleted (DS 48133)
  - Resolves: bug 1402325 - do not treat missing csn as fatal (DS 49020)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-15
changelog:
  - Release 1.3.5.10-15
  - Resolves: bug 1402325 - do not treat missing csn as fatal (DS 48964)
  - Resolves: bug 1410080 - incompatible nsEncryptionConfig object definition prevents RHEL 7->6 schema replication (DS 49074)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-16
changelog:
  - Release 1.3.5.10-16
  - Resolves: bug 1414677 - (un)register/migration/remove may fail if there is no suffix (DS 49016)
  - Resolves: bug 1414678 - deadlock on cos cache rebuild (DS 49079)
  - Resolves: bug 1414679 - Release 1.3.5 may allow expired accounts access to systems (DS 49080, DS 49082)
  - Resolves: bug 1416368 - Aborted operation can leave RUV in incorrect state (DS 49008)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-17
changelog:
  - Release 1.3.5.10-17
  - Resolves: bug 1414677 - (un)register/migration/remove may fail if there is no suffix (DS 49016)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.5.10-19
changelog:
  - Release 1.3.5.10-19
  - Resolves: bug 1429495 - ns-slapd dies under heavy load 
  - Resolves: bug 1429498 - A filtered nsrole that specifies an empty nsrole in its nsRoleFilter will result in a segfault


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.5.10-20
changelog:
  - Bump version to 1.3.5.10-20
  - Resolves: bug 1437005 - CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages


author: zhangshaoning <zhangshaoning1@huawei.com> - 1.3.5.10-20.h1
changelog:
  - Type:cves
  - ID:CVE-2017-15134
  - SUG:NA
  - DESC:A stack buffer overflow flaw was found in the way 389-ds-base handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.


author: zhangshaoning<zhangshaoning1@huawei.com> - 1.3.5.10-20.h3
changelog:
  - Type:cves
  - ID:CVE-2017-15135 CVE-2018-1054
  - SUG:NA
  - DESC:update 389-ds-base from 1.3.5.10-20.h1 to 1.3.5.10-20.h3


author: xuewenzhen<euleros@huawei.com> - 1.3.5.10-20.h4
changelog:
  - Type:cves
  - ID:CVE-2018-1089
  - SUG:NA
  - DESC:update 389-ds-base from 1.3.5.10-20.h3 to 1.3.5.10-20.h4


author: zhangshaoning<zhangshaoning1@huawei.com> - 1.3.5.10-20.h7
changelog:
  - Type:cves
  - ID:CVE-2018-10850 CVE-2018-14624
  - SUG:restart
  - DESC:fix CVE-2018-10850 CVE-2018-14624


author: zhangshaoning<zhangshaoning1@huawei.com> - 1.3.5.10-20.h8
changelog:
  - Type:cves
  - ID:CVE-2018-14648
  - SUG:restart
  - DESC:Mishandled search requests in servers/slapd/search.c:do_search() allows for denial of service


author: zhangshaoning<zhangshaoning1@huawei.com> - 1.3.5.10-20.h9
changelog:
  - Type:cves
  - ID:CVE-2018-10935
  - SUG:restart
  - DESC:ldapsearch with server side sort allows users to cause a crash


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-12
changelog:
  - Release 1.3.5.10-12
  - Resolves: bug 1384785 - Replica install fails with old IPA master sometimes during replication process (DS 48992)
  - Resolves: bug 1388501 - 389-ds-base is missing runtime dependency - bind-utils (DS 48328)
  - Resolves: bug 1388581 - Replication stops working only when fips mode is set to true (DS 48909)
  - Resolves: bug 1390342 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin (DS 49014)
  - Resolves: bug 1390343 - trace args debug logging must be more restrictive (DS 49009)


author: Philip Prindeville <philipp@fedoraproject.org> - 1.5.0-1
changelog:
  - Version bump to 1.5.0
  - Have GeoIP.dat be a symlink to the real data, and install the canned
    GeoIP.dat as GeoIP-initial.dat
  - Change config as per Boris' instructions to use 'lite' databases which are
    regularly updated.
  - Add pkgconfig (.pc) file into devel subpackage
  - Add cron support for refreshing the lite databases and make a separate
    subpackage.


author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 32 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Jan Horak <jhorak@redhat.com> - 6.7.8.9-15
changelog:
  - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
    rhbz#1326834, rhbz#1334188, rhbz#1269553


author: zhangyi <zhangyi79@huawei.com> - 6.7.8.9-15.h7
changelog:
  - Type:cves
  - ID:CVE-2015-8959 CVE-2016-5010 CVE-2016-7522 CVE-2016-7532 CVE-2016-7535 CVE-2016-7537 CVE-2016-7538
  - SUG:NA
  - DESC:CVE-2015-8959:CPU usage DOS due to corrupted DDS files
         CVE-2016-5010:Out-of-bounds read when processing crafted tiff file
         CVE-2016-7522:out of bound access for malformed psd file
         CVE-2016-7532:Fix handling of corrupted psd file
         CVE-2016-7535:out of bound access for corrupted psd file
         CVE-2016-7537:out of bound access for corrupted pdb file
         CVE-2016-7538:SIGABRT for corrupted PSD file


author: gaochong <gaochong4@huawei.com> - 6.7.8.9-15.h13
changelog:
  - Type:cves
  - ID:CVE-2017-14224 CVE-2017-14682 CVE-2017-15033 CVE-2017-15016 CVE-2017-15017 CVE-2017-14139
  - DESC:CVE-2017-14224:A heap-based buffer overflow in WritePCXImage in coders/pcx.c
         CVE-2017-14682:magick/token.c allows remote attackers to cause a denial of service
         CVE-2017-15033:A memory leak in ReadYUVImage in coders/yuv.c
         CVE-2017-15016:A NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c
         CVE-2017-15017:A NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c
         CVE-2017-14139:A memory leak vulnerability in WriteMSLImage in coders/msl.c


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: hekui <hekui2@huawei.com> - 6.7.8.9-15.h7
changelog:
  - Type: cves
  - ID: CVE-2015-8959 CVE-2016-5010 CVE-2016-7522 CVE-2016-7532 CVE-2016-7535 CVE-2016-7537 CVE-2016-7538
  - SUG: restart
  - DESC: CVE-2015-8959:CPU usage DOS due to corrupted DDS files
          CVE-2016-5010:Out-of-bounds read when processing crafted tiff file
          CVE-2016-7522:out of bound access for malformed psd file
          CVE-2016-7532:Fix handling of corrupted psd file
          CVE-2016-7535:out of bound access for corrupted psd file
          CVE-2016-7537:out of bound access for corrupted pdb file
          CVE-2016-7538:SIGABRT for corrupted PSD file


author: Wu You <wuyou88@huawei.com> - 6.7.8.9-15.h14
changelog:
  - Type:cves
  - ID:CVE-2017-15281
  - DESC:ReadPSDImage in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service


author: zhangshaoning<zhangshaoning1@huawei.com> - 6.7.8.9-15.h15
changelog:
  - Type:cves
  - ID:CVE-2018-8804
  - SUG:restart
  - DESC:double free in WriteEPTImage function in coders/ept.c


author: shinansu<shinansu@huawei.com> - 1:6.9.9.38-1.h6
changelog:
  - Type:cves
  - ID:CVE-2018-10804 CVE-2018-10177 CVE-2018-16749  CVE-2019-7395 CVE-2019-7396 CVE-2019-12974 CVE-2019-12975 CVE-2019-12976 CVE-2019-12977 CVE-2019-12978 CVE-2019-12979 CVE-2019-13137 CVE-2019-13295 CVE-2019-13297 CVE-2019-13300 CVE-2019-13304 CVE-2019-13305 CVE-2019-13306 CVE-2019-13307 CVE-2019-13301 CVE-2019-13309 CVE-2019-13310 CVE-2019-13311 CVE-2019-13391 CVE-2019-13308 CVE-2019-13454 CVE-2019-13137
  - SUG:restart
  - DESC:fix CVE-2018-10804 CVE-2018-10177 CVE-2018-16749  CVE-2019-7395 CVE-2019-7396 CVE-2019-12974 CVE-2019-12975 CVE-2019-12976 CVE-2019-12977 CVE-2019-12978 CVE-2019-12979 CVE-2019-13137 CVE-2019-13295 CVE-2019-13297 CVE-2019-13300 CVE-2019-13304 CVE-2019-13305 CVE-2019-13306 CVE-2019-13307 CVE-2019-13301 CVE-2019-13309 CVE-2019-13310 CVE-2019-13311 CVE-2019-13391 CVE-2019-13308 CVE-2019-13454 CVE-2019-13137


author: ruanweidong<ruanweidong1@huawei.com> - 1:6.9.9.38-1.h8
changelog:
  - Type:cves
  - ID:CVE-2019-13133 CVE-2019-13134
  - SUG:restart
  - DESC:fix CVE-2019-13133 CVE-2019-13134


author: ruanweidong<ruanweidong1@huawei.com> - 1:6.9.9.38-1.h9
changelog:
  - Type:cves
  - ID:CVE-2020-29599 CVE-2020-27766
  - SUG:restart
  - DESC:fix CVE-2020-29599 CVE-2020-27766


author: jiangjun<jiangjun34@huawei.com> - 1:6.9.9.38-1.h10
changelog:
  - Type:cves
  - ID:CVE-2017-9501 CVE-2017-11533 CVE-2017-13768
  - SUG:restart
  - DESC:fix CVE-2017-9501 CVE-2017-11533 CVE-2017-13768


author: ruanweidong<ruanweidong1@huawei.com> - 1:6.9.9.38-1.h13
changelog:
  - Type:cves
  - ID:CVE-2019-16708 CVE-2019-16709 CVE-2019-16710 CVE-2019-16711
  - SUG:NA
  - DESC:fix CVE-2019-16708 CVE-2019-16709 CVE-2019-16710 CVE-2019-16711


author: zhangruifang<zhangruifang1@huawei.com> - 1:6.9.9.38-1.h1
changelog:
  - Type:cves
  - ID:CVE-2014-8354 CVE-2014-9852 CVE-2016-10046 CVE-2016-10059 CVE-2016-10069 CVE-2016-5691 CVE-2016-7525 CVE-2016-7906 CVE-2017-11527 CVE-2017-13144 CVE-2017-6497
       CVE-2014-8355 CVE-2014-9853 CVE-2016-10047 CVE-2016-10060 CVE-2016-10070 CVE-2016-6491 CVE-2016-7526 CVE-2016-8677 CVE-2017-11528 CVE-2017-13145 CVE-2017-6498
       CVE-2014-8562 CVE-2014-9854 CVE-2016-10049 CVE-2016-10061 CVE-2016-10071 CVE-2016-6823 CVE-2016-7528 CVE-2016-8707 CVE-2017-11529 CVE-2017-13146 CVE-2017-6499
       CVE-2014-8716 CVE-2014-9907 CVE-2016-10052 CVE-2016-10062 CVE-2016-10144 CVE-2016-7101 CVE-2016-7529 CVE-2016-8866 CVE-2017-11530 CVE-2017-13658 CVE-2017-6500
       CVE-2014-9821 CVE-2015-8900 CVE-2016-10053 CVE-2016-10063 CVE-2016-10145 CVE-2016-7515 CVE-2016-7530 CVE-2016-9559 CVE-2017-12427 CVE-2017-17499 CVE-2017-6501
       CVE-2014-9822 CVE-2015-8901 CVE-2016-10054 CVE-2016-10064 CVE-2016-10252 CVE-2016-7516 CVE-2016-7531 CVE-2017-11478 CVE-2017-13139 CVE-2017-17504 CVE-2017-6502
       CVE-2014-9823 CVE-2015-8902 CVE-2016-10055 CVE-2016-10065 CVE-2016-5687 CVE-2016-7517 CVE-2016-7533 CVE-2017-11505 CVE-2017-13140 CVE-2017-5507 CVE-2017-7941
       CVE-2014-9824 CVE-2015-8903 CVE-2016-10056 CVE-2016-10066 CVE-2016-5688 CVE-2016-7518 CVE-2016-7534 CVE-2017-11523 CVE-2017-13141 CVE-2017-5508 CVE-2017-7942
       CVE-2014-9825 CVE-2015-8957 CVE-2016-10057 CVE-2016-10067 CVE-2016-5689 CVE-2016-7519 CVE-2016-7539 CVE-2017-11524 CVE-2017-13142 CVE-2017-5509 CVE-2017-7943
       CVE-2014-9837 CVE-2015-8958 CVE-2016-10058 CVE-2016-10068 CVE-2016-5690 CVE-2016-7520 CVE-2016-7799 CVE-2017-11526 CVE-2017-13143 CVE-2017-5510 CVE-2018-6405
       CVE-2016-4562 CVE-2016-4563 CVE-2016-4564  CVE-2017-11525 CVE-2018-20467
  - SUG:restart
  - DESC:fix CVE-2014-8354 CVE-2014-9852 CVE-2016-10046 CVE-2016-10059 CVE-2016-10069 CVE-2016-5691 CVE-2016-7525 CVE-2016-7906 CVE-2017-11527 CVE-2017-13144 CVE-2017-6497
       CVE-2014-8355 CVE-2014-9853 CVE-2016-10047 CVE-2016-10060 CVE-2016-10070 CVE-2016-6491 CVE-2016-7526 CVE-2016-8677 CVE-2017-11528 CVE-2017-13145 CVE-2017-6498
       CVE-2014-8562 CVE-2014-9854 CVE-2016-10049 CVE-2016-10061 CVE-2016-10071 CVE-2016-6823 CVE-2016-7528 CVE-2016-8707 CVE-2017-11529 CVE-2017-13146 CVE-2017-6499
       CVE-2014-8716 CVE-2014-9907 CVE-2016-10052 CVE-2016-10062 CVE-2016-10144 CVE-2016-7101 CVE-2016-7529 CVE-2016-8866 CVE-2017-11530 CVE-2017-13658 CVE-2017-6500
       CVE-2014-9821 CVE-2015-8900 CVE-2016-10053 CVE-2016-10063 CVE-2016-10145 CVE-2016-7515 CVE-2016-7530 CVE-2016-9559 CVE-2017-12427 CVE-2017-17499 CVE-2017-6501
       CVE-2014-9822 CVE-2015-8901 CVE-2016-10054 CVE-2016-10064 CVE-2016-10252 CVE-2016-7516 CVE-2016-7531 CVE-2017-11478 CVE-2017-13139 CVE-2017-17504 CVE-2017-6502
       CVE-2014-9823 CVE-2015-8902 CVE-2016-10055 CVE-2016-10065 CVE-2016-5687 CVE-2016-7517 CVE-2016-7533 CVE-2017-11505 CVE-2017-13140 CVE-2017-5507 CVE-2017-7941
       CVE-2014-9824 CVE-2015-8903 CVE-2016-10056 CVE-2016-10066 CVE-2016-5688 CVE-2016-7518 CVE-2016-7534 CVE-2017-11523 CVE-2017-13141 CVE-2017-5508 CVE-2017-7942
       CVE-2014-9825 CVE-2015-8957 CVE-2016-10057 CVE-2016-10067 CVE-2016-5689 CVE-2016-7519 CVE-2016-7539 CVE-2017-11524 CVE-2017-13142 CVE-2017-5509 CVE-2017-7943
       CVE-2014-9837 CVE-2015-8958 CVE-2016-10058 CVE-2016-10068 CVE-2016-5690 CVE-2016-7520 CVE-2016-7799 CVE-2017-11526 CVE-2017-13143 CVE-2017-5510 CVE-2018-6405
       CVE-2016-4562 CVE-2016-4563 CVE-2016-4564  CVE-2017-11525 CVE-2018-20467


author: wangyue<wangyue92@huawei.com> - 1:6.9.9.38-1.h3
changelog:
  - Type:cves
  - ID:CVE-2018-16323 CVE-2018-16328
  - SUG:restart
  - DESC:fix CVE-2018-16323 CVE-2018-16328


author: Thomas Haller <thaller@redhat.com> - 1:1.0.6-22
changelog:
  - platform: fix detection of s390 CTC device (rh #1272974)
  - core: fix queuing activation while waiting for carrier (rh #1079353)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.0.6-25
changelog:
  - vpn: cancel the secrets request on agent timeout (rh #1272023)
  - vpn: cancel the connect timer when vpn reconnects (rh #1272023)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.10.2-14
changelog:
  - manager: retry activating devices when the parent becomes managed (rh #1553595)
  - manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
  - manager: fix starting teamd after service restart  (rh #1551958)


author: gulining<gulining1@huawei.com> - 1:1.10.2-16.h3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:enable NetworkManager-wait-online.service to ensure the correct startup sequence


author: liuzhiqiang<liuzhiqiang26@huawei.com> - 1:1.10.2-16.h5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:sync latest NetworkManager 1.10.2 from next_centos7.5 branch


author: JiaZhengSun <sunjiazheng1@huawei.com> - 1:1.4.0-14.h1
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: device forget unmanaged flag iuser explicit for unrealized devices
  - DESC: plugins ifupdown support source directory stanza   
  - DESC: ifcfg rh remove dead code from write ip4 setting
  - DESC: ifcfg rh add wifi protocols only if present in connection file
    Resolves:770907 
  - DESC: ifcfg rh fill auth alg with the original value for wpa psk
    Resolves:770907      
  - DESC: manager emit device removed signal when a device unrealizes    
    Resolves:771324


author: zwx499727 <zhangyujing1@huawei.com> - 1:1.4.0-14.h2
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: crypto not try to decrypt pkcs 8key if no password is supplied
    Resolves:771623
  - DESC: cli properly set multiple addresses in questionnaire mode
    Resolves:1380165
  - DESC: wwan ppp send explicit port speed to pppd when port speed is zero rhbz1281731
    Resolves:1281731
  - DESC: session monitor fix parsing of consolekit database
    Resolves:772640
  - DESC: libnm merge branch bg libnm activation stuck rh1367752
    Resolves:1367752
  - DESC: supplicant fix cancellation of interface association
    Resolves:1383628
  - DESC: libnm disconnect devices signals when disposing manager
    Resolves:1383758
  - DESC: merge branch bg platform unaligned stats64 bg0772605
    Resolves:772605


author: zwx499727 <zhangyujing1@huawei.com> - 1:1.4.0-14.h3
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: - Type:bugfix
  - SUG:NA
  - DESC: libnm fix memleak in nm device vxlan
  - DESC: libnm avoid possibly null address for nmdevicevlan calling nm utils hwaddr matches
  - DESC: wwan fix wrong connection cast on device state change
  - DESC: libnm core fix memleak in nm setting vlan c
  - DESC: manager fix state transition on resuming from sleep
  - DESC: device fix activation source schedule for rescheduling the same function
  - DESC: manager merge branch bg manager state bgo776001
    Resolves:776001
  - DESC: keyfile fix memleak in keyfile reader read array of uint


author: Zhipeng Xie<xiezhipeng1@huawei.com> - 1.4.0-14.h5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: device: add @set_permanent argument to nm_device_hw_addr_set()
  - DESC: bridge: support the ethernet.cloned-mac-address property
  - DESC: bond: support the ethernet.cloned-mac-address property


author: gulining<gulining@huawei.com> - 1.4.0-14.h5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Update from 1.0.6-27 to 1.4.0-14.h5 for fix setting MAC to bond


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-1
changelog:
  - Update to upstream release 1.8.0
  - device: support dummy devices (rh#1398932)
  - core: support attaching user-data to connection profiles (rh#1421429)
  - core: fix allowing FQDN in dhcp-hostname setting (rh#1443437)
  - core: fix configuring firewall while device is activating (rh#1445242)
  - core: don't block activation without carrier for IPv6 DAD (rh#1446367)
  - tui: force writing master key to ifcfg file when editing connection (rh#1425409)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-2
changelog:
  - core: fix persisting managed state of device (rh #1440171)
  - proxy: fix use-after-free (rh #1450459)
  - device: don't wrongly delay startup complete waiting for carrier (rh #1450444)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-3
changelog:
  - dhcp: don't add route to DHCP4 server (rh #1448987)
  - libnm: fix NUL termination of device's description (rh #1443114)
  - libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
  - core: fix device's UDI property on D-Bus (rh #1443114)
  - ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.8.0-4
changelog:
  - device: update external configuration before commit (rh #1449873)
  - bluetooth: fix crash on connecting to a NAP (rh #1454385)
  - device: release removed devices from master on cleanup (rh #1448907)
  - core: activate slaves using ifindex order by default (rh #1452585)
  - nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
  - po: update translations (rh #1382625)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-5
changelog:
  - ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
  - tui: fix crash during connect (rh #1456826)
  - libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-6
changelog:
  - connectivity: fix periodic connectivity check (rh #1458399)
  - bond: improve option matching on daemon restart (rh #1457909)
  - device: fix touching device after external activation (rh #1457242)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-7
changelog:
  - bond: fix crash comparing mode while generating bond connection (rh #1459580)
  - connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
  - device: persist nm-owned in run state (rh #1376199)
  - device: fix assuming master device on restart (rh #1452062)
  - device: apply route metric penality only when the default route exists (rh #1459604)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.8.0-8
changelog:
  - cli: fix output of iface in overview output (rh#1460219)
  - ppp: unexport NMPPPManager instance on dispose (rh#1459579)
  - cli: remove spurious device names from wifi subcommands output (rh#1460527)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-9
changelog:
  - device: don't change MTU unless explicitly configured (rh #1460760)
  - core: don't remove external IPv4 addresses (rh #1459813)


author: Avesh Agarwal <avagarwa@redhat.com> - 0.9.8.0-2
changelog:
  - Fixed rhbz#921061
  - Fixed rhbz#999353
  - Fixed rhbz#1035786
  - Fixed rhbz#1014830
  - Fixes 1035786 (and its duplicate 1040924)
  - Fixed 926225
  - Fixed dependency to libreswan.
  - Created a new sub package NetworkManager-openswan-gnome
  - Various other spec file fixes.
  - Additional code changes are as follows:
  - Fixed an issue where proper network stack is not loaded unless
    _stackmanager is run before starting pluto daemon service.
  - Fixed the termination operation of pluto daemon to comply with
    libreswan changes.
  - Fixed various debug messages.
  - Fixed initiation of pluto daemon by this plugin to reflect the
    changes in libreaswan.
  - Fixed defaults values for more parameters to help the VPN
    connection stay more reliable.
  - Rewrote pluto watch API which watches the pluto process for its status.
    Fixed memory leak issues as not all child processes were reaped correctly.
    Also g_spwan_close_pid was not being called after children were reaped.
    Also modified debugs and added more to help with debugging in the future.
  - Fixed an issue where nm-openswan service is searching for ipsec binary in
    both /sbin and /usr/sbin leading to same operation twice, as /sbin is just
    symlink to /usr/sbin, so removed /sbin from the search paths.
  - Fixed some libreswan related macro changes.
  - Fixed netmask issue when sending IP information to the nm openswan
    plugin service.
  - Fixed the current code as it does not set the default route field
    NM_VPN_PLUGIN_IP4_CONFIG_NEVER_DEFAULT when sending VPN information
    to nm-openswan plugin. This fix sets the field to TRUE.
  - Fixed some issues found by coverity scan.
  - Fixed an issue where writing configuration on stdin should not end with
    \n as it gives error. It used to work previously, but not with latest
    NetworkManager versions.
  - libreswan related fixes, as some macros have been modified after forking
    to libreswan from openswan.
  - openswan/libreswan does not provide tun0 interface, so fixed the code
    where it sends tun0 interface.
  - Fix prcoessing of nm-openswan-dialog.ui file and added more error notifications.
  - Fixed dead code based on coverity scan.
  - Fixed gnomekeyring lib dependencies.
  - Fixed Networkmanager and related lib dependencies.
  - Fixed gtk label max width issue by setting it to 35.
  - NM-openswan was missing support for nm-openswan-auth-dialog.desktop.in.in.
    So added a new nm-openswan-auth-dialog.desktop.in.in, and modified related
    Makefile and configure.ac files.


author: Nicolas Chauvet <kwizart@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1

  -* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.0-5
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: ruanweidong<ruanweidong1@huawei.com> - 1.7.1-7.h2
changelog:
  - Type:cves
  - ID:CVE-2020-11763 CVE-2020-11764 CVE-2017-9111 CVE-2017-9112 CVE-2017-9113 CVE-2017-9114 CVE-2017-9115 CVE-2017-9116
  - SUG:NA
  - DESC:fix CVE-2020-11763 CVE-2020-11764 CVE-2017-9111 CVE-2017-9112 CVE-2017-9113 CVE-2017-9114 CVE-2017-9115 CVE-2017-9116


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-5
changelog:
  - Support aarch64 by replicating release toolchain.
  - Configuration subpackage with kernel probed wildcard module aliases.
    as workaround for bz#961878 and fesco#1110
  - Man pages symlinks same as bin symlinks.
  - ipmi_ui command help argument.
  - ipmilan missing options.
  - Fixed build requirements.


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-7
changelog:
  - Hint compilation to avoid strict aliasing and prevent type-punned pointer issues.
  - Fix rPath regression for OpenIPMI-perl library.


author: Jan Safranek <jsafrane@redhat.com> - 2.0.19-2
changelog:
  - Updated RPM scriptlets with latest systemd-rpm macros (#850246)
  - Fixed fedora-review tool complaints


author: Tom Lane <tgl@redhat.com> 4.0-1
changelog:
  - Update to PyGreSQL 4.0
  - Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: xuewenzhen<euleros@huawei.com> - 3.10-11.h1
changelog:
  - Type:cves
  - ID:CVE-2017-18342
  - SUG:restart
  - DESC:CVE-2017-18342 PyYAML: yaml.load() API could execute arbitrary code.


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-14
changelog:
  - Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
    environment variable to enable it.
  - Resolves: rhbz#1245417


author: yaolijun<yaolijun2@huawei.com> - 1.2.15-14.h1
changelog:
  - Type:cves
  - ID:CVE-2019-7573 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638
  - SUG:restart
  - DESC:fix CVE-2019-7573 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638


author: wangyue<wangyue92@huawei.com> - 1.2.15-14.h2
changelog:
  - Type:cves
  - ID:CVE-2019-7574 CVE-2019-7572 CVE-2019-7575
  - SUG:restart
  - DESC:fix CVE-2019-7574 CVE-2019-7572 CVE-2019-7575


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-19
changelog:
  - abrt-auto-reporting: add ureport authentication command line arguments
  - add python-augeas to the requirements
  - mark all strings for translations
  - translation updates
  - Related: #1087880, #1174833


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-20
changelog:
  - remove the old dump directories during upgrade
  - abrt-action-install-debuginfo-to-abrt-cache: sanitize arguments and umask
  - fix race conditions and directory traversal issues in abrt-dbus
  - use /var/spool/abrt instead of /var/tmp/abrt
  - make the problem directories owned by root and the group abrt
  - validate uploaded problem directories in abrt-handle-upload
  - don't override files with user core dump files
  - fix symbolic link and race condition flaws
  - Resolves: #1211969, #1212819, #1212863, #1212869
  - Resolves: #1214453, #1214610, #1216973, #1218583


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-22
changelog:
  - do not open the build_ids file as the user abrt
  - do not unlink failed and big user core files
  - Related: #1212819, #1216973


author: CentOS Sources <bugs@centos.org> - 2.1.11-22.el7.centos
changelog:
  - Drop RHTS hint
  -  Change by David Mansfield <david@orthanc.cobite.com>
  -  Per http://bugs.centos.org/view.php?id=7192


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36.el7.centos
changelog:
  - add abrt patches related to CentOS from https://github.com/abrt/abrt/tree/centos7
  - disabled authenticated autoreporting


author: Jakub Filak <jfilak@redhat.com> - 1.0.6-1
changelog:
  - Fix a deadlock in GC start callback
  - Disable experimental features in production releases
  - Resolves: #1012827


author: Jakub Filak <jfilak@redhat.com> - 1.0.6-3
changelog:
  - Mark stack trace with remote paths as not-reportable
  - Do not provide own reporting workflows
  - Code optimization
  - Do not report exception caught by native functions
  - Use the last frame class path for executable
  - Gracefully handle JVMTI errors
  - Add an abstract to README
  - Add support for journald and syslog
  - Make log output disabled by default
  - Add support for changing log directory
  - Fix a race condition causing a crash of JVM
  - Related: #1051198
  - Resolves: #1051483, #1054720, #1054737, #1055581


author: Jakub Filak <jfilak@redhat.com> - 1.0.6-6
changelog:
  - Make sure that agent_onload and agent_onunload are processed only once
  - Add test results for Linux-aarch64
  - Resolves: #1044756, #1063322


author: Al Stone <ahs3@redhat.com> - 20130725-2
changelog:
  - Fix several rpmlint items (listed below)
  - Add versions to explicit provides for acpixtract, acpidump
  - Not all setup steps used -q
  - Setup executable test script (run-misc-tests.sh) differently
  - Removed unneeded commented out line with macros in it
  - Removed mixed use of spaces and tabs (all spaces now)
  - Corrected source URLs (upstream moved)


author: Al Stone <ahs3@redhat.com> - 20130823-2
changelog:
  - Add in a copy of the GPLv2 text in order to comply with the requirement
    to always redistribute the terms of the license.


author: Dean Nelson <dnelson@redhat.com> - 20130823-3
changelog:
  - Fix run-misc-tests.sh script to properly set the number of BITS to 64 when run
    on a s390x system.


author: Dean Nelson <dnelson@redhat.com> - 20130823-7
changelog:
  - Fix the dangling symlink issue for acpidump(1) and acpixtract(1) man pages
    that was reported in RHBZ 1074681.


author: Dean Nelson <dnelson@redhat.com> - 20130823-8
changelog:
  - Fix run-misc-tests.sh script to properly set the number of BITS to 64 when run
    on a ppc64le system as requested by RHBZ 1125471.


author: Dean Nelson <dnelson@redhat.com> - 20140926-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 967963.
  - Refresh existing patches and add new ones to enable a clean build.
  - Fix build failures that start before and finish after midnight.


author: Dean Nelson <dnelson@redhat.com> - 20150619-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 1211328.
  - Refresh existing patches and add/delete ones to enable a clean build.
  - Add missing return status checks after a few calls to AcpiDmDumpTable() and
    one to fopen().


author: Dean Nelson <dnelson@redhat.com> - 20150619-3
changelog:
  - Remove acpitests-unix-20160527 directory from the build because it was a
    mistake that it was present and it complicated the fixing of the file
    permissions done related to RHBZ 1211328's requested rebase.


author: Dean Nelson <dnelson@redhat.com> - 20160527-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 1278038.
  - Refresh existing patches and add/delete ones to enable a clean build.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.18-1
changelog:
  - New version
  - Replaced RPM_BUILD_ROOT variables by {buildroot} macros
  - Updated URLs to project home page and source code
  - Dropped mk patch, handled better way in the spec


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-5
changelog:
  - Used unitdir macro instead of the hardcoded systemd paths
    Related: rhbz#1057268
  - Fixed bogus date in changelog (best effort)


author: Stef Walter <stefw@redhat.com> - 0.7.4-1
changelog:
  - Update to upstream point release 0.7.4
  - Correctly handle truncating long host names [#1001667]
  - Try to contact all available addresses for discovery [#1004442]
  - Build fixes [#1004823]


author: Stef Walter <stefw@redhat.com> - 0.7.5-1
changelog:
  - Update to upstream point release 0.7.5
  - Workaround for discovery via IPv6 address [#1004442]
  - Correctly put IPv6 addresses in temporary krb5.conf


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.5-9
changelog:
  - also remove include/agg_conv_gpc.h as it also carries a copy of the non-Free
    GPC license (upstream also recommends removing that file under
    http://www.antigrain.com/license/index.html#toc0005) (#559611)


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-4
changelog:
  - added patch to fix aide in FIPS mode
  - use only FIPS approved digest algorithms in aide.conf so that
    aide works by default in FIPS mode


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-6
changelog:
  - warn if processing prelinked binary objects and the prelink binary
    is not available
    Resolves: rbhz#1004826


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.25-1
changelog:
  - Updated to 1.0.25
  - Moved plugin specific configuration from /etc/alsa/pcm to /usr/share/alsa/alsa.conf.d


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.0.26.1-3
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines
  - don't build -tools for RHEL. Bill Nottingham patch. Resolves rhbz#586030


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.27.1-1
changelog:
  - Updated to 1.0.27.1
  - Updated alsa-info.sh to 0.4.61
  - Remove dependency on the dialog package (it is optional for alsa-info.sh)


author: Kexin Li <likexin4@huawei.com> - 21.48.22.56-5.1.h5
changelog:
  - Type:new-packages
  - SUG:NA
  - DESC:Enables the user to set the root password when installing the system


author: Huiying Gai <gaihuiying@huawei.com> - 21.48.22.46-5.1.h6
changelog:
  - Type: bugfix
  - SUG: NA
  - DESC: Use GtkResponseType values in the iso chooser dialog
    Resoves: rhbz#1265060
  - DESC: Make reclaim work with small screens and big labels
    Resoves: rhbz#1262778
  - DESC: Fix a typo in the hardware error message
    Resoves: rhbz#1284165
  - DESC: In tui cmdline mode skip showError and log message
    Resoves: rhbz#1280371
  - DESC: Import iutil earlier so we can use ipmi_report from check_for_ssh
    Resoves: rhbz#1267658
  - DESC: Manually set clock shifts on UI idle
    Resoves: rhbz#1251044
  - DESC: Include original kickstart in /root/original-ks.cfg
    Resoves: rhbz#1227939
  - DESC: Always quote values in ifcfg- files
    Resoves: rhbz#1279131
  - DESC: Fix problems with the hdiso method
    Resoves: rhbz#1274855
  - DESC: Don't clear the _currentIsoFile if another iso was selected
    Resoves: rhbz#1274855
  - DESC: Make EditTUIDialog error generic
    Resoves: rhbz#1248421
  - DESC: Add specific error string to TUI user dialog
    Resoves: rhbz#1248421
  - DESC: Lookup IPv6 address without brackets
    Resoves: rhbz#1267872
  - DESC: Don't process continue-clicked events for windows that aren't shown
    Resoves: rhbz#1255858
  - DESC: Fix a race between a window continuing and the next starting
    Resoves: rhbz#1255858
  - DESC: Fix nfs source crash when options change
    Resoves: rhbz#1264071
  - DESC: Add sshkey kickstart command
    Resoves: rhbz#1311755
  - DESC: Add --sshkey to kickstart sshpw command
    Resoves: rhbz#1240410
  - DESC: Check to see if DD repo is already in addOn list
    Resoves: rhbz#1268357
  - DESC: Make sure pluginconf.d exists
    Resoves: rhbz#1271766


author: Huiying Gai <gaihuiying@huawei.com> - 21.48.22.46-5.1.h7
changelog:
  - Type: bugfix
  - SUG: NA
  - DESC: NTP should have better behavior
    Resoves: rhbz#1260725
  - DESC: Display a fatal error if unable to encrypt a password
    Resoves: rhbz#1229474
  - DESC: Improve password salt creation
    Resoves: rhbz#1229474
  - DESC: Fix dasdfmt during graphical kickstart
    Resoves: rhbz#1269863
  - DESC: Show some confirmation to users if adding a DASD was successful
    Resoves: rhbz#1259016
  - DESC: Unify displayed columns in custom spoke dialogs
    Resoves: rhbz#1289577
  - DESC: Add device id to dasdfmt screen
    Resoves: rhbz#1269174
  - DESC: Increase yum debug logging level from 3 to 6
    Resoves: rhbz#1254368
  - DESC: As with the other labels, leave the string in glade as an untranslated placeholder and do the translation in python
    Resoves: rhbz#1314451
  - DESC: Use an icon that exists in Adwaita for the dasd confirmation
    Resoves: rhbz#1259016
  - DESC: execWithRedirect returns an int, not a tuple, used to execute realm still had the command, which is no longer needed.
    Resoves: rhbz#1270319
  - DESC: Fix a DBus InvalidProperty handling
    Resoves: rhbz#1315843
  - DESC: make No Space dialog look less terrible
    Resoves: rhbz#1264328
  - DESC: network: Don't set --device link default for hostname only network cmd
    Resoves: rhbz#1272274
  - DESC: network: fix configuring team in kickstart pre
    Resoves: rhbz#1254929
  - DESC: fix-multiple-inst.dd
    Resoves: rhbz#1268792
  - DESC: Anaconda creates extra connection because it doesn't recognize ifcfg file created in dracut
    Resoves: rhbz#1249750
  - DESC: The spoke changed method could be called while _reset_repoStore is altering the list of repos
    Resoves: rhbz#1315414
  - DESC: NM now takes over connections created in initramfs seamlessly, and our ifcfg is overwritten by dracut anyway
    Resoves: rhbz#1273323
  - DESC: network: don't traceback when trying to turn off misconfigured team connection
    Resoves: rhbz#1263971
  - DESC: Fix create device with bad name when parsing KS
    Resoves: rhbz#1293539
  - DESC: Fix duplicate network settings in dracut
    Resoves: rhbz#1293539
  - DESC: Fix a problem introduced by a cherry-pick
    Resoves: rhbz#1317558
  - DESC: If doing dirinstall on s390x, don't prompt to login via ssh to begin install
    Resoves: rhbz#1269207
  - DESC: Remove duplicate informational message from rescue mode
    Resoves: rhbz#1249082
  - DESC: remove the last nstance of SinglePV
    Resoves: rhbz#1268025
  - DESC: Remove unused import in storage_utils
    Resoves: rhbz#1268025
  - DESC: network fix vlan over bond in kickstart
    Resoves: rhbz#1234849
  - DESC: Print exception message what caused the repository removal
    Resoves: rhbz#1240379


author: Huiying Gai <gaihuiying@huawei.com> - 21.48.22.46-5.1.h8
changelog:
  - Type: bugfix
  - SUG: NA
  - DESC: Anaconda will crash when user add a new device in the Welcome screen
    Resoves: rhbz#1216926
  - DESC: network fix kickstart noipv4 option
    Resoves: rhbz#1291333
  - DESC: network copy static routes configured
    Resoves: rhbz#1255801
  - DESC: fix only one address is shown
    Resoves: rhbz#1264400
  - DESC: Remove default sensitivity on Network box
    Resoves: rhbz#1262833
  - DESC: Reset invalid disk selection before proceeding
    Resoves: rhbz#1265330
  - DESC: Run actions for argparse arguments
    Resoves: rhbz#1285519
  - DESC: Add a function for empty file creation
    Resoves: rhbz#1285519
  - DESC: Make it possible to skip saving of kickstarts and logs
    Resoves: rhbz#1285519
  - DESC: Add retry when downloading .treeinfo
    Resoves:rhbz#1292613
  - DESC: network: don't set 803-3-ethernet.name setting
    Resoves: rhbz#1323589
  - DESC: Exclude software raid block devices from list-harddrives output
    Resoves: rhbz#1311512
  - DESC: fix adding offload iSCSI devices
    Resoves: rhbz#1255280
  - DESC: Fix iSCSI kickstart options aren't generated
    Resoves: rhbz#1252879
  - DESC: iscsi: allow installing bootloader on offload iscsi disks
    Resoves: rhbz#1325134


author: Guoshuai Sun <sunguoshuai@huawei.com> - 21.48.22.56-5.1.h9
changelog:
  - Type:new-packages
  - SUG:NA
  - DESC:Change the zh_CN.po and the zh_CN.gmo to fix a bug when chosing Chinese.


author: Huiying Gai <gaihuiying@huawei.com> - 21.48.22.46-5.1.h10
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: iscsi: don't generate kickstart iscsi commands for offload devices
    Resoves: rhbz#1252879
  - DESC: Show network spoke in the TUI reconfig mode
    Resoves: rhbz#1302165
  - DESC: Fix problem of DASDs not being formatted in text ks
    Resoves: rhbz#1259437
  - DESC: Stop kickstart when space check fails
    Resoves: rhbz#1320436
  - DESC: Run the checkSoftwareSelection even when no environment is selected
    Resoves: rhbz#1320436
  - DESC: Check software selection in tui kickstart
    Resoves: rhbz#1320436
  - DESC: Combine formatting of LDL and unformatted DASDs
    Resoves: rhbz#1316088
  - DESC: Update the on-disk snapshot of storage when adv. disks are added
    Resoves: rhbz#1267944
  - DESC: Add access to the payload from addons
    Resoves: rhbz#1288636
  - DESC: Update storage snapshot after running dasdfmt
    Resoves: rhbz#1266151
  - DESC: Changes in network state revalidate sources
    Resoves: rhbz#1270354
  - DESC: Move settings_changed from NCB to Network Spoke
    Resoves: rhbz#1270354
  - DESC: Check that cache PVs (if any) are in the VG the LV belongs to
    Resoves: rhbz#1263258
  - DESC: Check minimal memory requirements properly
    Resoves: rhbz#1267673
  - DESC: network: validate netmask in tui
    Resoves: rhbz#1331054
  - DESC: Don't crash when taking a screenshot on the hub
    Resoves: rhbz#1327456


author: Libang Liu <liulibang@huawei.com> - 21.48.22.46-5.1.h12
changelog:
  - Type:new-packages
  - SUG:NA
  - DESC:fix a Chinese translation problem about promt information in user settings module


author: Libang Liu <liulibang@huawei.com> - 21.48.22.56-5.1.h14
changelog:
  - Type:new-packages
  - SUG:NA
  - DESC:add a patch to fix a Chinese translation problem about promt information in user settings module


author: Huiying Gai <gaihuiying@huawei.com> - 21.48.22.56-5.1.h15
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: network: don't crash when adding device without connection to list
    Related: rhbz#1265593
  - DESC: network: don't show libvirt virtual devices
    Related: rhbz#1298444
  - DESC: Fix bad indentation introduced in commit
    Related: rhbz#1265593
  - DESC: Move yum.cache to disk after partitioning
    Resoves: rhbz#1287438
  - DESC: Don't crash when selecting the same hdd ISO again
    Resoves: rhbz#1275771
  - DESC: network: fix regression in network tui device configuration
    Resoves: rhbz#1338620
  - DESC: network: don't crash on devices with zero MAC address
    Resoves: rhbz#1334632
  - DESC: Print an error when the kickstart file is missing
    Resoves: rhbz#1297380
  - DESC: network: fix filtering of libvirt devices (check for None values)
    Resoves: rhbz#1298444
  - DESC: Handle unsupported disklabels
    Related: rhbz#1266199,1294081,1310533,1334156
  - DESC: Added PROGRESS_REPORT for retry messages
    Resoves: rhbz#1255094
  - DESC: Don't mark an empty string for translation
    Related: rhbz#1255094
  - DESC: More descriptive message on invalid username
    Resoves: rhbz#1259284
  - DESC: Fix some residual issues of dasdfmt in text-mode
    Resoves: rhbz#1259437
  - DESC: Make the anaconda-generator exit early outside of the installation environment
    Resoves: rhbz#1289179
  - DESC: Warn about broken keyboard layout switching in VNC
    Resoves: rhbz#1274228
  - DESC: Use the LUKS device for swap in fstab
    Resoves: rhbz#1302747
  - DESC: Use the LUKS device for encrypted swap on RAID
    Related: rhbz#1302747
  - DESC: Display storage errors that cause no disks to be selected
    Related: rhbz#1340240
  - DESC: Add wordwrap to text mode and use it by default
    Resoves: rhbz#1267881


author: Huiying Gai <gaihuiying@huawei.com> - 21.48.22.56-5.1.h16
changelog:
  - Type:new-packages
  - SUG:NA
  - DESC: Fix use-case when repositories are local so changing of network settings don't require to test repositories.


author: Huiying Gai <gaihuiying@huawei.com> - 21.48.22.56-5.1.h17
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: Require network for network-based driver disks
    Resolves: rhbz#1261024
  - DESC: Add the nosave option to the boot option docs file
    Related: rhbz#1285519
  - DESC: Fix adding new VG in Custom spoke can't be applied
    Resolves: rhbz#1263715
  - DESC: Allow kickstart users to ignore the free space error
    Resolves: rhbz#1287308
  - DESC: tui: get proper index of entry we are handling in input
    Related: rhbz#1331054
  - DESC: Clarify a nosave related log message
    Related: rhbz#1285519
  - DESC: Fix architecture selection for help content
    Related: rhbz#1260880
  - DESC: Fix screenshot taking logic
    Resolves: rhbz#1327456
  - DESC: Fix PropertyNotFoundError PermHwAddress
    Resolves: rhbz#1364977
  - DESC: Run cache hack after moving cache to mounted storage
    Resolves: rhbz#1287438
  - DESC: Ensure LDL DASDs formatted in text ks
    Resolves: rhbz#1259437
  - DESC: Check before removing repo specific caches
    Resolves: rhbz#1369698
  - DESC: network: don't set empty team slave config for NM
    Related: rhbz#1254929
  - DESC: Revert Show network spoke in the TUI reconfig mode
    Related: rhbz#1302165
  - DESC: Fix traceback when payload have None as url
    Resolves: rhbz#1371494
  - DESC: network: avoid registering GTypes from multiple threads
    Resolves: rhbz#1366271
  - DESC: Close connections to the yum database
    Resolves: rhbz#1362427
  - DESC: Lock empty root password during kickstart installation
    Resolves: rhbz#1383656
  - DESC: Don't block gui during dasd formating
    Resolves: rhbz#1335465
  - DESC: tui: Treat dependency errors as errors in the software spoke
    Resolves: rhbz#979307
  - DESC: yum: Always release payload and catch raised exceptions
    Related: rhbz#979307
  - DESC: Specify unit for reserved space in VG
    Related: rhbz#1260887


author: Brian C. Lane <bcl@redhat.com> - 21.48.22.54-1
changelog:
  - ibft: fix setting dracut boot args for static ibft nic configuration
    (rvykydal)
    Resolves: rhbz#1267526
  - dracut: accept inst.dd=[file:]/dd.iso (wwoods)
    Resolves: rhbz#1268792
  - Fix issues with the date&time not being updated on timezone changes
    (vpodzime)
    Resolves: rhbz#1267450


author: Brian C. Lane <bcl@redhat.com> - 21.48.22.55-1
changelog:
  - network: create ifcfg files in tui if needed (rvykydal)
    Resolves: rhbz#1268155
  - Do not limit ONBOOT default setting to url and nfs installation methods
    (rvykydal)
    Resolves: rhbz#1269264


author: CentOS Sources <bugs@centos.org> - 21.48.22.56-1.el7.centos
changelog:
  - Add CentOS install class as default
  - use the right path for the EULA string (issue 7165,  bstinson)
  - use efi_dir = centos
  - disable the mirrorlist options
  - make boot part fs default to xfs


author: Karanbir Singh <kbsingh@centos.org> - 21.48.22.56-5.el7.centos
changelog:
  - Forward port existing patch
  - discard efivar patch, rolled into install class
  - setup new help text 
  - rebase install class
  - ensure productName is available in the yumpayload
  - use our own stubs for help
  - remove the hard dep for anaconda-user-help ( since its far too upstream specific )
  - Skip repo md retry if we are not online ( try at most 2 times (


author: cwx519943 <cangyi@huawei.com> - 21.48.22.56-5.1.h22
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: network catch exception when reading in memory connection being removed
  - DESC: Show warnings about enabling the network time
  - DESC: Skip temporarily unavailable checks in the source spoke


author: lining<lining57@huawei.com> - 21.48.22.56-5.1.h27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: anaconda don't stumble upon new Device Statistics
          fix anaconda reboot unexpectedly when using net.ifname=0 and network


author: Miloš Jakubíček <xjakub@fi.muni.cz> - 0:2.7.7-23
changelog:
  - Add patch updating license on ShowString.java and StreamConverter.java
    examples (thanks to Tom Callaway, see BZ#848662)


author: Java SIG <java-devel@lists.fedoraproject.org> - 1.7-4
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Jaromir Capik <jcapik@redhat.com> 3.2.1-13
changelog:
  - saxon dependency removed - not needed
  - minor spec file changes according to the latest guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.2-1
changelog:
  - Update to upstream version 1.1.2
  - Convert POM to POM macros
  - Remove OSGi manifest patch; fixed upstream


author: gaochong <gaochong4@huawei.com> - 1.4.8-3.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:reboot
  - DESC:CVE-2017-12613: An out-of-bounds array dereference was found in apr_time_exp_get().


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.0.16-12
changelog:
  - Build with XMvn
  - Remove system-scoped dependency on tools.jar
  - Update to current packaging guidelines


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-5
changelog:
  - fix issues reported by static analysis tools
    Resolves: rhbz#1027762
  - add man-pages for arptables-{save,restore}
    Resolves: rhbz#1025726


author: Ales Ledvinka <aledvink@redhat.com> - 14:2.1a15-26
changelog:
  - fix permissions related to collected database
  - update ethcodes defaults to current public IEEE OUI-32


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-10
changelog:
  - fix license field
  - fix systemd macros in scriptlets part of the specfile
  - fix selinux patch to apply without fuzz=2


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16
changelog:
  - the correct solution is remove smp_flags, they don't work properly on ppc with
    the option mpower7
  - Related: rhbz#1048745


author: Kalev Lember <kalev@smartlink.ee> - 2.22.2-4
changelog:
  - Spec cleanup
  - Actually co-own /usr/share/devhelp/ directory
  - Require base package from -doc subpackage


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-7
changelog:
  - change x86_64 archdef to P4, prefetch instruction from hammer is illegal on some pentium 4
  - add -fstack-protector-strong to flags
  - Resolves: rhbz#1070783


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-9
changelog:
  - ppcle patches (conflicting patches modified)
  - tests on ppcle disabled to shorten build time and fit into 24 hour limit
  - resolves bug 1125475
  - aarch64 patches
  - Resolves: rhbz#1061956


author: Jaromir Capik <jcapik@redhat.com> - 3.10.1-10
changelog:
  - patching for Power8 to pass performance tunings and tests on P8 builders
  - re-enabling tests on ppc64le
  - Resolves: rhbz#1125475


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-11
changelog:
  - apply patches 99 and 110 to all ppc variants
  - build lapack with -frecursive flag (#1176026)
  - fix possible memory leak (#1350536)
  - fix wrong sed substitutions (#1402627)
  - Resolves: rhbz#1350536
  - Related: rhbz#1176026


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-12
changelog:
  - cleanup: merge the application of ppc patches from previous commit
    into single block
  - Related: rhbz#1350536


author: Steve Grubb <sgrubb@redhat.com> 2.3.3-2
changelog:
  - New upstream bugfix/enhancement release
  resolves: #1053804 - ausearch issues found by ausearch-test
  resolves: #1030409 - ausearch help typo for "-x" option


author: Steve Grubb <sgrubb@redhat.com> 2.4-1
changelog:
  resolves: #1115196 - Add golang bindings for libaudit
  resolves: #1105150 - audispd config file parser fails on long input
  resolves: #1104973 - auparse truncating selinux context after first category
  resolves: #1088593 - auditctl man page examples use deprecated syscalls
  resolves: #1087849 - support for setting loginuid immutable
  resolves: #1073063 - AUDIT_SECCOMP events syscall field is not interpretted
  resolves: #975796  - confusing aulast records for bad logins


author: Steve Grubb <sgrubb@redhat.com> 2.4.1-1
changelog:
  resolves: #963353 - aarch64 userspace auditing needs to be written
  resolves: #1150202 - perf trace sleep 1 does not list any syscall information
  resolves: #1142989 - Update audit package to 2.4.1
  resolves: #1155221 - adjust fstatat naming to match kernel uapi


author: Steve Grubb <sgrubb@redhat.com> 2.4.1-4
changelog:
  - Remove golang bindings added under the following bz
  resolves: #1115196 - Add golang bindings for libaudit


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-12
changelog:
  - Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
  - Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
  - Add patch for Krb5, parse braces in values (RHBZ#1066419)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-13
changelog:
  - aug_save: return error when unlink fails (RHBZ#1091143)
  - augtool: add aliases to autocomplete (RHBZ#1100076)
  - augtool: remove unused dump-xml arg (RHBZ#1100106)
  - Automounter: parse hostnames with hyphens (RHBZ#1075162)
  - Cgconfig: parse other valid controllers (RHBZ#1112543)
  - Chrony: add lens (RHBZ#1071947)
  - docs: update man page with new commands (RHBZ#1100077)
  - Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
  - Httpd: parse continued, quoted lines (RHBZ#1100551)
  - Ldso: parse hwcap lines (RHBZ#1102629)
  - NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
  - Rmt: add lens (RHBZ#1100549)
  - Services: permit colons in service name (RHBZ#1121527)
  - Shellvars: support arithmetic expansion (RHBZ#1100550)
  - Syslog: parse TCP loghosts (RHBZ#1129386)
  - Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
  - Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
  - Systemd: parse quoted environment vars (RHBZ#1100547)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-14
changelog:
  - Kdump: parse new options, EOL comments (RHBZ#1139298)
  - Rsyslog: parse property filters and templates (RHBZ#1138402)
  - Systemd: parse semicolons inside entry values (RHBZ#1139498)
  - Systemd: parse environment variables where value is quoted (RHBZ#1138508)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-16
changelog:
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
  - Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
  - Shadow: add lens (RHBZ#1145249)


author: Dominic Cleal <dcleal@redhat.com> - 1.4.0-1
changelog:
  - Rebase to Augeas 1.4.0
  - Revert some changes for better compatibility with 1.1.0-17:
    * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
    * Dnsmasq: revert splitting of address/server options
    * Dovecot: restore quotes within values
    * Jaas: revert semicolon and line break changes
    * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
    * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
    * Syslog: restore tree without protocol for UDP hosts
    * UpdateDB: keep Simplevars to load config by default


author: Pino Toscano <ptoscanoredhat.com> - 1.4.0-2.el7_4.1
changelog:
  - TYPE: CVE
  - ID: CVE-2017-7555
  - SUG: NA
  - DES: Fix improper handling of escaped strings (RHBZ#1481545)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-10
changelog:
  - Add patch for IPRoute2, hex and hyphen protocols (RHBZ#1063961)
  - Add patch for IPRoute2, slashes in protocols (RHBZ#1063968)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.7-1
changelog:
  - samba-winbind-clients package contains the nsswitch and pam modules (#919117)
  - do not drop sss from nsswitch.conf on --update (#980861)
  - writing out smartcard/fingerprint auth policy to dconf (original patch by
    Ray Strode) (#990625)
  - document other possible return codes from authconfig invocation (#991804)
  - print error message if config file save fails (#994596)
  - never stop rpcbind (#990788)
  - do not disable sssd.service when --enablesssd is used (#953851)
  - revert use_first_pass addition to pam_sss in password stack (#953116)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-1
changelog:
  - detect invalid LDAP uri and report error
  - fix handling of IPA domain join errors and uninstall
  - add support for winbind authentication over Kerberos 5
  - set umask=077 by default for pam_mkhomedir and pam_oddjob_mkhomedir
  - better error checking for password quality options


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-2
changelog:
  - updated translations
  - make pam_pkcs11 not ignore the wait_for_card option
  - gnome-screensaver does not exist anymore


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-7
changelog:
  - check nslcd for restart when --enableforcelegacy is used
  - call restorecon on newly created configuration files


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-8
changelog:
  - enable/start sssd only when config exists or enabled
    for both pam and nsswitch.conf
  - updated translations


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-9
changelog:
  - do not overwrite special ldap base values
  - display error message if winbind or IPA domain join fails
  - fix invocation of IPA domain join from GUI
  - keep altfiles in nsswitch.conf if present (#1134084)
  - the winbind client is now in samba-winbind package (#1084997)
  - correct handling of SSSD enablement during IPA domain joins
  - do not bail out if multiple LDAP URIs are specified (#1142830)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-10
changelog:
  - fix title of IPA domain join window (#1166119)
  - add --unattended to IPA uninstall command (#1166131)
  - do not mistake comment for krb5 realm name (#1184639)
  - do not traceback with incorrect locales (#1187020)
  - correct the package needed for winbind (#1190226)
  - install empty /etc/sysconfig/authconfig file (#1194698)
  - let SSSD prompt non-local users for passwords (#1204864)
  - add includedir /var/lib/sss/pubconf/krb5.include.d/ to krb5.conf (#1207552)
  - pass the password provided by --winbindjoin to net join (#1225089)


author: Pavel Březina <pbrezina@redhat.com> - 6.2.8-26
changelog:
  - CVE-2017-7488 authconfig: Information leak when SSSD is used for authentication against remote server (#1441604)


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-6
changelog:
  - fedora-review (minor) fixes and typos: trim lines, remove defattr(,,), do not
    run `rm -rf %{buildroot} at the beginning of install section, use curly
    brackets only around rpm macros/variables and not around shell variables,
    remove clean section


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-8
changelog:
  - the 'INSTALL' file can be used as template file for packages which are using
    autoconf - mark it for installation again (#661623)


author: hanzhijun<hanzhijun1@huawei.com> - 2.69-11.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:eliminate pid differences
    Resolve AC_F77_MAIN and AC_FC_MAIN test case failures


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-46
changelog:
  - bz1153414 - autofs-5.0.5-109 with upgrade to RHEL 6.6 no longer recognizes
    +yp: in auto.master
    - fix fix master map type check.
  - Resolves: rhbz#1153414


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-47
changelog:
  - bz1156662 - autofs /net maps do not refresh list of shares exported on
    the NFS server
    - fix typo in update_hosts_mounts().
    - fix hosts map update on reload.
  - Resolves: rhbz#1156662


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-48
changelog:
  - bz1164957 - The default installed autofs.conf doesn't have default nfs
    protocol set to 4
    - add missing line to copy RedHat customized config to spec file.
  - Resolves: rhbz#1164957


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-49
changelog:
  - bz1166457 - Autofs unable to mount indirect after attempt to mount wildcard
    - make negative cache update consistent for all lookup modules.
    - ensure negative cache isn't updated on remount.
    - dont add wildcard to negative cache.
  - bz1162041 - priv escalation via interpreter load path for program based
    automount maps
    - add a prefix to program map stdvars.
    - add config option to force use of program map stdvars.
  - bz1161474 - automount segment fault in parse_sun.so for negative parser tests
    - fix incorrect check in parse_mount().
  - bz1205600 - Autofs stopped mounting /net/hostname/mounts after seeing duplicate
    exports in the NFS server
    - handle duplicates in multi mounts.
  - bz1201582 - autofs: MAPFMT_DEFAULT is not macro in lookup_program.c
    - fix macro usage in lookup_program.c.
  - Resolves: rhbz#1166457 rhbz#1162041 rhbz#1161474 rhbz#1205600 rhbz#1201582


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-50
changelog:
  - bz1218045 - Similar but unrelated NFS exports block proper mounting of
    "parent" mount point
    - remove unused offset handling code.
    - fix mount as you go offset selection.
  - Resolves: rhbz#1218045


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-51
changelog:
  - bz1233065 - 'service autofs reload' does not reloads new mounts only
    when 'sss' or 'ldap' is used in '/etc/nsswitch.conf' file
    - init qdn before use in get_query_dn().
    - fix left mount count return from umount_multi_triggers().
    - fix return handling in sss lookup module.
    - move query dn calculation from do_bind() to do_connect().
    - make do_connect() return a status.
    - make connect_to_server() return a status.
    - make find_dc_server() return a status.
    - make find_server() return a status.
    - fix return handling of do_reconnect() in ldap module.
  - bz1233067 - autofs is performing excessive direct mount map re-reads
    - fix direct mount stale instance flag reset.
  - bz1233069 - Direct map does not expire if map is initially empty
    - fix direct map expire not set for initial empty map.
  - Resolves: rhbz#1233065 rhbz#1233067 rhbz#1233069


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-52
changelog:
  - bz1233069 - Direct map does not expire if map is initially empty
    - update patch to fix expiry problem.
  - Related: rhbz#1233069


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-53
changelog:
  - bz1238573 - RFE: autofs MAP_HASH_TABLE_SIZE description
    - update map_hash_table_size description.
  - Resolves: rhbz#1238573


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-54
changelog:
  - bz1263508 - Heavy program map usage can lead to a hang
    - fix out of order call in program map lookup.
  - Resolves: rhbz#1263508


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18-1
changelog:
  - Update to 5.18
  - Fix multilib conflicts (#831379)
  - Make some dependencies arch-specific
  - Remove obsolete macros


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-13
changelog:
  - remove old build dependency comment
  - fix bogus dates in changelog
  - use the %{_smp_mflags} also by `make check`


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-14
changelog:
  - fix another requirement on perl package which may cause problems in future,
    thanks to Paul Howarth (#924938)
  - f-r: remove Buildroot tag, fix license tag


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.1-6
changelog:
  - aqute-bndlib renamed to aqute-bnd (#745166)
  - Fix compilation with openjdk 1.7.0
  - Use new maven macros
  - Packaging tweaks


author: Nils Philippsen <nils@redhat.com> - 0.9.6-1
changelog:
  - version 0.9.6:
    * Backport r493-494: documentation typo fixes.
    * Make the CLDR import script work with Python 2.7.
    * Fix various typos.
    * Fixed Python 2.3 compatibility (ticket #146, #233).
    * Sort output of list-locales.
    * Make the POT-Creation-Date of the catalog being updated equal to
      POT-Creation-Date of the template used to update (ticket #148).
    * Use a more explicit error message if no option or argument (command) is
      passed to pybabel (ticket #81).
    * Keep the PO-Revision-Date if it is not the default value (ticket #148).
    * Make --no-wrap work by reworking --width's default and mimic xgettext's
      behaviour of always wrapping comments (ticket #145).
    * Fixed negative offset handling of Catalog._set_mime_headers (ticket #165).
    * Add --project and --version options for commandline (ticket #173).
    * Add a __ne__() method to the Local class.
    * Explicitly sort instead of using sorted() and don't assume ordering
      (Python 2.3 and Jython compatibility).
    * Removed ValueError raising for string formatting message checkers if the
      string does not contain any string formattings (ticket #150).
    * Fix Serbian plural forms (ticket #213).
    * Small speed improvement in format_date() (ticket #216).
    * Fix number formatting for locales where CLDR specifies alt or draft
      items (ticket #217)
    * Fix bad check in format_time (ticket #257, reported with patch and tests by
      jomae)
    * Fix so frontend.CommandLineInterface.run does not accumulate logging
      handlers (#227, reported with initial patch by dfraser)
    * Fix exception if environment contains an invalid locale setting (#200)
  - install python2 rather than python3 executable (#710880)


author: Ondrej Holy <oholy@redhat.com> - 3.14.1-1
changelog:
  - Update to 3.14.1
  - Remove obsolete upstream patch
  - Add translations updates from upstream
  - Resolves: #1174557


author: Forrest <linyanly.lin@huawei.com> 4.2.46-19.h2
changelog:
  - Type:cves
  - ID:cve-2016-7543
  - SUG:false
  - DESC:fix CVE-2016-7543:Specially crafted SHELLOPTS+PS4 variables allows command substitutionfix.


author: chenzhen<chenzhen44@huawei.com> - 4.2.46-28.h4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport Bash 4.3 patch 20
         backport Bash 4.3 patch 23
         backport Bash 4.3 patch 38
         backport Bash 4.4 patch 8
         backport Bash 4.4 patch 10
         backport Bash 4.4 patch 13
         backport Bash 4.4 patch 15


author: zhengshaoyu<zhengshaoyu@huawei.com> - 4.2.46-28.h5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Don't allow var+=(values) to make assignments in VALUES append to existing values by default


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.0-1
changelog:
  - Update to 2.0 (fixes #817902, #831835).
  - Don't try to python-bytecompile our non-python *.py (#813651).


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.1-1
changelog:
  - Update to 2.1 (fixes #860510, #906469, #912113, #919246, #928253).
  - Don't ship completions included in util-linux 2.23-rc2 for F-19+.


author: Roman Rakus <rrakus@redhat.com> - 2.1-4
changelog:
  - Added conditionals to not add completions for some commands; the packages
    has their own completions
    Resolves: #1007839


author: Ville Skyttä <ville.skytta@iki.fi> - 0:5.2-10
changelog:
  - Specify explicit source encoding to fix build with Java 7.
  - Install jar and javadocs unversioned.
  - Crosslink with JDK javadocs.


author: Andy Grimm <agrimm@gmail.com> - 0:5.2-13
changelog:
  - This package should not own _mavendepmapfragdir (RHBZ#850005)
  - Build with maven, and clean up deprecated spec constructs
  - Fix pom file (See http://jira.codehaus.org/browse/MEV-592)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33
changelog:
  - Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185)
  - Fix error in internal test suite (#1259514)
  - Fix named-checkconf call in *-chroot.service files (#1278082)
  - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34
changelog:
  - Added support for CAA records (#1306610)
  - Use HTTPS URL instead of FTP for upstream sources (#1319280)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36
changelog:
  - Added automatic interface scan functionality (#1294506)
  - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-38.1
changelog:
  - Fix CVE-2016-9131 (ISC change 4508)
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)
  - Fix CVE-2016-9444 (ISC change 4517)


author: Forrest <linyanly.lin@huawei.com> - 32:9.9.4-38.1.h3
changelog:
  - Type:cves|bugfix
  - ID:CVE-2017-3135
  - SUG:false
  - DESC:Fix CVE-2017-3135 (ISC change 4557)
  - Fix and test caching CNAME before DNAME (ISC change 4558)


author: zhangyi <zhangyi79@huawei.com> - 32:9.9.4-38.3.h1
changelog:
  - Type:cves
  - ID:CVE-2016-2775
  - SUG:NA
  - DESC:Too long query name causes segmentation fault in lwresd


author: zhangyi <zhangyi79@huawei.com> - 32:9.9.4-38.3.h2
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC:add patch bind99-euler-range-port.patch to limit UDP ports range of dhcpd


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59
changelog:
  - Support for additional signing algorithms in rndc (#1501531)
  - New autogenerated rndc keys will use hmac-sha256 algorithm


author: zhangyi<zhangyi79@huawei.com> - 9.9.4-61.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add patch bind99-euler-range-port.patch to limit UDP ports range of dhcpd


author: lingsheng<lingsheng@huawei.com> - 9.9.4-61.1.h6
changelog:
  - Type:cves
  - ID:CVE-2018-5741 CVE-2018-5745 CVE-2019-6465
  - SUG:restart
  - DESC:fix CVE-2018-5741 CVE-2018-5745 CVE-2019-6465


author: Petr Spacek <pspacek@redhat.com> - 10.0-1
changelog:
  - update to latest upstream version
  - resolves: #1292145 Rebase bind-dyndb-ldap to latest upstream version


author: Tomas Krizek <tkrizek@redhat.com> - 11.1-1
changelog:
  - update to letest upstream version
  - resolves: #1393889 Rebase to bind-dyndb-ldap 11+
  - resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
  - resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error


author: Petr Spacek <pspacek redhat com> - 5.2-1
changelog:
  - update to 5.2
  - adds DNSSEC support and supports root zone in LDAP
  - idnsZoneActive attribute is not supported anymore


author: Petr Spacek <pspacek redhat com> - 6.0-2
changelog:
  - fix bug 1161635: send DNS NOTIFY message after any modification to the zone
  - fix bug 1168131: crash caused by interaction between forward and master zones


author: Petr Spacek <pspacek redhat com> - 7.99-1
changelog:
  - preliminary update to latests snapshot of upstream Git: 158e95e (#1204110)
  - resolves: #829395  DNSSEC support
  - resolves: #1139776 LDAP MODRDN (rename) is not supported
  - resolves: #1139778 Records deleted when connection to LDAP is down are not refreshed properly
  - resolves: #1184065 PTR record synchronization for A/AAAA record tuple can fail mysteriously
  - resolves: #1207539 Add support for TLSA resource records (DANE)
  - resolves: #1207540 Plugin will crash if idnsForwardZone object is in the wrong place
  - resolves: #1207541 Generic support for unknown DNS RR types (RFC 3597)


author: Petr Spacek <pspacek redhat com> - 8.0-1
changelog:
  - update to latest upstream version
  - resolves: #1204110 Rebase bind-dyndb-ldap to latest upstream version


author: jiazhenyuan<jiazhenyuan@huawei.com> 2.23.52.0.1-55.h8
changelog:
  - Type:cves
  - ID:CVE-2017-16826 CVE-2017-16827 CVE-2017-16828 CVE-2017-16831
  - SUG:NA
  - DESC:fix above cves


author: Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-45
changelog:
  - Change strings program to default to -a.  Fix problems parsing
    files containg corrupt ELF group sections.  (#1157276)


author: zhangshaoning<euleros@huawei.com> - 2.23.52.0.1-55.h14
changelog:
  - Type:cves
  - ID:CVE-2018-7568 CVE-2018-7569 CVE-2018-7642 CVE-2018-8945 CVE-2018-10372 CVE-2018-10373 CVE-2018-10534 CVE-2018-10535
  - SUG:restart
  - DESC:fix above cves


author: zhangshaoning<zhangshaoning1@huawei.com> - 2.23.52.0.1-55.h15
changelog:
  - Type:cves
  - ID:CVE-2018-1000876
  - SUG:restart
  - DESC:integer overflow leads to heap-based buffer overflow in objdump


author: zhangyujing<zhangyujing1@huawei.com> - 2.23.52.0.1-55.h37
changelog:
  - Type:cves
  - ID:CVE-2017-14128 CVE-2017-14939
  - SUG:restart
  - DESC:fix CVE-2017-14128 CVE-2017-14939


author: yangjian<yangjian79@huawei.com> - 2.23.52.0.1-55.h38
changelog:
  - Type:cves
  - ID:CVE-2018-18605 CVE-2018-18606 CVE-2018-18607 CVE-2018-20002
  - SUG:restart
  - DESC:fix CVE-2018-18605 CVE-2018-18606 CVE-2018-18607 CVE-2018-20002


author: yaokai<yaokai13@huawei.com> - 2.23.52.0.1-55.h46
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix building and testing dwarf debug section compression feature when zlib is not available


author: tangxiaolan<tangxiaolan9@huawei.com> - 2.23.52.0.1-55.h51
changelog:
  - Type:cves
  - ID:CVE-2019-9073 CVE-2019-14444
  - SUG:restart
  - DESC:fix CVE-2019-9073 and CVE-2019-14444


author: yaoxin<yaoxin23@huawei.com> - 2.23.52.0.1-55.h52
changelog:
  - Type:cves
  - ID:CVE-2019-9070  CVE-2019-9071  CVE-2019-14250
  - SUG:restart
  - DESC:fix CVE-2019-9070  CVE-2019-9071  CVE-2019-14250


author: yaoxin<yaoxin23@huawei.com> - 2.23.52.0.1-55.h53
changelog:
  - Type:cves
  - ID:CVE-2020-35493 CVE-2020-35494
  - SUG:restart
  - DESC:fix CVE-2020-35493 CVE-2020-35494


author: yaoxin<yaoxin23@huawei.com> - 2.23.52.0.1-55.h54
changelog:
  - Type:cves
  - ID:CVE-2019-17450 CVE-2019-17451
  - SUG:restart
  - DESC:fix CVE-2019-17450 CVE-2019-17451


author: Václav Pavlín <vpavlin@redhat.com> - 0.5.0-5
changelog:
  - Fix regression introduced by the addslot function
  - CoverityScan fixes
  - Place udev rules to /usr/lib rather than /lib
  Resolves: rhbz#1008899


author: Pravin Satpute <psatpute@redhat.com> - 0.3-13
changelog:
  - added lucida-typewriter and fixed subpackage
  - removed common subpackage
  - added conf file for each subpackage


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.1.0-1
changelog:
  - New version
  - Dropped office_scen patch (upstreamed)
  - Dropped hdparm patch (upstream added support for LVM)
  - Reworked rm_sudo patch


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: fengbing<fengbing7@huawei.com> - 5.44-4.h2
changelog:
  - Type:cves
  - ID:CVE-2016-9798 CVE-2016-9800 CVE-2016-9801 CVE-2016-9802 CVE-2016-9804 CVE-2016-9917 CVE-2016-9918
  - SUG:restart
  - DESC:fix CVE-2016-9798 CVE-2016-9800 CVE-2016-9801 CVE-2016-9802 CVE-2016-9804 CVE-2016-9917 CVE-2016-9918


author: Petr Machata <pmachata@redhat.com> - 1.53.0-15
changelog:
  - Fix misunderstanding of Boost.MPI about widths of some
    Boost.Serialization types.  (boost-1.53.0-mpi-version_type.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-18
changelog:
  - Turn off build flags pre-set by Boost distribution.
    (boost-1.53.0-buildflags.patch)
  - Pass RPM_OPT_FLAGS through user-config.jam.


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav Škarvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Petr Sabata <contyk@redhat.com> - 1.5-1
changelog:
  - 1.5 bump
  - BuildRoot and defattr cleanup
  - Use macros in Sources
  - Drop show-ports and foreach patches -- those have been included upstream


author: Petr Sabata <contyk@redhat.com> - 1.5-2
changelog:
  - Add three latest bugfixes from upstream git on top of 1.5
  - Dropping params patch (included upstream variant)


author: Jon Ciesla <limburgher@gmail.com> - 4.5-5
changelog:
  - Add systemd unit file, BZ 916628.
  - Drop spurious post scripts.
  - Move eveything but man pages and license files top -docs.


author: Eric Sandeen <sandeen@redhat.com> 0.20.rc1.20130917git194aa4a-1
changelog:
  - New upstream snapshot
  - Deprecated btrfsctl, btrfs-show, and btrfs-vol; still available in btrfs cmd


author: Petr Machata <pmachata@redhat.com> - 1.9.20111219-1
changelog:
  - Rebase to 20111219
    - add "-s" option
    - Resolves: #769237
  - Revert default stack size to 10000
    - Related: #743343


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.5.1-12
changelog:
  - Patch for failure to gpg sign commits with no gpg-agent 
    https://bugzilla.redhat.com/show_bug.cgi?id=905087


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: wangyue<wangyue92@huawei.com> - 1.10.0-3.h1
changelog:
  - Type:cves
  - ID:CVE-2017-1000381 CVE-2016-5180
  - SUG:restart
  - DESC:fix CVE-2017-1000381 CVE-2016-5180


author: Kai Engert <kaie@redhat.com> - 2014.1.98-71
changelog:
  - Update to CKBI 1.98 from NSS 3.16.1
  - building on RHEL 7 no longer requires java-openjdk
  - added more detailed instructions for release numbers on RHEL branches,
    to avoid problems when rebasing on both z- and y-stream branches.


author: Stef Walter <stefw@redhat.com> - 2014.1.98-72
changelog:
  - The BasicConstraints fix for Entrust Root is no longer necessary.
    In addition it was invalid for p11-kit 0.20.x. rhbz#1130485


author: Kai Engert <kaie@redhat.com> - 2015.2.3-71
changelog:
  - Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
  - Add an alternative version of the "Thawte Premium Server CA" root,
    which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
    which contain that version of the root certificate.
    This change doesn't add trust for another key, because both versions
    of the certificate use the same public key (rhbz#1170982).
  - Add a patch to the source RPM that documents the changes from the
    upstream version.
  - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
    configuration file.
  - The new scriptlets require the coreutils package.
  - Remove the obsolete blacklist.txt file.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-71
changelog:
  - Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
  - Use comments in extracted bundle files.
  - Change packaging script to support empty legacy bundles.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-72
changelog:
  - Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
    as a preparation to fix bugs in the interaction between p11-kit-trust and
    Mozilla applications, such as Firefox, Thunderbird etc.
  - For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
  - Require p11-kit 0.23.5
  - Added an utility to help with comparing output of the trust dump command.


author: Kai Engert <kaie@redhat.com> - 2017.2.16-71
changelog:
  - Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
    Mozilla removed code signing trust from all CAs (rhbz#1472933)


author: panxiaohe<panxiaohe@huawei.com> - 1.14.2-1.h3
changelog:
  - Type:cves
  - ID:CVE-2016-9082
  - SUG:restart
  - DESC:fix include for use of ptrdiff about CVE-2016-9082


author: Haïkel Guémar <hguemar@fedoraproject.org> - 1.9.8-1
changelog:
  - upstream 1.9.8
  - fix issues with f15/rawhide (RHBZ #676878)
  - drop gtk-doc dependency (RHBZ #604169)


author: Kalev Lember <kalevlember@gmail.com> - 1.10.0-1
changelog:
  - Update to 1.10.0
  - Have the -doc subpackage depend on the base package
  - Modernize the spec file
  - Really own /usr/share/devhelp directory


author: Peter Jones <pjones@redhat.com> - 10.2-8
changelog:
  - Incorporate changes from Matthias Saou:
  - Include install patch, to avoid all of the ugly manual installation.
  - Cosmetic fixes (libs group, scriplets, don't mix %name with hardcode...).


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tables}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tables}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tables -I/usr/lib/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tables -I/usr/lib/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "i386" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=i686-redhat-linux-gnu --host=i686-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tables}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tables}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tables -I/usr/lib/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tables -I/usr/lib/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "i386" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=i686-Huawei-linux-gnu --host=i686-Huawei-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-Huawei-linux-gnu --host=x86_64-Huawei-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.12-1
changelog:
  - correct encoding/decoding of variant-typed data which we receive and send
    as part of the org.freedesktop.DBus.Properties interface over the bus, and
    add some tests for them (based on patch from David Kupka, ticket #36)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.14-1
changelog:
  - make pathname canonicalization slightly smarter, to handle ".." in
    locations (#1131758)
  - updates to self-tests (#1144082)


author: Jan Cholasta <jcholast@redhat.com> - 0.75.14-2
changelog:
  - backport dogtag-submit: accept additional options to pass to the server when
    approving requests using agent creds (#1165155)


author: Jan Cholasta <jcholast@redhat.com> - 0.75.14-3
changelog:
  - backport change from git to correctly retrieve string values from DBus
    property interface replies (#1181022)


author: Jan Cholasta <jcholast@redhat.com> - 0.78.1-1
changelog:
  - Resolves: #1140241 RFE: Add SCEP support to certmonger
  - Resolves: #1148001 ipa-getcert killed by SIGABRT
  - Resolves: #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.1


author: Jan Cholasta <jcholast@redhat.com> - 0.78.3-1
changelog:
  - Resolves: #1244914 scep ca helper does not parse command line options
    correctly
  - Related:  #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.3


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-1
changelog:
  - Resolves: #1249753 challenge password not added in csr using start-tracking
  - Resolves: #1250397 Remove certmonger rekey feature in 7.2
    - Remove rekey feature
  - Related:  #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.4


author: snwint@suse.de
changelog:
  - support more digests: md5, sha1, sha224, sha256, sha384, sha512
  - changed license to gpl3
  - new major version


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-3
changelog:
  - Update to latest patches from eparis/Upstream
  -   checkpolicy: libsepol: implement default type policy syntax
  -   
  -   We currently have a mechanism in which the default user, role, and range
  -   can be picked up from the source or the target object.  This implements
  -   the same thing for types.  The kernel will override this with type
  -   transition rules and similar.  This is just the default if nothing
  -   specific is given.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
          * Fix errors found by coverity
          * implement default type policy syntax
          * Free allocated memory when clean up / exit.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-4
changelog:
  - Fix a segmentation fault if the --handle-unknown option was set without
  arguments.
  - Thanks to Alexandre Rebert and his team at Carnegie Mellon University
  for detecting this crash.


author: Hans de Goede <hdegoede@redhat.com> - 2:3.8.2-3
changelog:
  - Add a number of bug-fixes to deal better with high res cams (#873434)
  - Fix cheese-introduction.png being in both cheese and cheese-libs (#893756)
  - Put the COPYING file in the docs for cheese-libs (#893800)
  - Fix the flash when taking a photo being dark grey instead of white (#965813)
  - Fix needing to press the effects button twice to select effects after
    selecting an effect for the first time
  - Various other bug-fixes


author: Hans de Goede <hdegoede@redhat.com> - 2:3.8.2-4
changelog:
  - Fix misbehavior when started without a camera
  - Don't crash when the (last) camera gets unplugged
  - Automatically use a newly plugged camera when going from 0 to 1 cameras
  - Misc. other bugfixes


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.60-1
changelog:
  - don't completely override LDFLAGS
  - pass along any rpm-configured LD flags
  - make sure install_initd/remove_initd provides appropriate help output for those commands (#803818)
  - check for overridden services in /etc too (#850899)
  - chconfig should own /etc/rc.d (#894328)
  - isXinetdEnabled should also ask systemd (#820363)
  - alternatives: look for service file also in /etc
  - alternatives: add --list option (#622635)
  - chkconfig: add hint to call systemctl list-unit-files and list-dependencies (#800334)
  - chkconfig: correctly handle unreadable init.d (#913807)
  - alternatives: call systemctl enable with --force (#915667)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.62-1
changelog:
  - use systemctl preset, not systemctl enable
  - fix typo in manpage
  - partly support socket activated services


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.7.2-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config


author: Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1
changelog:
  - update to 1.29.1 (#1053022, CVE-2014-0021)
  - fix selecting of sources with prefer option (#1061048)
  - fix potential bug in writing of drift files (#1061106)
  - replace hardening build flags with _hardened_build (#1061036)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821
    CVE-2015-1822 CVE-2015-1853)
  - extend chrony-helper to allow using servers from DNS SRV records (#1211600)
  - add servers from DHCP with iburst option by default (#1219492)
  - execute test suite


author: wangce <wangce7@huawei.com> - 2.1.1-1.h1
changelog:
  - Type:cves
  - ID:CVE-2016-1567
  - SUG:NA
  - DESC:chrony before 1.31.2 and 2.x before 2.2.1 do not verify
         peer associations of symmetric keys when authenticating
         packets, which might allow remote attackers to conduct
         impersonation attacks via an arbitrary trusted key, aka
         a "skeleton key."


author: Petr Machata <pmachata@redhat.com> - 0.13-11
changelog:
  - Add missing last entry in long options array
    (chrpath-0.13-getopt_long.patch)
  - Update config.sub and config.guess to support aarch64
    (chrpath-0.13-aarch64.patch)


author: Jeff Layton <jlayton@redhat.com> 6.2-3
changelog:
  - fixes for bugs reported by coverity:
  - update bad bit shift patch with one that patches getcifsacl.c too
  - remove some dead code from getcifsacl.c, asn1.c, and data_blob.c
  - fix bad handling of allocated memory in del_mtab in mount.cifs.c


author: Garrett Holmstrom <gholms@fedoraproject.org> - 0.7.2-9
changelog:
  - Write /etc/locale.conf instead of /etc/sysconfig/i18n [RH:1008250]
  - Add tmpfiles.d configuration for /run/cloud-init [RH:1103761]
  - Use the license rpm macro
  - BuildRequire python-setuptools, not python-setuptools-devel


author: Lars Kellogg-Stedman <lars@redhat.com> - 0.7.6-2
changelog:
  - Rebased RHEL version to Fedora rawhide
  - Backported fix for https://bugs.launchpad.net/cloud-init/+bug/1246485
  - Backported fix for https://bugs.launchpad.net/cloud-init/+bug/1411829


author: Juerg Haefliger <juergh@gmail.com> - 0.27-4
changelog:
  - Break out the growpart script into its own subpackage to prevent pulling a
    boatload of unnecessary dependencies into a cloud image.


author: Juerg Haefliger <juergh@gmail.com> - 0.27-5
changelog:
  - Don't make gdisk a hard requirement for cloud-utils-growpart to save some
    space on systems that don't use GPT partitions.


author: Juerg Haefliger <juergh@gmail.com> - 0.27-8
changelog:
  - Make the package a no-noarch package on EPEL so that the build of the main
    package can be prevented for the arches that don't support it [bz#986809].


author: Rex Dieter <rdieter@fedoraproject.org> 2.3.3.4-6
changelog:
  - contribs-lib is not built and installed even with config (#794795, upstream ID: 3392466)
  - pkgconfig file is missing clucene-shared (upstream ID: 3461512)
  - non-descriptive descripton (#757319)


author: Petr Machata <pmachata@redhat.com> - 2.8.11-2
changelog:
  - Pass -fno-strict-aliasing to cm_sha2.c to avoid strict aliasing
    problems that GCC warns about.
  - Icon name in CMake.desktop shouldn't include filename extension.


author: Jan Safranek <jsafrane@redhat.com> - 0.5.2-6
changelog:
  - Fixed 'env' parameter value in 'get_providers()' function
    Resolves: #919082
  - Fixed embedded instance properties
    Resolves: #919081


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.9.5-3
changelog:
  - Fix placement of *.py[co] files
    Resolves: #921547
  - Remove /usr/share/cmpi - it's used by ruby binding that we don't build


author: zhangwenlong<zhangwenlong13@huawei.com> - 2.6-9.h1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:sort getDeclaredMethods() to eliminate differences of glassfish-jaxb


author: Richard Hughes <richard@hughsie.com> - 1-7
changelog:
  - Add the user-writable system-wide per-machine ICC profile directory from
    the new version of the OpenIccDirectoryProposal.


author: Richard Hughes <richard@hughsie.com> 1.0.0-1
changelog:
  - New upstream version
  - Add a config option for monitors with identical EDID values
  - Allow a different input and output format in CdTransform
  - Build all installed binaries with PIE
  - Build the colord binary with full RELRO
  - Do not show a warning when using 'colormgr device-get-profile-for-qualifier'
  - Fix crash in cd-iccdump by working around an lcms2 bug
  - Fix using the color sensors on ARM hardware
  - Set the STANDARD_space metadata for the print profiles
  - Show all the translations when dumping an ICC profile


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - New upstream version
  - Do not unconditionally enable BPC on the color transform
  - Fix profile created time for non-UTC timezones
  - Record the gamma table in the session helper error message


author: Richard Hughes <richard@hughsie.com> 1.0.2-1
changelog:
  - New upstream version
  - Add cd_icc_save_data() so that we can easily set _ICC_PROFILE
  - Add CdIccStore to monitor directories of ICC profiles
  - Add SystemVendor and SystemModel properties to the main interface
  - Allow to specify a non-qualified path when using FindProfileByFilename
  - Allow using the key 'Filename' when using FindProfileByProperty
  - Always return the error if any sync method failed
  - Fix GObject introspection when getting lists
  - Fix GObject introspection when getting metadata


author: Richard Hughes <richard@hughsie.com> 1.0.4-1
changelog:
  - Rebase to a new upstream version to fix small security bug
  - Use %ghost in the to avoid removing databases on upgrades
  - Resolves: #1012832


author: Richard Hughes <richard@hughsie.com> 0.1.34-1
changelog:
  - New upstream version
  - Add a ICC transform object for simple RGB conversions
  - Add a warning for RGB profiles with unlikely whitepoint values
  - Add Qt DBus annotations
  - Allow clients to call org.freedesktop.DBus.Peer
  - Correct a lot more company names when creating devices
  - Do not automatically add EDID profiles with warnings to devices
  - Increase the delay between patches in the session-helper
  - Install the bash completion support into /usr


author: Richard Hughes <richard@hughsie.com> 0.1.22-2
changelog:
  - Backport a patch from git master that fixes an include issue with
    projects that want to use colord-gtk.h and colord.h at the same time.


author: Richard Hughes <richard@hughsie.com> 0.1.25-1
changelog:
  - New upstream version.
  - Give the sample widget slightly curved corners and a gray outline
  - Do not use deprecated functions from libcolord
  - Fix warnings when building ColordGtk-1.0.gir
  - Fix up the licence boilerplate for CdSampleWidget


author: Jay Fenlason <fenlason@redhat.com> 1:1.2.15-1.el5
changelog:
  - Change sysconfig file to /etc/rdma/compat-dapl to match the change in dapl
  - Split out into separate source rpm from the dapl-2.0.25-2.el5.src.rpm
    Resolves: rhbz#557170 split compat-dapl into a separate srpm


author: Doug Ledford <dledford@redhat.com> - 1:1.2.15-2.el6
changelog:
  - Fix various rpmlint wanrings in spec file
  - Version all of the obsoletes
  - Now that this is no longer part of the dapl rpm, it needs its own
    doc macro so that the license and whatnot are on the system when the
    package is installed
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> - 1:1.2.15-2.1.el6
changelog:
  - Include pipe-leak patch to close
    Resolves: rhbz619439 - OFED1.5.1: uDAPL - cma: memory leak of FD's (DB2 pureScale)
    This required some whitspace editing--apparently the patch was garbled
    somewhere in transit.
  - Include the cma-memleak-verbs-CQ-compl-chans-fix patch to close
    Resolves: rhbz619443 - OFED1.5.1: uDAPL handles close on forked child exit (DB2 pureScale)


author: Doug Ledford <dledford@redhat.com> - 1:1.2.19-1
changelog:
  - Update to latest upstream release (1.2.15 -> 1.2.19)
  - Remove 3 patches rolled into upstream
  - Update exclusive arch to accommodate i686 arch
  - Related: bz725016, bz724896


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-7
changelog:
  - change -fstack-protector-strong to -fstack-protector in optflags,
    remove -march=x86-64 and -mfpmath=sse for ix86 (#1048852)


author: Jeff Law <law@redhat.com> - 1:2.12-1.80.4
changelog:
  - Fix passing of -z execstack to the linker.
  - Remove -mnew-mnenomics from PPC build flags
  - Pull over patch for 911307 from Fedora


author: zhangyi <zhangyi79@huawei.com> - 3.9.4-11.h19
changelog:
  - Type:cves
  - ID:CVE-2014-9330,CVE-2014-8127,CVE-2014-8129,CVE-2014-8130,
       CVE-2014-9655,CVE-2015-1547_8784,CVE-2015-8781,CVE-2015-8683_8665,
       CVE-2015-7554,CVE-2015-8668,CVE-2016-3632,CVE-2016-3945,
       CVE-2016-3990,CVE-2016-3991,CVE-2016-5320,CVE-2016-9533_9534_9536_9537,
       CVE-2016-9535,CVE-2016-9540,CVE-2016-5652
  - SUG:NA
  - DESC:Add Patch100~Patch118


author: ruanweidong<ruanweidong1@huawei.com> - 3.9.4-11.h20
changelog:
  - Type:cves
  - ID:CVE-2016-10271 CVE-2017-9404 CVE-2017-16232 CVE-2017-11335
  - SUG:NA
  - DESC:fix CVE-2016-10271 CVE-2017-9404 CVE-2017-16232 CVE-2017-11335


author: Jan Vcelak <jvcelak@redhat.com> 1:2.3.43-3
changelog:
  - enhancement: build with hardening flags (RELRO)
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - drop unnecessary patches
  - clean configure flags


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.0-3
changelog:
  - Workaround psm vs psm2 conflict by having two separate packages.
  - Related: #947311
  - Related: #1173305


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.0-4
changelog:
  - Disambiguate names of rpm macros among the built variants.
  - Use --with-verbs instead of the deprecated synonym --with-openib.
  - Related: #947311
  - Related: #1173305


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.0-10
changelog:
  - Remove psm2 package variant. Instead use MCA exclusion using config file.
  - Related: #947311
  - Related: #1173305


author: Doug Ledford <dledford@redhat.com> - 3.3.5-2
changelog:
  - Drop libibmad as it didn't soname bump, and also remove the lower level
    opensm libs, libosm{comp,vendor} as they didn't soname bump either
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 3.3.5-3
changelog:
  - Change the file spec so we don't accidentally pick up the debug files in
    the base package on 32bit arches
  - Resolves: bz732495


author: Marek Kasik <mkasik@redhat.com> - 0.22.5-4
changelog:
  - Add back glib, cpp and qt frontends so that existing applications
  - loads correct libpoppler.so.*.
  - Resolves: #1184215


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.7-4
changelog:
  - Forward-porting fixes from RHEL6.
  - Enlarge buffer used for formatting date in a string format.
  - Resolves: rhbz#891938.
  - Allow configuration of the maximum number of open files.
  - Resolves: rhbz#738967.


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.7-9
changelog:
  - Added commented-out "LimitNOFILE=" directive to conman.service.
  - This is systemd-esque way to change process limits for serivces.
  - Also and a comment when to use it.
  - Resolves: rhbz#1035228.


author: Paul Wouters <pwouters@redhat.com> - 1.4.2-8
changelog:
  - Resolves: rhbz#CVE-2015-6496
  - Fold in upstream patches since 1.4.2 release up to git 900d7e8
  - Fold in upstream patch set of 2015-08-18 for coverity issues


author: cwx519943 <cangyi@huawei.com> - 3.14.5-8.h3
changelog:
  -TYPE: bugfix
  -SUG: NA
  -DESC: power Fix possible crash if-up_client_get_devices fa
  -DESC: printers avoid crashes when searching for printers w
  -DESC: background Fix a few memory leaks
  -DESC: background Fix a few memory leaks
  -DESC: network Fix empty Wifi list


author: zhangshaoning<euleros@huawei.com> - 3.14.5-8.h4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:1)update version for bep
         2)Delete useless code
         3)change translation when changing passward
         4)fix used password error capture


author: Nils Philippsen <nphilipp@redhat.com> - 1.10-3
changelog:
  - don't expect find output to be sorted, move "make test" to %check (#237687,
    patch by Giuseppe Bonacci)
  - change license tag to "GPLv2"


author: Nils Philippsen <nphilipp@redhat.com> - 1.12-1
changelog:
  - version 1.12
  - remove obsolete tests patch
  - don't run md5sum against MD5sums as it lists a non-existing .MD5sums file
    which causes md5sum to error out
  - change license tag to "GPLv2 or GPLv3"


author: Jiri Vanek <jvanek@redhat.com> - 1.1-2
changelog:
  - package now "installs" also during pretrans, so pretrasn scripts can use it
  - pretrasn "install" is removed in postrans


author: Jiri Vanek <jvanek@redhat.com> - 1.1-3
changelog:
  - commented requires on lua posix to stop blocking composes.
  - changed it to 644 to dont mislead by executable flags
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 1.1-5
changelog:
  - posttrans silenced, the error is appearing only in state, when there is nothing to copy
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 2.2-1
changelog:
  - added "jre/lib/security/blacklisted.certs" to cared files
  - moved to newest release 2.1
  - moved to new upstream at pagure.io
  - added new script of copy_jdk_configs_fixFiles.sh 
  - copy_jdk_configs.lua  aligned to it
  - Resolves: rhbz#1427463


author: Ondrej Vasik <ovasik@redhat.com> 8.22-5
changelog:
  - do not modify SELinux contexts of existing parent
    directories when copying files (fix by P.Brady, #1045122)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-10
changelog:
  - cp/mv/install: do not crash when getfscreatecon() is
    returning a NULL context
  - fix the cut optimizations to UTF-8 locales only
  - unset the unnecessary envvars after colorls scripts


author: - 8.22-12
changelog:
  - fix crash or infinite loop when parsing a malformed TZ="" on
    coreutils-date-avoid-crash-in-TZ-parsing.patch


author: hanzhijun<hanzhijun1@huawei.com> - 8.22-12.1.h3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix head --lines=-0 outputting nothing if no newline at EOF(#16329)
         fix problems with @w and @kbd (Bug#16802)
         don't dump core when shuf with -r if the input is empty(#16855)
         ln: with -sr, don't segfault for a TARGET of ''(#17010)
         chmod: fix erroneous warnings with -R --changes(#17035)
         avoid regex ambiguity in chmod mode description(#17041)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-17
changelog:
  - fix small memory leak in copyin.c (#919454)
  - remove %defattr and install 'cpio' to real %{_bindir}
  - CovScan: add %{?_rawbuild}


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Hushiyuan <hushiyuan@huawei.com> - 2.11-24.h3
changelog:
  - Type:cves
  - ID:CVE-2016-2037
  - SUG:false
  - DESC:this cve is not need to merge because we used a array to store the name


author: Jakub Jelinek <jakub@redhat.com> 4.8.3-6
changelog:
  - update from the 4.8 branch (#1140019)
    - PRs c++/58714, c++/59823, c++/59956, c++/60241, c++/60361, c++/61959,
  	c/61271, debug/55794, debug/60655, debug/61923, fortran/61999,
  	fortran/62214, fortran/62270, ipa/61986, ipa/62015, libgfortran/62188,
  	libstdc++/58962, libstdc++/61946, middle-end/61010, middle-end/61045,
  	middle-end/62103, rtl-optimization/62004, rtl-optimization/62030,
  	target/61996, target/62038, target/62195, testsuite/56194,
  	tree-optimization/60196, tree-optimization/60707,
  	tree-optimization/61452, tree-optimization/62073,
  	tree-optimization/62075, tree-optimization/63189


author: Jakub Jelinek <jakub@redhat.com> 4.8.3-8
changelog:
  - fix PowerPC unaligned vectorization bug (#1146871,
    PR tree-optimization/63341)
  - fix another -fcompare-debug issue (PR debug/63284)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-1
changelog:
  - update from the 4.8 branch (#1230103)
    - GCC 4.8.5 release
    - fix -imacros handling (#1004526, PR c/57653)
    - fix up IPA type handling (#1217267, PRs ipa/63551, ipa/64153)
    - add PowerPC analyze swaps optimization pass (#1208103, #1200336)
    - fix PowerPC vsx_extract_<mode>* patterns (#1206341)
    - fix PowerPC -mcrypto handling (#1200335)
    - Power8 unaligned vectorization improvements (#1199221, PR target/65456)
    - PRs ada/47500, ada/63225, bootstrap/64213, c++/56710, c++/58624,
  	c++/63415, c++/63455, c++/64251, c++/64297, c++/64487, c++/65721,
  	c++/65727, c/52769, c/61553, c/64766, debug/63342, debug/65549,
  	fortran/56674, fortran/56867, fortran/57023, fortran/58813,
  	fortran/59016, fortran/59024, fortran/59488, fortran/60898,
  	fortran/61138, fortran/61407, fortran/63733, fortran/63744,
  	fortran/63938, fortran/64244, fortran/64528, fortran/65024,
  	gcov-profile/64634, inline-asm/63282, ipa/59626, ipa/63838,
  	libfortran/63589, libgfortran/59513, libgfortran/60956, libgomp/61200,
  	libstdc++/57440, libstdc++/59603, libstdc++/61947, libstdc++/63449,
  	libstdc++/63840, libstdc++/65279, libstdc++/65543, lto/65015,
  	lto/65193, middle-end/43631, middle-end/56917, middle-end/57748,
  	middle-end/58624, middle-end/59990, middle-end/63608,
  	middle-end/63665, middle-end/63704, middle-end/64067,
  	middle-end/64111, middle-end/64199, middle-end/64225,
  	middle-end/65409, middle-end/65680, middle-end/66133,
  	middle-end/66251, pch/65550, preprocessor/60436,
  	rtl-optimization/61058, rtl-optimization/63475,
  	rtl-optimization/63483, rtl-optimization/63659,
  	rtl-optimization/64037, rtl-optimization/64557, sanitizer/64265,
  	target/49423, target/52941, target/53988, target/55351, target/56846,
  	target/59593, target/60111, target/61413, target/62218, target/62642,
  	target/63335, target/63428, target/63673, target/63947, target/64113,
  	target/64115, target/64304, target/64358, target/64387, target/64409,
  	target/64452, target/64453, target/64479, target/64513, target/64579,
  	target/64580, target/64795, target/64882, target/64979, target/65138,
  	target/65163, target/65196, target/65286, target/65368, target/65787,
  	target/65849, target/66140, target/66148, target/66215, target/66275,
  	target/66470, target/66474, tree-optimization/59124,
  	tree-optimization/60656, tree-optimization/61634,
  	tree-optimization/61686, tree-optimization/61969,
  	tree-optimization/62031, tree-optimization/62167,
  	tree-optimization/63375, tree-optimization/63379,
  	tree-optimization/63551, tree-optimization/63593,
  	tree-optimization/63605, tree-optimization/63841,
  	tree-optimization/63844, tree-optimization/64269,
  	tree-optimization/64277, tree-optimization/64493,
  	tree-optimization/64495, tree-optimization/64563,
  	tree-optimization/65063, tree-optimization/65388,
  	tree-optimization/65518, tree-optimization/66123,
  	tree-optimization/66233, tree-optimization/66251,
  	tree-optimization/66272


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-3
changelog:
  - backport aarch64 crc enablement - -mcpu=generic+crc (#1179935)
  - rebuild against fixed binutils to fix up systemtap markers on aarch64
    (#1238462)


author: gulining<gulining@huawei.com> - 4.8.5-4.h4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Use high_resolution_clock for absolute timeouts for mutex.try_lock_for


author: xuewenzhen<euleros@huawei.com> - 4.8.5-4.h5
changelog:
  - Type:security
  - ID:CVE-2017-11671
  - SUG:restart
  - DESC:GCC generates incorrect code for RDRAND/RDSEED intrinsics.


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-3
changelog:
  - fix the python module to work with compressed dictionaries (#972542)
  - fix various dictionary lookup errors (#986400, #986401)
  - make the library reentrant and fix compilation warnings


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-5
changelog:
  - make the simplistic check and the purging of special characters much
    less aggressive (#1003624, #985378)


author: Dave Anderson <anderson@redhat.com> - 7.1.1-1
changelog:
  - Rebase to upstream version 7.1.1
    Resolves: rhbz#1207696
  - Display s390x vector registers from a kernel dump.
    Resolves: rhbz#1182161
  - Fix date displayed on initial system banner and by the "sys" command on ARM64.
    Resolves: rhbz#1223044
  - Fix ARM64 page size calculation on 4.1 and later kernels.
    Resolves: rhbz#1222645


author: Dave Anderson <anderson@redhat.com> - 7.1.2-1
changelog:
  - Rebase to upstream version 7.1.2
    Resolves: rhbz#1207696
  - Fix several ppc64 backtrace issues
    Resolves: rhbz#1235447


author: Dave Anderson <anderson@redhat.com> - 7.1.2-2
changelog:
  - Fix "kmem -s <address>", "bt -F[F]", and "rd -S[S]" options in kernels 
    configured with CONFIG_SLUB having multiple-page slabs.
    Resolves: rhbz#1244003
  - Fix for SIGSEGV generated by "bt -[f|F]" in ARM64 kernels.
    Resolves: rhbz#1248859


author: Dave Anderson <anderson@redhat.com> - 7.1.2-3
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1282997


author: Dave Anderson <anderson@redhat.com> - 7.1.5-1
changelog:
  - Rebase to upstream version 7.1.5
    Resolves: rhbz#1292566
  - Decode clflushopt instruction
    Resolves: rhbz#1262479
  - Support AArch64 QEMU generated dumps 
    Resolves: rhbz#1299873
  - crash: zero-size memory allocation (aarch64) 
    Resolves: rhbz#1312738


author: Dave Anderson <anderson@redhat.com> - 7.1.5-2
changelog:
  - Fix for kernel module symbol gathering when the ordering of module
    symbol name strings does not match the order of the kernel_symbol
    structures.
  - Resolves: rhbz#1375130


author: Jialong Chen <chenjialong@huawei.com> - 7.1.5-2.h1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DEC:Introduction of ARM64 support for 4K pages with 4-level page tables.


author: Dave Anderson <anderson@redhat.com> - 7.0.9-5
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1182383


author: HATAYAMA Daisuke <d.hatayama@jp.fujitsu.com> - 1.0-1
changelog:
  - Remove inclusion of kvmdump.h and unwind_x86_64.h due to non-supporting issue
    on crash-devel package. Instead, use a new interface for them.
  - Remove ppc64, ia64, s390 and s390x from ExclusiveArch, leave x86_64
    and %{ix86} there.
  - Add descriptions in BuildRequires and Requires about crash and crash-devel.


author: Dave Anderson <anderson@redhat.com> - 2.0-3
changelog:
  - Replace obsolete _init() and _fini() functions.
  - Fix possible segmentation violation on calloc() failure.
  - Initialize trace_dat to avoid compiler warning.


author: John W. Linville <linville@redhat.com> - 1.1.3_2013.02.13-3
changelog:
  - setregdomain: remove sed and awk calls
  - setregdomain: reimplement COUNTRY assignment with shell function


author: John W. Linville <linville@redhat.com> - 1.1.3_2014.06.13-1
changelog:
  - Update wireless-regdb to version 2014.06.13
  - Add logger commands to setregdomain to make it more communicative


author: John W. Linville <linville@redhat.com> - 1.1.3_2015.04.06-2
changelog:
  - Update wireless-regdb to version 2015.04.06
  - Add patch for regdbdump to display DFS region
  - Make some improvements to setregdomain and its man page


author: Zdenek Pavlas <zpavlas at redhat.com> - 0.9.9-14
changelog:
  - update to latest HEAD
  - Fix the deadlock issue.  BZ 856363
  - Manually set the permmissions for tempfile created cachefiles. BZ 833350
  - modifyrepo: use available compression only.  BZ 865845
  - No baseurl means no baseurl.  BZ 875029
  - Change the compress-type for modifyrepo to .gz for compat. BZ 874682.
  - fix the --skip-symlinks option
  - no repomd.xml && --checkts: skip .rpm timestamp checking.  BZ 877301
  - new worker piping code (no tempfiles, should be faster)


author: Zdenek Pavlas <zpavlas at redhat.com> - 0.9.9-16
changelog:
  - update to latest HEAD
  - turn off stdout buffering in worker to prevent a deadlock
  - modifyrepo: use integer timestamps


author: Zdenek Pavlas <zpavlas@redhat.com> - 0.9.9-21
changelog:
  - update to latest HEAD
  - don't BuildRequire bash-completion in rhel
  - Fail for bad compress-type options to modifyrepo, like createrepo. BZ 886589
  - Fix options documentation. BZ 892657.
  - modifyrepo: fix --compress option bug. BZ 950724
  - modifyrepo: add --checksum and --{unique,simple}-md-filenames options


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-24
changelog:
  - mergerepo: merge package versions from multiple repos.
  - Related: bug#1178763
  - Close lock file before unlink().
  - Related: bug#1256216


author: Adrian Reber <areber@redhat.com> - 1.6.1-2
changelog:
  - removed criu.service (CVE-2015-5228, CVE-2015-5231)
  - removed devel sub-package (related to above CVEs)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: zhangyu<zhangyu235@huawei.com> - 1.4.11-14.1.h3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Fix longstanding race condition on crontab modification
         Rename timeval time to tv so time function can be used


author: Joe Orton <jorton@redhat.com> - 2.4.1-40.1
changelog:
  - keyutil: use SHA1 as default hash in created certs (#1030470)
  - genkey: default to 2048 bit keysize (#1039896)


author: Joe Orton <jorton@redhat.com> - 2.4.1-42
changelog:
  - genkey: skip cert generation after CSR for OpenSSL (#1039896)
  - keyutil: fix error reporting (#1039896)


author: Ondrej Kozina <okozina@redhat.com> - 1.6.2-1
changelog:
  - Update to cryptsetup 1.6.2.
  - Add dracut module for cryptsetup-reencrypt (90reencrypt).
  - 90reencrypt: Rename dracut parameteres to be compliant with actual naming guidance.
  - 90reencrypt: Install and load loop kernel module.
  - 90reencrypt: Fix lock file name.
  - 90reencrypt: Add conflict with 90crypt dracut module (more info in #1010287)
  - Resolves: #1010278 #1010287


author: Ondrej Kozina <okozina@redhat.com> - 1.6.2-2
changelog:
  - 90reencrypt: Move conflict with 90crypt to install() section.
  - 90reencrypt: Drop to emergency_shell after successful reencryption.
  - Resolves: #1021593


author: Ondrej Kozina <okozina@redhat.com> - 1.6.3-1
changelog:
  - Update to cryptsetup 1.6.3.
  - various fixes related to block devices with 4KiB sectors
  - enable reencryption using specific keyslot (dracut module)
  - fix failure in reading last keyslot from external LUKS header
  - update FIPS POST to be complaint with actual requirements
  - fix hash limiting if parameter is not numeric
  - Resolves: #1028362 #1029032 #1029406 #1030288 #1034388 #1038097


author: Ondrej Kozina <okozina@redhat.com> - 1.6.7-1
changelog:
  - Update to cryptsetup 1.6.7.
  - patch: avoid use of kernel crypto API socket which is known
    to be broken in RHEL7.0 kernel (7.1+ is fine).
  - Resolves: #1206170


author: John Dennis <jdennis@redhat.com> - 5.8-11
changelog:
  - add ctags-5.8-memmove.patch
    bug #284 absoluteFilename uses strcpy on overlapping strings 
    http://sourceforge.net/p/ctags/bugs/284/  
    The bug was fixed upstream on 2012-03-26 in the following commit
    http://sourceforge.net/p/ctags/code/782/
    ctags-5.8-memmove.patch simply adds the same patch as the above commit.


author: Tim Waugh <twaugh@redhat.com> - 1:1.6.3-16
changelog:
  - Apply upstream patch to fix CVE-2014-5029 (bug #1122600),
    CVE-2014-5030 (bug #1128764), CVE-2014-5031 (bug #1128767). Also:
    - Fix conf/log file reading for authenticated users (STR #4461).
    - Fix icon display in web interface during server restart (STR #4475).
  - Apply upstream patch to fix privilege escalation due to insufficient
    checking (CVE-2014-3537, bug #1115576).
  - Describe ErrorPolicy in the cupsd.conf man page (bug #1120591).
  - Reduce package dependencies (bug #1115057):
    - New client subpackage containing command line client tools.
    - Removed 'Requires: /sbin/chkconfig'.
    - Moved 'Provides: lpd' to lpd subpackage.
  - Avoid race condition in cupsdReadClient() (bug #1113045).
  - Apply upstream patch to avoid 10 second timeouts in cupsd caused by
    reading when no data ready (bug #1110259).
  - Use colord interface correctly (bug #1087323).
  - Fix for cupsEnumDest() 'removed' callbacks (bug #1072954, STR #4380).


author: Tim Waugh <twaugh@redhat.com> - 1:1.6.3-17
changelog:
  - Support for failover without load-balancing (bug #1115219).
  - Fix cupsGetPPD3() so it doesn't give the caller an unreadable file
    (part of fix for CVE-2014-5031, STR #4500).
  - Can no longer reproduce bug #1010580 so removing final-content-type
    patch as it causes issues for some backends (bug #1149245).
  - Start cups.service after network.target (bug #1144780).


author: Tim Waugh <twaugh@redhat.com> - 1:1.6.3-19
changelog:
  - Validate ErrorPolicy in configuration (bug #1196218, STR #4591).
  - Don't use SSLv3 by default (bug #1161172, STR #4476).


author: Tim Waugh <twaugh@redhat.com> - 1:1.6.3-20
changelog:
  - Don't start jobs while cancelling others (bug #1233002, STR #4648).
  - Fix slow resume of jobs after restart (bug #1233006, STR #4646).
  - Fixes for post-install scriptlet (bug #1235035).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-23
changelog:
  - 1257051 - cups-lpd man page incomplete
  - 1275790 - spec file includes triggers with overlapping version intervals
  - 1259770 - permission changed after writing to /etc/cups/subscriptions.conf


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-25
changelog:
  - 1297035 - gnome-settings-daemon leaks file descriptors
  - 1257751 - Email notifications ("lp -m") for printer classes don't work


author: ruanweidong<ruanweidong1@huawei.com> - 1.6.3-26.h4
changelog:
  - Type:cves
  - ID:CVE-2019-8675  CVE-2019-8696
  - SUG:restart
  - DESC:Fixed CVE-2019-8675  CVE-2019-8696


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-15:.1
changelog:
  - Applied upstream patch to fix BrowseAllow parsing issue
    (CVE-2014-4338, bug #1091568).
  - Applied upstream patch for cups-browsed DoS via
    process_browse_data() out-of-bounds read (CVE-2014-4337,
    bug #1111510).


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-18
changelog:
  - Fix segfault in texttopdf filter (bug #1194263).
  - Improve cups-browsed efficiency (bug #1191691).
  - Fetch printer descriptions with cups-browsed (bug #1223719).
  - Fix cups-browsed "_" handling for printer names (bug #1167408).


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-21
changelog:
  - Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
    CVE-2015-3258, CVE-2015-3279).


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-28
changelog:
  - prevent NSS from incorrectly re-using a session (#1269855)
  - call PR_Cleanup() in the upstream test-suite if NSPR is used (#1243324)
  - disable unreliable upstream test-case 2032 (#1241168)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-33
changelog:
  - fix re-using connections with wrong client cert (CVE-2016-5420)
  - fix TLS session resumption client cert bypass (CVE-2016-5419)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-34
changelog:
  - acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
    (required by the fix for CVE-2016-5419)


author: zhangyi <zhangyi79@huawei.com> - 7.29.0-35.h10
changelog:
  - Type:cves
  - ID:CVE-2016-7167,CVE-2016-8615,CVE-2016-8616,CVE-2016-8617,CVE-2016-8618,
       CVE-2016-8619,CVE-2016-8621,CVE-2016-8622,CVE-2016-8623,CVE-2016-8624
  - SUG:NA
  - DESC:This candidate has been reserved by an organization or individual
         that will use it when announcing a new security problem.
         When the candidate has been publicized, the details for this candidate
         will be provided.


author: zhangshaoning<zhangshaoning1@huawei.com> - 7.29.0-35.h18
changelog:
  - Type:cves
  - ID:CVE-2018-1000120 CVE-2018-1000121 CVE-2018-1000122
  - SUG:restart
  - DESC:fix CVE-2018-1000120 CVE-2018-1000121 CVE-2018-1000122


author: zhangshaoning<euleros@huawei.com> - 7.29.0-35.h22
changelog:
  - Type:security
  - ID:CVE-2018-1000007 CVE-2017-1000100
  - SUG:restart
  - DESC:TFTP sends more than buffer size
         HTTP authentication leak in redirects.


author: xuewenzhen<euleros@huawei.com> - 7.29.0-35.h23
changelog:
  - Type:security
  - ID:CVE-2018-14618
  - SUG:restart
  - DESC:NTLM password overflow via integer overflow.


author: wangchong<wangchong56@huawei.com> - 7.29.0-35.h31
changelog:
  - Type:cves
  - ID:CVE-2013-4545 CVE-2013-6422 CVE-2014-0139 CVE-2016-3739
  - SUG:restart
  - DESC:fix CVE-2013-4545 CVE-2013-6422 CVE-2014-0139 CVE-2016-3739


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-26
changelog:
  - implement 'curl --unix-socket' and CURLOPT_UNIX_SOCKET_PATH (#1263318)
  - improve parsing of URL-encoded user name and password (#1260178)
  - prevent test46 from failing due to expired cookie (#1258834)


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-29
changelog:
  - Correct handling systemd service (bug #737264)
  - Allow configuration with automake-1.13.1
  - Allow to stop all server instances by stopping cvs.target


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-30
changelog:
  - Fix texinfo documentation to work with texinfo-5.1 (bug #970716)
  - Do not crash if crypt(3) returns NULL (bug #966497)


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-31
changelog:
  - Allow CVS server to use any Kerberos key with cvs service name. This reverts
    canonicalization on clite side introduced with 1.11.23-20 and replaces it
    with a more benevolent key selection on server side. (bug #722972)


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-32
changelog:
  - Harden build for cvs in server role (bug #983164)
  - Add cvs.sh(5) manual page (bug #983164)
  - Add cvs.csh(5) manual page (bug #983164)


author: Jeroen van Meeuwen <vanmeeuwen@kolabsys.com> - 2.4.17-1
changelog:
  - New upstream version, fixes upstream bugs:
  - reconstruct doesn't retain internaldate correctly (#3733)
  - Race condition in maibox rename (#3696)
  - DBERROR db4: Transaction not specified for a transactional database (#3715)
  - performance degradation on huge indexes in 2.4 branch (#3717)
  - typo fix in imapd.conf man page (#3729)
  - quota does not find all quotaroots if quotalegacy, fulldirhash and prefix are used and virtdomains is off (#3735)
  - Mail delivered during XFER was lost (#3737)
  - replication does not work on RENAME (#3742)
  - Failed asserting during APPEND (#3754)


author: Guoqiang Deng <dengguoqiang@huawei.com> - 2.4.17-7.h3
changelog:
  - urlfetch: extra paranoia(CVE-2015-8076)
  - urlfetch: handle range starting outside message size(CVE-2015-8076)
  - urlfetch: protect against overflow in range checks(CVE-2015-8077)
  - urlfetch: and the other bit(CVE-2015-8078)


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.1.el6
changelog:
  - dapl-2.0.25-signal-handler.patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel
  - dapl-2.0.25-new-providers.patch
    Resolves: bz636596
  - dapl-2.0.25-dat_ia_open_hang.patch
    Resolves: bz649360
  - dapl-2.0.25-cleanup-cr-linkings-after-dto-error-on-ep.patch
    Resolves: bz626541
  - dapl-2.0.25-verbs-cq-completion-channels-leak.patch
    Resolves: bz637980


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.2.el6
changelog:
  - Actually install the signal-handler patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel


author: Doug Ledford <dledford@redhat.com> - 2.0.32-1
changelog:
  - Update to latest upstream version (2.0.25 -> 2.0.32)
  - Remove 4 patches folded into upstream release
  - Rebuild against new libibverbs and librdmacm
  - Update exclusive arch to accommodate i686 arch
  - Related: bz724896, bz725016


author: Doug Ledford <dledford@redhat.com> - 2.0.34-1
changelog:
  - Update to latest upstream version
  - Rebuild against new libibverbs (FDR link speed capable and IBoE enabled)
  - Related: bz750609


author: Jay Fenlason <fenlason@redhat.com> - 2.0.39-1
changelog:
  - Upgrade to latest version
    Resolves: rhbz#985117
  - Fix a compile problem with NULL not being defined
    Resolves: rhbz#1029509


author: Doug Ledford <dledford@redhat.com> - 2.0.39-5
changelog:
  - Bump and rebuild after retagging the latest libibverbs and librdmacm
    into the build root
  - Related: bz1123996


author: Doug Ledford <dledford@redhat.com> - 2.1.5-1
changelog:
  - Update to latest upstream release
  - Include support for s390x
  - Include support for aarch64
  - Drop old fix for NULL not defined, upstream has it resolved
  - Resolves: bz1182180, bz1197216, bz1172462, bz1044727, bz1056487


author: Guoqiang Deng <dengguoqiang@huawei.com> - 1:1.6.12-14.h9
changelog:
  - Fix CVE-2014-3477
  - Fix CVE-2014-3532
  - Fix CVE-2014-3635
  - Fix CVE-2014-3636
  - Fix CVE-2014-3637
  - Fix CVE-2014-3638
  - Fix CVE-2014-3639
  - Fix CVE-2014-7824
  - Fix CVE-2015-0245


author: zhangyuyun <zhangyuyun@huawei.com> - 1:1.6.12-14.h11
changelog:
  - Type:bugfix
  - ID:none
  - SUG:NA
  - DESC: corrected thread problem causing some calls to hang for 30 seconds


author: zhengshaoyu<zhengshaoyu@huawei.com> - 1.6.12-14.h16
changelog:
  - Type:cves
  - ID:CVE-2019-12749
  - SUG:restart
  - DESC:revert CVE-2019-12749 patch and re-fix CVE-2019-12749


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.1-3
changelog:
  - python3-dbus subpkg (#892474)
  - (main) Provides: python-dbus
  - BR: python-docutils
  - .spec cosmetics
  - skip failed tests on rawhide (#913936)


author: Colin Walters <walters@redhat.com> - 1.1.1-9
changelog:
  - Move modules to libdir to avoid multilib conflicts
  - And comment out test suite, since we were not actually
    failing if it failed, but it trips up an rpmdiff check
    on the output of the suite.
  - Resolves: #1076411


author: Rex Dieter <rdieter@fedoraproject.org> - 0.15.2-2
changelog:
  - -devel: drop Requires: glib2-devel, already gets pulled in via pkgconfig deps
  - -editor: add icon scriptlets
  - tighten subpkg deps via %{_isa}


author: Kalev Lember <kalevlember@gmail.com> - 0.15.3-1
changelog:
  - Update to 0.15.3
  - Install the HighContrast icons and update the icon cache scriptlets to take
    this into account


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-0.13.20130520git
changelog:
  - Clearer error message when applydeltaiso fails (#825428) (Thanks, John!)
  - Add details to applydeltaiso and makedeltaiso man pages (#569499)
  - Add fragiso man page to deltaiso package (#569776)
  - Fix section for applydeltaiso (#548970)
  - Add arch-specific requires (#677060)


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-1
changelog:
  - Update to 3.6 which, among other things, fixes a bug when applying a deltarpm
    to create a gzip-compressed rpm using full compression


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.130-2
changelog:
  - Fix vgimportclone cache_dir path name (2.02.115).
  - Disallow usage of --stripe and --stripesize when creating cache pool.
  - Swapping of LV identifiers handles more complex LVs.
  - Fix VG metadata comparison failure while scanning the VG for lvmetad.
  - Ignore persistent cache if configuration changed. (2.02.127)
  - Do not check for full thin pool when activating without messages (1.02.107).


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.130-3
changelog:
  - Enforce writethrough mode for cleaner policy.
  - Check for enough space in thin-pool in command before creating new thin.


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.130-5.el7_2.1
changelog:
  - Fix possible data loss caused by lost buffered writes during thin pool
    resize after reaching its capacity.


author: zhangyujing<zhangyujing1@huawei.com> - 2.02.130-5.5.h3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:vgchange lock stop only needs shared lock
  	lvmlockd check all variations of lvb values
  	lib when moving segtypes move LV bits
  	cache warn if caching causes troubles
  	lvmlockd prevent vgremove of dlm VG while lockspace
  	pool validate pool_metadata has proper suffix
  	thin show message on error path
  	lvmlockd unlock lv if command fails before lock completes
  	libdm report make it possible to use blank value
  	libdm dev_node use lstat instead of stat while removi


author: zhangyujing<zhangyujing1@huawei.com> - 2.02.130-5.5.h4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: uuid Report invalid character
  	wiping warn if use_blkid_wiping 1 is set and LVM not
  	lvmconf set locking_type 2 if external library is re
  	segtypes Extend flags to 64 bits
  	segtypes Make constants ULL
  	lockd fix changing lock type on VG with pool
  	raid Fail if kernel status denominator is zero
  	lockd fix rescanning VG metadata
  	Fix segfault when lvmlockd is running but not lvmeta
  	thin fix link validation for unused thin pool


author: zhangujing<zhangyujing1@huawei.com> - 2.02.130-5.5.h5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: dmeventd correct ret code for fail
          toolcontext do not change already set dm_log
          dmeventd fix loging report                  
          dmeventd add more debug messages            
          lvmlockd use flag to avoid blocking in sanlock_acqui
          polldaemon fix missing mirror in sync info with lvmp
          dmeventd check for malloc return
          dmeventd no registering of 0 event mask


author: liuqianya<liuqianya@huawei.com> - 2.02.130-5.5.h6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:vgextend fix use of the wrong flag                  
         libdm enable no_flush for driver version 11         
         toollib fix wrong paren placement
         dmevent fix referencing
         pvcreate don t support unpartitioned DASD devices wi
         metadata format_text check metadata area size is at 
         metadata format_text check VG metadata do not overla
         metadata format_text better check for metadata overl


author: liuqianya<liuqianya@huawei.com> - 2.02.130-5.5.h7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:metadata format_text also count with calculated mda
         config fix copy error in examples
         lvmetad log duplicate PVs returned from lvmetad
         lvmcache change log_verbose to log_warn
         vg_read skip repair and wipe for foreign and shared
         mirror Fix log size calc when more than 1 extent
         libdevmapper event fix fifo leak on error path
         clvmd check for pthread_create status
         dmsetup check for NULL from dm task get ioctl timest
         dmsetup add missing checks for dm stats create ret v
         lvmetad check for allocation fail


author: cangyi<cangyi@huawei.com> - 2.02.130-5.5.h8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lvmetad validate mda is not NULL
         lvconvert add extra check for existance of pointer
         libdm add missing error path check
         libdm ensure vars are initialized.patch
         libdm exlicitly check for NULL.patch
         libdm add test for dm_task_get_message_response
         thin fix error path mem leak
         dev type fix TOCTOU order
         lv_manip do not deref NULL for debug message
         report add extra pointer check


author: cangyi<cangyi@huawei.com> - 2.02.130-5.5.h9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:devmanager validate target params
         cleanup relocate error capture
         alloc use own mem pool for alloc_handle
         lvmlockd add missing error checks
         cache ensure there is no NULL str
         lvmlockd reverse some unnecessary checking
         raid fix the string compare
         dmeventd fix check for failing open
         libdm check if passed return pointer is not NULL
         libdm check for null from pool strdup


author: cangyi<cangyi@huawei.com> - 2.02.130-5.5.h10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:config check vdef pointer before dereference
         format text ensure no division by zero
         libdm fix check of pointer
         raid drop unneeded NULL test
         cache lvconvert repairs only thin pools
         libdm drop extra space from cache target line
         thin work with active thin pool
         thin fix previous update of partial tree building
         libdm const raid params and error for unsupported ty


author: liuqianya<liuqianya@huawei.com> - 2.02.130-5.5.h11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lvmetad include both vgid and vgname in lookup reque
         lvmcache include system_id in vginfo cache
         system_id refactor check for allowed system_id
         log use full buffer size for printf
         archiver inital change toward proper logging
         vgextend reinstantiate archiving
         archiver fix reporting for check_current_backup
         fix static linking
         process_each_pv do full scan earlier to find new dev


author: liuqianya<liuqianya@huawei.com> - 2.02.130-5.5.h12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:report fix invalid memory read when reporting cache
         vgchange drop redundant check
         process_each_pv remove unnecessary workaround
         lvmlockd fix exit code
         vgchange fix lockd_gl results
         Revert lvmcache skip drop when vg_write lock is not
         lvm2app fix lvm2app to return either 0 or 1 for lvm
         pvchange pvresize fix lockd_gl usage
         lvmlockd fix lvb validation for conversion


author: cangyi<cangyi@huawei.com> - 2.02.130-5.5.h13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:clvmd Initialise udev
         toollib restore command break support
         filters partitioned fix partition table filter with
         dm fix thin pool targer params order
         dm alloc always 8byte aligned
         pvmove fix possible memory pool corruption
         report report 1 not unkown for lv snapshot invalid
         thin fix update_pool_lv error path
         lvmetad fix error path


author: liuqianya<liuqianya@huawei.com> - 2.02.130-5.5.h14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:thin fix read size compare
         libdm fix string boundary
         coverity ensure non null pointers are used
         lvmlockd fix sparse snapshot case
         lvconvert fix vg parameter
         remove unused define
         lvcreate FREE PVS
         toollib Fix misleading message when forking
         lvchange fix return code
         lvmetad Fix client error when socket access fails


author: Lujingxiao<lujingxiao@huawei.com> - 2.02.130-5.5.h2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Fix read blocking in lvmetad and broken in dmeventd, adjust service on lvm2-monitor


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.130-1
changelog:
  - Fix use of uninitialized device status if reading outdated .cache record.
  - Restore support for --monitor option in lvcreate (2.02.112).
  - Read thin-pool data and metadata percent without flush.
  - Detect blocked thin-pool and avoid scanning their thin volumes.
  - Check if dm device is usable before checking its size (2.02.116).
  - Extend parsing of cache_check version in configure.
  - Make lvpoll error messages visible in lvmpolld's stderr and in syslog.
  - Add 'make install_full_man' to install all man pages regardless of config.
  - Parse thin-pool status with one single routine internally.
  - Add --histogram to select default histogram fields for list and report.
  - Add report fields for displaying latency histogram configuration and data.
  - Add dmstats --bounds to specify histogram boundaries for a new region.
  - Add dm_histogram_to_string() to format histogram data in string form.
  - Add public methods to libdm to access numerical histogram config and data.
  - Parse and store histogram data in dm_stats_list() and dm_stats_populate().
  - Add an argument to specify histogram bounds to dm_stats_create_region().
  - Add dm_histogram_bounds_from_{string,uint64_t}() to parse histogram bounds.
  - Add dm_histogram handle type to represent a latency histogram and its bounds.


author: zhongyuan<zhongyuan1@huawei.com> - 0.4.9-111.h11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:euleros-uvp-bugfix-merge-feature-of-getuuid-callout.patch


author: zhongyuan<zhongyuan1@huawei.com> - 0.4.9-111.h12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:revert euleros-uvp-bugfix-merge-feature-of-getuuid-callout.patch


author: zhengshaoyu<zhengshaoyu@huawei.com> - 0.4.9-111.h17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:backport-libmultipath-add-pthread_cleanup-hook-for-udev-monit.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-68
changelog:
  - Add 0091-RHBZ-1069584-fix-empty-values-fast-io-fail-and-dev-loss.patch
    * check for null pointers in configuration reading code.
  - Add 0092-UPBZ-1104605-reload-on-rename.patch
    * Reload table on rename if necessary
  - Add 0093-UPBZ-1086825-user-friendly-name-remap.patch
    * Keep existing user_friend_name if possible
  - Add 0094-RHBZ-1086825-cleanup-remap.patch
    * Cleanup issues with upstream patch
  - Add 0095-RHBZ-1127944-xtremIO-config.patch
    * Add support for EMC ExtremIO devices
  - Resolves: bz #1069584, #1104605, #1086825, #1086825, #1127944


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-69
changelog:
  - Add 0096-RHBZ-979474-new-wildcards.patch
    * Add N, n, R, and r path wildcards to print World Wide ids
  - Add 0097-RH-fix-coverity-errors.patch
    * Fix a number of unterminated strings and memory leaks on failure
      paths.
  - Resolves: bz #979474


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-70
changelog:
  - Modify 0096-RHBZ-979474-new-wildcards.patch
    * Fix a faulty check
  - Add 0098-UPBZ-1067171-mutipath-i.patch
    * Add -i option to ignore wwids file when checking for valid paths
  - Add 0099-RH-add-all-devs.patch
    * Add new devices config option all_devs. This makes the configuration
      overwrite the specified values in all builtin configs
  - Related: bz #979474
  - Resolves: bz #1067171


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-71
changelog:
  - Re-add 0050-RH-listing-speedup.patch
  - Modify 0098-UPBZ-1067171-mutipath-i.patch
    * add dry_run cleanup code from upstream
  - Refresh 0099-RH-add-all-devs.patch
  - Add 0100-RHBZ-1067171-multipath-i-update.patch
    * make -i work correctly with find_multipaths
  - Resolves: bz #1067171


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-72
changelog:
  - Add 0101-RH-cleanup-partmaps-code.patch
    * code refactoring to prepare for next patch
  - Add 0102-RHBZ-631009-deferred-remove.patch
    * add deferred_remove option to /etc/multipath.conf
  - Resolves: bz #631009


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-75
changelog:
  - Add 0103-RHBZ-1148979-fix-partition-mapping-creation-race-with-kpartx.patch
    * Only run kpartx on device activation
  - Resolves: bz #1148979


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-76
changelog:
  - Modify 0102-RHBZ-631009-deferred-remove.patch
    * Fixed compiler warning message for builds with old device-mapper versions
  - Add 0104-RHBZ-1159337-fix-double-free.patch
    * made ev_remove_path exit immediately after failing setup_multipath, since
      it handles cleaning up the device
  - Resolves: bz #1159337
  - Related: bz #631009


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-77
changelog:
  - Add 0105-RHBZ-1180032-find-multipaths-man.patch
    * add find_multipaths to man page
  - Modify multipath.conf (bz #1069360)
    * add uid_attribute example
  - Resolves: bz #1180032


author: Benjmain Marzinski <bmarzins@redhat.com> 0.4.9-83
changelog:
  - Add 0130-RHBZ-1259523-host_name_len.patch
    * increase size of host string
  - Resolves: bz# 1259523


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-84
changelog:
  - 0131-UPBZ-1259831-lock-retry.patch
    * retry locking when creating multipath devices
  - Resolves: bz# 1259831


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.1
changelog:
  - Add 0132-RHBZ-1296979-fix-define.patch
    * look for the correct libudev function to set define
  - Resolves: bz #1303623


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.2
changelog:
  - Add 0133-RHBZ-1321019-wait-for-map-add.patch
    * wait for the device to finish being added before reloading it.
  - Resolves: bz #1321019


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.3
changelog:
  - Add 0134-UPBZ-1328515-dont-fail-discovery.patch
    * don't fail discovery because individual paths failed.
  - Resolves: bz #1328515


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.4
changelog:
  - Add 0135-RHBZ-1330480-kpartx-sync.patch
    * default to using udev sync mode
  - Resolves: bz #1330480


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.5
changelog:
  - Add 0136-RHBZ-1335746-clear-chkr-msg.patch
    * clear old checker message for offline paths.
  - Resolves: bz #1335746


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.6
changelog:
  - Add 0137-RHBZ-1364905-ordering.patch
    * force multipathd.service to start after systemd-udev-trigger.service
  - Resolves: bz #1364905


author: zhangyuyun<zhangyuyun@huawei.com> - 0.4.9-85.6.h3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use a shared lock to co-operate with udev
         fix the declaration for devt2devname and caller
         add lock to path check in checkerloop function


author: huyahui<huyahui1@huawei.com> - 0.4.9-85.6.h4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: cleanup ev_add_map and disable queueing for recreated map
    in uev_remove_map.


author: Benjmain Marzinski <bmarzins@redhat.com> 0.4.9-82
changelog:
  - Add 0129-UPBZ-1254292-iscsi-targetname.patch
    * check for targetname iscsi sysfs value
  - Resolves: bz #1254292


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.1-1
changelog:
  - Add space map checking for thin_check.
  - Add --clear-needs-check option for cache_check.
  - Update to latest upstream release.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.3-1
changelog:
  - Tools now open the metadata device in O_EXCL mode to stop
    running the tools on active metadata.
  - Update to latest upstream release.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.4-1
changelog:
  - Fix cache_check with --clear-needs-check-flag option to
    make sure metadata device is not open already by the tool
    when open with O_EXCL mode is requested.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.5-1
changelog:
  - Support thin_delta's --metadata_snap option without specifying snap location.
  - Update man pages to make it clearer that tools shoulnd't be run on live metadata.
  - Fix bugs in the metadata reference counting for thin_check.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-1
changelog:
  - New thin_ls command.
  - era_invalidate may be run on live metadata if the --metadata-snap
    option is given.


author: Zdenek Dohnal <zdohnal@redhat.com> - 12:4.2.5-44
changelog:
  - 1269596 - dhclient-script doesn't keep old nameservers
  - 1193586 - DHCP renewal does not update lifetimes if MTU has changed
  - 1306608 - Add ignore-client-uids option to dhcpd
  - 1267489 - dhclient-script does not respect DEFROUTE/GATEWAYDEV


author: liuxueping <liuxueping1@huawei.com> - 12:4.2.5-47.h2
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC:Don't listen on random port (#962950)
  - backport from 4.3.5-6.fc26
  - Credits to Petr Mensik for the idea of the patch


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-38
changelog:
  - correctly set IB's hw->hlen and add more randomness into xid generation (#1195693)
  - send unicast request/release via correct interface (#1177351)


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-55
changelog:
  - Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
  - Fix syntax error in attr


author: zhangshaoning<zhangshaoning1@huawei.com> - 4.2.5-58.3.h2
changelog:
  - Type:cves
  - ID:CVE-2018-5732 CVE-2018-5733
  - SUG:restart
  - DESC:update dhcp from 4.2.5-58.1.h2 to 4.2.5-58.3.h2


author: zhangshaoning<zhangshaoning1@huawei.com> - 4.2.5-68.1.h2
changelog:
  - Type:security
  - ID:CVE-2018-1111 CVE-2015-8605
  - SUG:restart
  - DESC:update to version 4.2.5-68.1 and fix CVE-2015-8605


author: zhaiwenbin<zhaiwenbin1@huawei.com> - 4.2.5-68.1.h3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:update from uvp, applay dhcp-4.2.5-check-dhclient-pid.patch, check process name before
    using dhclient -r to kill the process whose pid is saved in /var/run/dhclient-eth0.pid


author: Petr Oros <poros@redhat.com> - 1:2.12-6
changelog:
  - Add preliminary support for SMBIOS 64-bit entry point (Mark Salter)
  - Add support for DDR4 memmory


author: Petr Oros <poros@redhat.com> - 1:2.12-9
changelog:
  - dmioem: Decode Acer-specific DMI type 170
  - dmioem: Decode HP-specific DMI types 212 and 219
  - dmioem: Decode HP-specific DMI type 233, and refactored 209 and 221 to use a common function
  - Resolves: #1232501


author: Peter Rajnoha <prajnoha@redhat.com> - 1.0.0.rc16-18
changelog:
  - Add fedora-dmraid-activation script and dmraid-activation.service systemd unit.
    This replaces dmraid activation part of the former fedora-storage-init
    script that was included in the initscripts package before.
  - Add 'Requires: systemd' to dmraid package.


author: Tomas Hozza <thozza@redhat.com> - 2.66-7
changelog:
  - use _hardened_build macro instead of hardcoded flags
  - include several fixies from upstream repo:
    - Allow constructed ranges from interface address at end of range
    - Dont BINDTODEVICE DHCP socket if more interfaces may come
    - Fix option parsing for dhcp host
    - Log forwarding table overflows
    - Remove limit in prefix length in auth zone


author: gaochong <gaochong4@huawei.com> - 2.66-14.2.h1
changelog:
  - Type:CVE
  - ID:CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494
  - SUG:NA
  - DESC:repair CVE

    Tue Sep 26 2017 Petr Menšík <pemensik@redhat.com> - 2.66-14.2
    Fix CVE-2017-14491
    Fix CVE-2017-14492
    Fix CVE-2017-14493
    Fix CVE-2017-14494
    Small correction of CVE-2017-14491


author: Petr Menšík <pemensik@redhat.com> - 2.76-1
changelog:
  - Rebase to 2.76 (#1375527)
  - Include also dhcp_release6 (#1375569)
  - Fix compilation warnings
  - Correct manual about interface aliases, warn if used without --bind*


author: Petr Menšík <pemensik@redhat.com> - 2.76-2
changelog:
  - Fix a few coverity warnings
  - package is dual-licensed GPL v2 or v3
  - don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead


author: Petr Menšík <pemensik@redhat.com> - 2.76-2.1
changelog:
  - Fix CVE-2017-14491
  - Fix CVE-2017-14492
  - Fix CVE-2017-14493
  - Fix CVE-2017-14494
  - Fix CVE-2017-14496
  - Fix CVE-2017-14495
  - extra fixes


author: yaoxin<yaoxin23@huawei.com> - 2.76-2.2.h2
changelog:
  - Type:cves
  - ID:CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 CVE-2020-25687
  - SUG:restart
  - DESC:fix CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 CVE-2020-25687


author: yaoxin<yaoxin23@huawei.com> - 2.76-2.2.h3
changelog:
  - Type:cves
  - ID:CVE-2020-25685 CVE-2020-25686
  - SUG:restart
  - DESC:refix CVE-2020-25685 CVE-2020-25686


author: Tomas Hozza <thozza@redhat.com> - 0.11-13
changelog:
  - Use improved NM dispatcher script from upstream (#980036)
  - Added tmpfiles.d config due to improved NM dispatcher script


author: Tomas Hozza <thozza@redhat.com> - 0.11-20
changelog:
  - use systemd macros instead of directly using systemctl (#1058773)
  - Replace the "Fedora /EPEL" comment in dnssec-trigger.conf (#1055949)
  - Use more newer and more advanced dispatcher script (#1034813)


author: Tomas Hozza <thozza@redhat.com> - 0.11-21
changelog:
  - handle IndexError exception in NM script until NM provides better API (#1063735)
  - restart NM when stopping dnssec-trigger daemon instead of handling
    resolv.conf by ourself. (#1061370)


author: Ondrej Vasik <ovasik@redhat.com> - 1.0-53
changelog:
  - post and postun scriptlet requires sed (#593078)
  - use standard locations for catalog.xml(#591173)


author: Ondrej Vasik <ovasik@redhat.com> - 1.1-4
changelog:
  - fix loop in post catalog registration(incomplete sed
    coverage) #455680
  - fix broken catalogs for package updates
  - fix removal of files during updates


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-31
changelog:
  - fix escaping of double-quotes in docbook2man (#826139)
  - fix the wrong format of C-style functions in docbook2man (#662869)
  - fix stray .fi at the end of funcsynopsis section (#662869)


author: zhengshaoyu<zhengshaoyu@huawei.com> - 2.2.10-5.h7
changelog:
  - Type:cves
  - ID:CVE-2020-12673 CVE-2020-12674
  - SUG:restart
  - DESC:fix CVE-2020-12673 CVE-2020-12674


author: Than Ngo <than@redhat.com> - 1:1.8.4-3
changelog:
  - backport upstream patches to fix issues:
     * Generated XML is malformed
     * Missing space before optional option in method argument list
     * Closing ) of function in function documentation is in wrong color
     * Segmentation fault parsing a fortran file


author: Rex Dieter <rdieter@fedoraproject.org> - 1:1.8.3-2
changelog:
  - doxygen is missing dependencies for texlive update (#891452)
  - doxywizard: tighten dep on main pkg


author: Harald Hoyer <harald@redhat.com> 033-346
changelog:
  - slim down the image by not including microcode header, if
    not needed
  - add command line parameter for hostonly keyboard layouts
     --hostonly-i18n
  Resolves: rhbz#1262208


author: Harald Hoyer <harald@redhat.com> 033-349
changelog:
  - no iSCSI timeout and modprobe, if iSCSI is not used
  - modprobe iSCSI modules with "-b" to allow blacklisting
  Resolves: rhbz#1263984
  - check for firmware file existance, before crafting
    microcode cpio
  Resolves: rhbz#1263798


author: Harald Hoyer <harald@redhat.com> 033-353
changelog:
  - fix network wait_for_if_up() to parse NO-CARRIER
  Resolves: rhbz#1249507
  - don't create garbage directories because of ldconfig
    misparsing
  Resolves: rhbz#1264725


author: Harald Hoyer <harald@redhat.com> 033-358
changelog:
  - fixed qemu detection
  Resolves: rhbz#1245959
  - fixed vlan ifcfg generation and nameserver handling
  Resolves: rhbz#1267311


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-359
changelog:
  - write-ifcfg: fix creating configuration for VLAN
  Resolves: rhbz#1267311
  - 90qemu: also add ibmvscsi on qemu
  Resolves: rhbz#1245959


author: zwx439773 <zhangyuyun@huawei.com> - 033-360.h2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DEC:As initramfs being created, it may turn out that 
    some kernel modules won't be packed into the intramfs 
    if changes are taking place to kernel modules meanwhile.


author: Harald Hoyer <harald@redhat.com> - 033-457
changelog:
  - add --help documentation for --no-hostonly-i18n and --hostonly-i18n options
  Resolves: rhbz#1266448
  - mention rd.shell=0 for rd.emergency
  Resolves: rhbz#1359144
  - put IPv6 IP in brackets for IBFT
  Resolves: rhbz#1322592
  - install symlinked ca-bundle.crt for curl and ssl
  Resolves: rhbz#1341280


author: Harald Hoyer <harald@redhat.com> - 033-461
changelog:
  - be more liberal to multiple ip= lines and ip=dhcp
  Resolves: rhbz#1304069
  - don't display error for hba.conf
  Resolves: rhbz#1369342


author: cangyi<cangyi@huawei.com> - 033-463.3.h5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix option parse for nofscks
         checking modules with /sys/modules


author: Jiri Popelka <jpopelka@redhat.com> - 0.7.2-5
changelog:
  - enable to specify disks with path to device file or
    with symbolic link to the device file (#766443)
  - modernize spec


author: Wei Chen<euleros@huawei.com> - 1.0-0.5
changelog:
  - Type:security / sec
  - ID:NA
  - SUG:NA
  - DEC: check pg_head in compress file to avoiding security problem


author: Peter Jones <pjones@redhat.com> - 2.0-1
changelog:
  - This is the 2.0 release.  It is awesome and adds XML output in order to
    support automated validation of CD images.


author: Honza Horak <hhorak@redhat.com> - 7.1-9
changelog:
  - Allow buffer length of the block to be shorter than multiple of 16, 
    even in case of DAO writing (replaces the previous fix)
    Resolves: #810483


author: Honza Horak <hhorak@redhat.com> - 7.1-11
changelog:
  - Spec file cleanup
  - Print error in case we want to write already written DVD-RW in Sequential
    Recording mode (bug #810838)
  - Add man page for dvd+rw-format


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 7.1-13
changelog:
  - when formating blu-ray as srm+pow, handle it later correctly as srm+pow, not srm
  (credits Thomas Schmitt)


author: Jay Fenlason <fenlason@redhat.com> 3.5-1
changelog:
  - New upstream release, which obsoletes both patches.
  - Correct the Source url to point to sourceforge's current path.


author: Jay Fenlason <fenlason@redhat.com> - 3.5-8.1
changelog:
  - Add a patch to shut up some compiler warnings.  (and not segfault on
    machines that can't do unaligned accesses)
    Resolves: rhbz884472


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Josh Stone <jistone@redhat.com> 8.1.1-1
changelog:
  - Update to release 8.1.1.
  - Drop the backported dyninst-test2_4-kill-init.patch.
  - Drop the now-upstreamed dyninst-unused_vars.patch.
  - Update other patches for context.
  - Patch the installed symlinks to be relative, not $(DEST) filled.


author: Josh Stone <jistone@redhat.com> 8.1.2-6
changelog:
  - rhbz1063447: squash testsuite g++ optimization
  - rhbz1030969: backported additional patch to silence new warnings


author: Lukas Czerner <lczerner@redhat.com> - 1.42.9-4
changelog:
  - Fix posisble use after free in some error paths (#997982)
  - Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
  - Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
  - Allow to resize ext4 file system past 16TB (#982871)
  - Disable altivec instructions for libext2fs on ppc (#1074604)


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-5
changelog:
  - Various manpage updates for chattr and mount (#1053885)
  - Fix resize2fs -P hang on corrupted filesystems (#1104612)


author: Guoqiang Deng <dengguoqiang@huawei.com> 1.42.9-7.h2
changelog:
  - libext2fs: fix potential buffer overflow in closefs (CVE-2015-1572)
  - avoid buffer overflow if s_first_meta_bg is too big (CVE-2015-0247)


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-8
changelog:
  - e4defrag: backwards-allocated files should be defragmented (#1176785)
  - tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
  - mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
  - libext2fs: prevent buffer overflows (#1293677)


author: Jiri Vanek <jvanek@redhat.com> - 2.5.2-6
changelog:
  - Fixed for JDK7 - https://fedoraproject.org/wiki/Java7_Package_Rebuild_Status
  - Added and aplied patch0, easymock2-nameClash.patch.
    This patch is removing (in easymock3 deprecated) methods, and is keeping new 
    easymock3 api in EasyMock.java for capture set of methods.
    Old methods cant be kept as deprecated as JDK7 can not compile them.
    Test was derived from easymock3' one too.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.5.2-8
changelog:
  - Install LICENSE with javadoc package
  - Don't own _mavendepmapfragdir
  - Install POM in _mavenpomdir instead of _datadir/maven2/poms
  - Update to current packaging guidelines


author: Tom Callaway <spot@fedoraproject.org> - 2.0.10-5
changelog:
  - update to 2.0.10-4 (upstream numbering is goofy)
  - fix missing symbol issue with extension modules (bz810006)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-9
changelog:
  - fixed missing systemd unit file (RHBZ#818953)
    merged fedora patches from Tom Callaway
  - fixed NETWORK test in the init script (RHBZ#1026784)
  - fixed needed rpmdiff failures (RHBZ#883988)


author: Aristeu Rozanski <aris@redhat.com> - 0.16-5
changelog:
  - fixed bogus dates in old changelog entries
  - backported patch to fix library version mismatch [884477]
  - included systemd-devel as BuildRequires for _unitdir rpm definition


author: Peter Jones <pjones@redhat.com> - 0.8.0-4
changelog:
  - Fix buffer overflow when remove_from_boot_order removes nothing (lennysz)
    Resolves: rhbz#1168019


author: Peter Jones <pjones@redhat.com> - 0.8.0-6
changelog:
  - Handle -b and -o parsing in a way that matches the documentation.
    Resolves: rhbz#1174964
  - Use the right GUID when setting boot entries active/inactive
    Resolves: rhbz#1221771


author: Peter Jones <pjones@redhat.com> - 0.6-1
changelog:
  - Update package to 0.6
  - fixes to documentation from lersek
  - more validation of uefi guids
  - use .xz for archives


author: Peter Jones <pjones@redhat.com> - 0.10-1
changelog:
  - Update package to 0.10.
  - Fixes a build error due to different cflags in the builders vs updstream
    makefile.


author: Mark Wielaard <mjw@redhat.com> - 0.162-1
changelog:
  - Update to 0.162 (#1224169, #1223462, #1207799)
  - Include elfutils/known-dwarf.h
  - Drop BuildRequires glibc-headers


author: zhouyi<zhouyi20@huawei.com> - 0.163-3.h1
changelog:
  - Type:cves
  - ID:CVE-2016-10254
  - SUG:NA
  - DEC:The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted ELF file, which triggers a memory allocation failure.


author: lirui<lirui130@huawei.com> - 0.163-3.h4
changelog:
  - Type:cves
  - ID:CVE-2016-10255 CVE-2017-7607 CVE-2017-7608 CVE-2017-7610 CVE-2017-7611 CVE-2017-7612 CVE-2017-7613
  - SUG:restart
  - DESC:fix CVE-2016-10255 CVE-2017-7607 CVE-2017-7608 CVE-2017-7610 CVE-2017-7611 CVE-2017-7612 CVE-2017-7613


author: fengbing<fengbing7@huawei.com> - 0.163-3.h5
changelog:
  - Type:cves
  - ID:CVE-2018-18521 CVE-2019-7148 CVE-2019-7149 CVE-2019-7150 CVE-2019-7665
  - SUG:restart
  - DESC:fix CVE-2018-18521 CVE-2019-7148 CVE-2019-7149 CVE-2019-7150 CVE-2019-7665


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.34.pre6
changelog:
  - update to latest upstream pre-release
  - drop unneeded patches
  - fix autoconf warnings
  - explicitly disable using OpenSSL and GnuTLS


author: gaihuiying<gaihuiying1@huawei.com> - 0.12-0.36.pre6.h1
changelog:
  - Type:cves
  - ID:CVE-2012-6709
  - SUG:restart
  - DESC:use OpenSSL instead of nss_compat_ossl, which is no longer maintained
         use the OpenSSL-provided host name check (#881399) and fix CVE-2012-6709


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 11.86-6
changelog:
  - Replace define with global in macro definitions
  - Add patch to fix previewing of equations courtesy of Sato Ichi (BZ 646632)
  - Add defattr to doc sub-package


author: Karel Klíč <kklic@redhat.com> - 11.86-9
changelog:
  - ELisp source code is no longer distributed in a separate package
  - License filed includes GFDL for the documentation


author: Peter Schiffer <pschiffe@redhat.com> 4.6.1-1
changelog:
  - resolves: #861849
    updated to 4.6.1
  - cleaned .spec file
  - resolves: #759964
    fixed sigsegv
  - resolves: #812225
    fixed sigsegv
  - fixed requires/buildrequires
  - added tex(pdftex.map) and libjpeg-turbo-devel buildrequires


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 4.6.2-1
changelog:
  - Rebase to 4.6.2
  - Added explicit build dependency on ImageMagick. It somehow disappeared from emacs dependencies.
  - Patched gnuplot.texi, new latex refused to compile it.


author: Adam Tkac <atkac redhat com> - 1.6.6-1
changelog:
  - update to 1.6.6
  - paches merged
    - enscript-1.6.4-hilight.patch
    - enscript-1.6.4-rh457719.patch


author: Orion Poplawski <orion@cora.nwra.com> - 3.2.10-2
changelog:
  - Add patch to comment out stray module use in modules file when not using
    versioning (bug #895555)
  - Add patch to fix module clear command (bug #895551)
  - Add patch from modules list to add completion to avail command


author: Jan Synáček <jsynacek@redhat.com> - 3.2.10-9
changelog:
  - fix: SourceVers wrongly sets version in nested directory (#1180652)
  - fix: unload from loaded modulefile broken (#1117327)


author: Jack Magne <jmagne@redhat.com> - 1.1.0-28
changelog:
  - Thanks to: Marcin Juszkiewicz <mjuszkiewicz@redhat.com>
  - Handle all kernel versions
  - Fix gecko version


author: Jack Magne <jmagne@redhat.com> - 1.1.0-33
changelog:
  - Resolves: Bug #1163479 Errata 18562 TPS tests fails - esc rebuild failure because of xulrunner updates.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-34
changelog:
  - Resolves: Bug #1173774 - ESC Client does list 
  - the encryption and signing certs under the "Your Certificates" tab when an enrolled card is inserted.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-35
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client


author: Jack Magne <jmagne@redhat.com> - 1.1.0-36
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client
  - Minor additional fix.


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.1.1-1
changelog:
  - Upstream update (2.1.1)
  - The new EuStore tools introduced in this version are in the -eustore package.


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.1.3-2
changelog:
  - Disabled SSL cert validation to make things work with boto 2.6+
  - Fixed eustore account name checking [TOOLS-282]
  - Fixed eustore registering images with the wrong type [TOOLS-184]
  - Fixed euare-userlistpolicies -v --delegate [TOOLS-281]
  - Fixed euca-get-console-output crash on no output
  - Added euca-register --virtualization type (note that it requires special privs)


author: edony <zhoupengchen@huawei.com> -1.0-8
changelog:
  -Type:security
  -DEC:fix euler-tpm2-laset cmd with normal cmd parameter options
       Usage: euler-tpm2-laset [OPTION]
           -s, --set    set local attestation with all choose pcrs and files
           -c, --clear  clear local attestation which has been set
           -h, --help   show help of local attestation commands


author: ningfangchao<ningfangchao1@huawei.com> - 1.0-14
changelog:
  - Type:security
  - ID:NA
  - SUG:NA
  - DESC:change back secure_open to fopen in saveDataToFile in common.c


author: edony <zhoupengchen@huawei.com> -1.0-10
changelog:
  -Type:security
  -DEC:remove TPM 2.0 chipset clear function, change initial password to a more security password


author: linyan <linyanly.linyan@huawei.com> - 1.0-1
changelog:
  - add Requires systemd grub2-tools
  - chanage /etc/grub.d/10_linux for ignore vmlinuz-3.10.0-229.x86_64 while grub2-mkconfig


author: chenwei <chenwei68@huawei.com>
changelog:
  - add 'crash_kexec_post_notifiers' for kdump after panic_notifers.
  - add 'panic=3' in kernel cmdline for kdump. this parameter can prevent system stucking when panic without kdump service active.
  - change parameter name from 'reserve_mem' to 'reserve_kbox_mem' to adpat kernel's change.


author: Zhengshaoyu<zhengshaoyu@huawei.com> - 1.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:auto repair filesystem when superblock and group descriptors corrupted.


author: zhangyu<zhangyu235@huawei.com> - 1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add %config(noreplace) for conf files to prevent being overwritten when upgrading


author: Ray Strode <rstrode@redhat.com> 69.1.6-1
changelog:
  - Update syslinux background to black
    Resolves: #1003873
  - Prune unused images from anaconda/ after talking to #anaconda


author: Jim Perrin <jperrin@centos.org> - 70.0.5-1
changelog:
  - Properly import all backgrounds images
  - update poweredby.png
  - Add CREDITS for artwork attribution as possible. 
  - Update anaconda rnotes images from Tuomas, inspired by Alain


author: Shaoshao Cui<euleros@huawei.com> - 2.1-0.8
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: delete /etc/logrotate.d/yum.rpmnew in /etc/cron.hourly/logrotate when yum.rpmnew exist


author: menxiaokang <euleros@huawei.com> - 2.1-0.12
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: mv /etc/logrotate.d/yum.rpmsave /etc/logrotate.d/yum in /etc/cron.hourly/logrotate when yum.rpmsave exist


author: Wu Hui <wuhui3@huawei.com> - 2.0SP2-6
changelog:
  - Type: bugfix
  - SUG: NA
  - DESC: del clear_EulerOS-base_for_arm.patch.  add  echo > EulerOS-base.repo in spec


author: linyan <linyanly.linyan@huawei.com> - 2.0-1.5
changelog:
  - move "chanage /etc/grub.d/10_linux for ignore vmlinuz-3.10.0-229.x86_64 while grub2-mkconfig" to new pkg euleros-grub2-config


author: zhangshaoning<euleros@huawei.com> - 2.0SP2-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:deteled https://fedoraproject.org/wiki/Starting_services_by_default


author: heyitao<heyitao@huawei.com> - 2.0SP2-9
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:deteled Autorun script for Red Hat Linux and Copyright (c) 1999-2002 Red Hat, Inc.


author: wwx429368 <wangce7@huawei.com> - 1.0.0-7
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC:Mail being sent successfully at last have one user,software will not contine send mail to other users


author: Jiazhenyuan <jiazhenyuan@huawei.com> - 3.14.2-5.h1
changelog:
  - Type: cves
  - ID: CVE-2017-1000083
  - SUG: NA
  - DEC: command injection via filename in tar-compressed comics archive


author: Milan Crha <mcrha@redhat.com> - 3.12.11-15
changelog:
  - Add patch for RH bug #1229812 (Preserve EWS autodiscovered hosts in GOA accounts)
  - Update patch for RH bug #1202372 (Discover and display all calendar shares associated with GOA Google account)


author: Milan Crha <mcrha@redhat.com> - 3.12.11-16
changelog:
  - Update patch for RH bug #1202372 (Discover and display all calendar shares associated with GOA Google account)


author: Milan Crha <mcrha@redhat.com> - 3.12.11-32
changelog:
  - Add patch for RH bug #1337259 ([IMAPx] Disable and hide "Use Quick Resync if the server supports it")


author: Milan Crha <mcrha@redhat.com> - 3.12.11-36
changelog:
  - Update patch for RH bug #1362674 (CalDAV fails to recognize "Daily Limit Exceeded" error from Google/GOA)


author: shijian<shijian16@huawei.com> - 2.2.0-8.h2
changelog:
  - Type:cves
  - ID:CVE-2017-18233 CVE-2017-18236 CVE-2017-18238 CVE-2018-7730
  - SUG:restart
  - DESC:fix CVE-2017-18233 CVE-2017-18236 CVE-2017-18238 CVE-2018-7730


author: liuzhao<euleros@huawei.com> - 0.23-6.h2
changelog:
  - Type:cves
  - ID:CVE-2018-12264 CVE-2018-12265
  - SUG:restart
  - DESC:fix CVE-2018-12264 CVE-2018-12265


author: zhangyujing<zhangyujing1@huawei.com> - 0.23-6.h3
changelog:
  - Type:cves
  - ID:CVE-2017-9239 CVE-2018-10958 CVE-2018-10999 CVE-2018-10998 CVE-2017-11591 CVE-2017-11683 CVE-2017-14859 CVE-2017-14862 CVE-2017-14864 CVE-2017-17669 CVE-2018-17581 CVE-2018-19107 CVE-2018-19108 CVE-2018-19535
  - SUG:restart
  - DESC:fix CVE-2017-9239 CVE-2018-10958 CVE-2018-10999 CVE-2018-10998 CVE-2017-11591 CVE-2017-11683 CVE-2017-14859 CVE-2017-14862 CVE-2017-14864 CVE-2017-17669 CVE-2018-17581 CVE-2018-19107 CVE-2018-19108 CVE-2018-19535


author: liujing<liujing144@huawei.com> - 0.23-6.h4
changelog:
  - Type:cves
  - ID:CVE-2018-19107 CVE-2018-19108 CVE-2018-20097 CVE-2019-13113 CVE-2019-13112 CVE-2019-13110 CVE-2017-18005
  - SUG:restart
  - DESC:fix CVE-2018-19107 CVE-2018-19108 CVE-2018-20097 CVE-2019-13113 CVE-2019-13112 CVE-2019-13110 CVE-2017-18005


author: lunankun<lunankun@huawei.com> - 2.1.0-10.h1
changelog:
  - Type:cves
  - ID:CVE-2015-1283 CVE-2016-4472 CVE-2016-5300
  - SUG:restart
  - DESC:fix CVE-2015-1283 CVE-2016-4472 CVE-2016-5300


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.49-10
changelog:
  - Use vsnprintf instead of vsprintf to avoid buffer overflow
    (it happens e.g. when running systemtap testsuite)
    Resolves: #1038931


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-13
changelog:
  - Fix segfaults if Tcl is built with stubs and Expect is used directly from C program
    (patch taken from Debian project, written by Sergei Golovan)
    Resolves: #1091060


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-14
changelog:
  - Use different and probably better approach of fixing segfaults if Tcl is
    built with stubs and Expect is used directly from C program
    Resolves: #1091060


author: Michal Schmidt <mschmidt@redhat.com> - 1.1.0-0.2.rc1
changelog:
  - Packaging Guidelines conformance fixes and spec file cleanups
  - Fix libfabric dependency
  - Related: bz1235270


author: Petr Šabata <contyk@redhat.com> - 1.0.29-5
changelog:
  - Don't build on s390x again (#1073060)
  - Drop bnx2fc from SUPPORTED_DRIVERS on s390x, for future (#1056371)
  - Update fcoemon(8) with more systemd changes (#1049162)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-27.7
changelog:
  - fence_compute: fix evacuation not working when instance was created
    by non-admin user
    Resolves: rhbz#1322702


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.24-3
changelog:
  - Fix fetchmail loses last line of message if the non-default "mimedecode" option
    is enabled and if that line is not properly terminated
    Resolves: #955814


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 3.3.3-3
changelog:
  - After consultation with upstream, enable SSE2 also on x86, altivec on ppc
    and ppc64 and NEON on arm.


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-27
changelog:
  - fix CVE-2014-0207 - cdf_read_short_sector insufficient boundary check
  - fix CVE-2014-0237 - cdf_unpack_summary_info() excessive looping DoS
  - fix CVE-2014-0238 - CDF property info parsing nelements infinite loop
  - fix CVE-2014-3478 - mconvert incorrect handling of truncated pascal string
  - fix CVE-2014-3479 - fix extensive backtracking in regular expression
  - fix CVE-2014-3480 - cdf_count_chain insufficient boundary check
  - fix CVE-2014-3487 - cdf_read_property_info insufficient boundary check
  - fix CVE-2014-3538 - unrestricted regular expression matching
  - fix CVE-2014-3587 - fix cdf_read_property_info
  - fix CVE-2014-3710 - out-of-bounds read in elf note headers
  - fix CVE-2014-8116 - multiple denial of service issues (resource consumption)
  - fix CVE-2014-8117 - denial of service issue (resource consumption)
  - fix CVE-2014-9652 - out of bounds read in mconvert()
  - fix CVE-2014-9653 - malformed elf file causes access to uninitialized memory


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-23
changelog:
  - fix #1094648 - improve Minix detection pattern to fix false positives
  - fix #1161912 - trim white-spaces during ISO9660 detection
  - fix #1157850 - fix detection of ppc64le ELF binaries
  - fix #1161911 - display "from" field on 32bit ppc core
  - fix #1064167 - revert MAXMIME patch
  - fix #1064268 - detect Dwarf debuginfo as "not stripped"
  - fix #1082689 - fix invalid read when matched pattern is the last one tried
  - fix #1080362 - remove deadcode and OFFSET_OOB redefinition


author: Ray Strode <rstrode@redhat.com> 3.14.2-6
changelog:
  - Add more goo to the compat desktop file to prevent it
    from getting exposed in control-center
    Related: #1259292


author: Yuanpei Wang <wangyuanpei@huawei.com> 3.14.2-7.h1
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC:Deleting all files does not work
    Resoves:#738178
  - DESC:Dragging a file to desktop doesn't work
    Resoves:#479351
  - DESC:Extracting (by drag & drop) causes an error when the mouse is
    Resoves:#735857
  - DESC:Cannot delete files from password protected 7zip archives
    Resoves:#618909


author: zhengshaoyu<zhengshaoyu@huawei.com> - 3.14.2-7.h2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix Add "file-roller-3.14.2-fix-gschema-validation.patch" to solve gschema build error


author: Hushan Jia <hushan.jia@gmail.com> 1.4.9.1-1
changelog:
  - Update to upstream 1.4.9.1 which have several bug fixes and enhancements
  - remove arch definitions, the syscalls are now detected during configuring


author: Kay Sievers <kay@redhat.com> - 3.2-11
changelog:
  - fix yum installroot ending up with directories in /var
    instead of the expected symlinks to /run
  - do not handle /var/lock/subsys, it is always on tmpfs
  - create all symlinked directories and their targets
    in pretrans to make sure other packages install into
    the right place, even if filesystem.rpm is not the
    first package installed in the transaction


author: Kamil Dudka <kdudka@redhat.com> - 1:4.5.10-7
changelog:
  - fix specfile issues reported by the fedora-review script
  - do not use the AM_C_PROTOTYPES macro (removed in Automake 1.12)
  - do not require gets() to be declared


author: zhangtao<zhangtao221@huawei.com> - 1:4.5.11-5.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix -printf %Y output to 'N' for broken links
          handle ENOTDIR also as broken symlink
          fix -printf '%h' for arguments with one or more trailing slashes
          make -delete honour the -ignore_readdir_race option


author: Tomas Hozza <thozza@redhat.com> - 0.17-49
changelog:
  - Compile finger with Full RELRO
  - Explicitly use gcc
  - Use only RPM_OPT_FLAGS and RPM_LD_FLAGS
  - Add systemd as BuildRequires because of unitdir macro


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: EL Errata <el-errata_ww@oracle.com> - 45.7.0-1.0.1
changelog:
  - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html
    and remove the corresponding Red Hat files


author: Forrest <linyanly.lin@huawei.com> - 45.7.0-1.0.1
changelog:
  - Type:cves
  - ID:CVE-2016-9893|CVE-2016-9895|CVE-2016-9897|CVE-2016-9898|CVE-2016-9899|CVE-2016-9900|CVE-2016-9901|CVE-2016-9902|CVE-2016-9904|CVE-2016-9905
  - SUG:false
  - DESC:fix CVE-2016-9893|CVE-2016-9895|CVE-2016-9897|CVE-2016-9898|CVE-2016-9899|CVE-2016-9900|CVE-2016-9901|CVE-2016-9902|CVE-2016-9904|CVE-2016-9905


author: Forrest <linyanly.lin@huawei.com> - 45.7.0-1.0.1
changelog:
  - Type:cves
  - ID:CVE-2017-5373|CVE-2017-5375|CVE-2017-5376|CVE-2017-5378|CVE-2017-5380|CVE-2017-5383|CVE-2017-5386|CVE-2017-5390|CVE-2017-5396
  - SUG:false
  - DESC:Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially,execute arbitrary code with the privileges of the user running Firefox.


author: zhangyi <zhangyi79@huawei.com> - 52.0-4.0.1.h1
changelog:
  - Type:cves
  - ID:CVE-2017-5398,CVE-2017-5400,CVE-2017-5401,CVE-2017-5402,CVE-2017-5404,
       CVE-2017-5407,CVE-2017-5408,CVE-2017-5410,CVE-2017-5405
  - SUG:NA
  - DESC:1)Multiple flaws were found in the processing of malformed web content.
         A web page containing malicious content could cause Firefox to crash or,
         potentially, execute arbitrary code with the privileges of the user
         running Firefox.
         2)EulerOS default prefs. And welcome url is http://developer.huawei.com/ict/en/site-euleros


author: zhangyi <zhangyi79@huawei.com> - 52.0-5.0.1.h1
changelog:
  - Type:cves
  - ID:CVE-2017-5428
  - SUG:NA
  - DESC:1)Integer overflow in createImageBitmap() (MFSA 2017-08)
         2)EulerOS default prefs. And welcome url is http://developer.huawei.com/ict/en/site-euleros


author: zhangyi <zhangyi79@huawei.com> - 52.1.0-2.0.1
changelog:
  - Type:cves
  - ID:CVE-2017-5429,CVE-2017-5430,CVE-2017-5432,CVE-2017-5433,
       CVE-2017-5434,CVE-2017-5435,CVE-2017-5436,CVE-2017-5437,
       CVE-2017-5438,CVE-2017-5439,CVE-2017-5440,CVE-2017-5441,
       CVE-2017-5442,CVE-2017-5443,CVE-2017-5444,CVE-2017-5445,
       CVE-2017-5446,CVE-2017-5447,CVE-2017-5448,CVE-2017-5449,
       CVE-2017-5451,CVE-2017-5454,CVE-2017-5455,CVE-2017-5456,
       CVE-2017-5459,CVE-2017-5460,CVE-2017-5464,CVE-2017-5465,
       CVE-2017-5466,CVE-2017-5467,CVE-2017-5469
  - SUG:NA
  - DESC:Fix CVEs.


author: zhangyi <zhangyi79@huawei.com> - 52.1.0-2.0.1.h1
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC:1)Rename firefox-oracle-default-prefs.js to firefox-euleros-default-prefs.js
         EulerOS default prefs. And welcome url is http://developer.huawei.com/ict/en/site-euleros
         2)Delete default_bookmarks_file from spec file.


author: gwx455006 <gaochong4@huawei.com> - 52.2.0-1.h1
changelog:
  - Type:CVE
  - SUG:NA
  - DESC:1)Update version on 52.2.0
         EulerOS default prefs. And welcome url is http://developer.huawei.com/ict/en/site-euleros
         2)fix bug for CVE CVE-2017-5470, CVE-2017-5472, CVE-2017-7749, CVE-2017-7751, CVE-2017-7756, CVE-2017-7771, CVE-2017-7772, CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776, CVE-2017-7777, CVE-2017-7778, CVE-2017-7750, CVE-2017-7752, CVE-2017-7754, CVE-2017-7757, CVE-2017-7758, CVE-2017-7764


author: gaochong <gaochong4@huawei.com> - 52.4.0-2.h1
changelog:
  - EulerOS default prefs(firefox-euleros-default-prefs.js). And welcome url is http://developer.huawei.com/ict/en/site-euleros


author: gaochong <gaochong4@huawei.com> - 52.5.0-1.h1
changelog:
  - Replace Source12 with EulerOS default prefs(firefox-euleros-default-prefs.js). And welcome url is http://developer.huawei.com/ict/en/site-euleros


author: wangzezhi<wangzezhi2@huawei.com> - 52.7.3-1.h2
changelog:
  - Type:security
  - ID:NA
  - SUG:restart
  - DESC:Replace Source12 with EulerOS default prefs(firefox-euleros-default-prefs.js). And welcome url is http://developer.huawei.com/ict/en/site-euleros


author: Jan Horak <jhorak@redhat.com> - 60.1.0-8
changelog:
  - Fixed homepage and bookmarks (rhbz#1606778)
  - Fixed missing file associations in RHEL6 (rhbz#1613565)


author: Jan Horak <jhorak@redhat.com> - 60.1.0-9
changelog:
  - Do not set user agent (rhbz#1608065)
  - GTK dialogs are localized now (rhbz#1619373)
  - JNLP association works again (rhbz#1607457)


author: zhangshaoning<euleros@huawei.com> - 60.2.2-1.h2
changelog:
  - Type:security
  - ID:NA
  - SUG:restart
  - DESC:update to version 60.2.2-1
  - DESC:Replace Source12 with EulerOS default prefs
  - DESC:disable bep-env pre-installed.


author: zhangshaoning<euleros@huawei.com> - 60.3.0-1.h2
changelog:
  - Type:security
  - ID:NA
  - SUG:restart
  - DESC:1)update to version 60.3.0-1
         2)Replace Source12 with EulerOS default prefs
         3)disable bep-env pre-installed.


author: zhengshaoyu<euleros@huawei.com> - 60.6.0-3.h1
changelog:
  - Type:security
  - ID:CVE-2018-17466  CVE-2018-18492 CVE-2018-18494 CVE-2018-18493 
  CVE-2018-18498 CVE-2018-12405 CVE-2019-9790 CVE-2019-9791 CVE-2019-9795 
  CVE-2019-9788 CVE-2019-9796 CVE-2019-9793 CVE-2019-9792 CVE-2018-18506
  - SUG:restart
  - DESC:upgrade from 60.3.0-1.h1 to 60.6.0-3.h1
  - DESC:EulerOS default prefs. And welcome url is http://developer.huawei.com/ict/en/site-euleros


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-8
changelog:
  - fixed GUI missing name of active zone (RHBZ#993655)
  - recreate man pages at build time (RHBZ#1071303)
    - fixes rich language log level (RHBZ#993740)
    - fixes typo in firewall-cmd man page (RHBZ#1064401)
  - new support to save runtime as permanent (RHBZ#993650)
  - new cli --timeout time specifiers support (RHBZ#994044)
  - updated translations (RHBZ#1048119) (RHBZ#1083592)
  - more descriptive error message in case of mistakes in iptables (RHBZ#1057095)
  - use apparent name for default target (RHBZ#1075675)
  - simplified firewalld usage on servers by dropping at_console (RHBZ#1097765)
  - fixed enable/disable of lockdown (RHBZ#1111573)
  - new Satellite 6 service (RHBZ#1135634)
  - fixed inconsistent color usage for firewall-cmd messages (RHBZ#1097841)
  - fixed missing -Es in lockdown whitelist firewall-config command (RHBZ#1099065)
  - unified runtime and permanent D-Bus API (RHBZ#1127706)
  - fixed missing update of the connections menu in firewall-config (RHBZ#1120212)
  - better docs for interface bindings in firewalld and NetworkManager (RHBZ#1112742)
  - firewall-config: Show target REJECT (RHBZ#1058794)
  - fixed inconsistent PolicyKit domain usage in main D-Bus interface (RHBZ#1061809)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-11
changelog:
  - added missing upstream commit 265bfe90 for (RHBZ#993650)
  - also add log message in the firewall-cmd output (RHBZ#1057095)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-12
changelog:
  - New schema configuration file verifier (RHBZ#994479)
  - More information about interface handling with and without NetworkManager
    (RHBZ#1122739) (RHBZ#1128563)
  - Apply all rich rules for non-default targets (RHBZ#1142741)
  - New iscsi service (RHBZ#1150656)
  - New rsync service (RHBZ#1150659)
  - ipXtables: use -w or -w2 if supported (RHBZ#1161745)
  - Do not use ipv6header for protocol matching. (RHBZ#1164605)
  - Iptables does not like limit of 1/d (RHBZ#1176813)
  - Fix readdition of removed permanent direct settings (RHBZ#1182671)
  - Fix bugs found by upstream test suite (RHBZ#1183008)
  - Fix polkit auth for query and get passthroughs methods (RHBZ#1183688)
  - New vdsm service (RHBZ#1194382)
  - New freeipa services (RHBZ#1206490)
  - Add missing parts to firewall-offline-cmd man page (RHBZ#1217678)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-13
changelog:
  - Fixed file mode of schema configuration file verifier check.sh (RHBZ#994479)
  - Include upstream testsuite in SRPM package (RHBZ#1261502)
  - Added missing ports to RH-Satellite-6 mservice (RHBZ#1254531)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-5
changelog:
  - fixed rich language log level (RHBZ#993740)
  - firewall-config: use simple tool to change zones for connections (RHBZ#993782)
  - translations update (RHBZ#1030330)
  - firewall-config: fixed service and icmptype name dulications (RHBZ#1067639)
  - allow router advertisements for IPv6 rpfilter (RHBZ#1067652)
  - firewall-applet: allow to bind connections to the defaut zone (RHBZ#1068148)


author: Martin Kolman <mkolman@redhat.com> 19.9-2
changelog:
  - Add missing python-ethtool dependency (#1116921) (mkolman@redhat.com)
    Resolves: rhbz#1116921
  - Disable firstboot-graphical service at the end (#1091317) (vpodzime@redhat.com)
    Resolves: rhbz#1091317


author: Martin Kolman <mkolman@redhat.com> 19.9-3
changelog:
  - Fix exception handling (#952633) (mkolman@redhat.com)
    Resolves: rhbz#952633
  - Replace Finish with Done on the next button (#1107887) (mkolman@redhat.com)
    Resolves: rhbz#1107887


author: Martin Kolman <mkolman@redhat.com> 19.9-4
changelog:
  - Handle next button naming also if there is only one module (#1107887) (mkolman@redhat.com)
    Related: rhbz#1107887


author: Martin Kolman <mkolman@redhat.com> 19.9-6
changelog:
  - Make Firstboot architecture specific due to s390-only files (#1162567) (mkolman@redhat.com)
    Resolves: rhbz#1162567


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-11.20121204gita43f56
changelog:
  - update to 20121204gita43f56
  - create libs subpackage
  - split documentation to base and devel subpackages
  - drop defattr macros
  - add GFDL to License tag


author: Miroslav Lichvar <mlichvar@redhat.com> 1.3.0-5
changelog:
  - fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962)
  - fix buffer overflow with invalid blocksize (CVE-2014-9028)


author: Petr Machata <pmachata@redhat.com> - 2.5.35-15
changelog:
  - Rename flex-static to flex-devel so that it gets to repositories of
    minor multi-lib arch (i386 on x86_64 etc.)
  - Resolves: #674301


author: Petr Machata <pmachata@redhat.com> - 2.5.36-1
changelog:
  - Rebase to 2.5.36
    - Drop flex-2.5.35-sign.patch, flex-2.5.35-hardening.patch,
      flex-2.5.35-gcc44.patch, flex-2.5.35-missing-prototypes.patch
    - Add flex-2.5.36-bison-2.6.1.patch
    - Add a subpackage doc
  - Resolves #842073


author: zhangyuyun<zhangyuyun@huawei.com> - 2.5.37-3.h1
changelog:
  - Type:cves
  - ID:CVE-2017-6354
  - SUG:NA
  - DESC:Fixed incorrect integer type. commit url: https://github.com/westes/flex/commit/a5cbe929ac3255d371e698f62dc256afe7006466


author: zhangruifang<zhangruifang1@huawei.com> - 2.5.37-3.h2
changelog:
  - Type:cves
  - ID:CVE-2016-6354
  - SUG:restart
  - DESC:modify patch:CVE-2017-6354 name to CVE-2016-6354


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.3-16
changelog:
  - Added patch declaring explicit libm linking dependency (RHBZ #564899)
  - Updated source and URL tags


author: Akira TAGOH <tagoh@redhat.com> - 2.10.94-1
changelog:
  - New upstream release.
  - migrate the configuration for XDG Base Directory spec automatically (#882267)


author: Akira TAGOH <tagoh@redhat.com> - 2.10.95-5
changelog:
  - Fix the race condition issue on updating cache (#1011510)
  - Fix crash issue in FcFontSort()
  - Fix an issue not copying all values from the font.


author: Tomas Smetana <tsmetana@redhat.com> - 2.8.0-6
changelog:
  - fix #831336: fix broken menus; patch backported from upstream SVN revision
    1375 by Manfred Spraul


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-1
changelog:
  - Updated to freeipmi-1.2.6
   - Support HP Proliant DL160 G8 OEM sensors.
   - Support Supermicro X9SCM-iiF OEM sensors and events.
   - Support output of temperature sampling period to ipmi-dcmi.
   - Clarify error message when SOL session cannot be stolen in
     ipmiconsole/libipmiconsole.
   - Fix dcmi rolling average time period output error
   - Fix ipmi-dcmi output errors with --get-dcmi-sensor-info.
   - Fix corner case in calculation of confidentiality pad length with
     AES-CBC-128 encryption.  Incorrect pad effects some vendor firmware
     implementations.
   - Send IPMI 2.0 packets differently than IPMI 1.5 packets, as the
     former does not require legacy pad data to be appended to payloads.
   - Fix Intel OEM SEL buffer overflow.
   - Fix out of trunk source build.
   - Support new ipmi_rmcpplus_sendto() and ipmi_rmcpplus_recvfrom()
     functions.
   - Support new HP Proliant DL160 G8 OEM sensor events.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-2
changelog:
  - spec update by Christopher Meng <rpm@cicku.me>
   - hardened build flags should include PIE also for bmc-watchdog.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.9-1
changelog:
  - Updated to upstream freeipmi-1.2.9
   - Fix threshold output corner case in ipmi-sensors.
   - Fix invalid declaration in libipmimonitoring header.
   - Fix older compiler build problems.
   -
   - Fix portability build bug on ARM systems.
   - Add 'internal IPMI error' troubleshooting to manpages.
   - Fix bmc-info corner case on Bull 510 systems.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-1
changelog:
  - Upgrade to upstream v3.0.13 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
    Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                          compile time
    Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                          can't connect to mysql server
    Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-2
changelog:
  - Fix some issues found with static analyzers.
    Resolves: Bug#1432103 FreeRADIUS fails covscan checks
  - Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-3
changelog:
  - Explicitly disable rlm_cache_memcached to avoid error when the module's
    dependencies are installed, and it is built, but not packaged.
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  - Prevent segfaults by adding a missing handling of connection errors in
    rlm_ldap.
    Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
  - Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
    Resolves: Bug#1436619 radtest does not work with eap-md5


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-4
changelog:
  - Disable internal OpenSSL cache.
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass
  - Check sizeof(*packet), not sizeof(packet) in EAP-PWD
    Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
  - Parse port as well as address for dhcpclient destination
    Resolves: Bug#1457825 dhcpclient does no accept IP:PORT


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-5
changelog:
  - Refer to correct package version in configuration comments for Bug#1458746
    (CVE-2017-9148) fix.
    Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-6
changelog:
  - Avoid race condition when creating session cache file
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-7
changelog:
  - Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                          to improper output buffer size check in make_secret()
  - Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63
  - Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                          data2vp_wimax()
  - Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                          exhaustion with 'concat' attributes
  - Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                          dhcp_attr2vp()
  - Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                          fr_dhcp_decode_suboptions()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-8
changelog:
  - Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
  - Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                         data2vp_wimax()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-1
changelog:
  - Upgrade to upstream v3.0.12 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
    Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                          detail file
    Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
    Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
    Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                          load
    Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-2
changelog:
  - Do not fail logrotate if radiusd is not running.
    Resolves: Bug#1365226 error running non-shared postrotate script for
                          /var/log/radius/radius.log of
                          '/var/log/radius/radius.log '
  - Fix output to log file specified with -l option.
    Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                          option
  - Fix long hostnames interpreted as IP addresses.
    Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                          name as a domain name
  - Avoid clashes with libtool library symbols.
    Resolves: Bug#1391960 undefined symbol: get_vtable in
                          /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
  - Remove mentions of Auth-Type = System from docs.
    Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
  - Improve ip/v4/v6/addr documentation.
    Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                          and AAAA entries


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.1-6
changelog:
  - Fix CVE-2014-2015 "freeradius: stack-based buffer overflow flaw in rlm_pap
    module"
  - resolves: bug#1066984 (fedora 1066763)


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-0.1.rc2
changelog:
  - Upgrade to upstream 3.0.4-rc2 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
  - Add installation of SNMP MIB files.
  - Resolves: Bug#1036562 Missing doc page for kerberos module
  - Resolves: Bug#1099625 Default message digest defaults to sha1
  - Resolves: Bug#1109159 missing mib files in freeradius package
  - Resolves: Bug#1113010 radiusd doesn't send snmp trap when max_threads value
                          is reached
  - Resolves: Bug#1114669 Missing -P option in radtest manpage
  - Resolves: Bug#1115128 radisud can't start if proto = udp is specified
  - Resolves: Bug#1115134 radiusd aborts after 'Access-Request' when listens on
                          TCP port
  - Resolves: Bug#1115137 radiusd listens on udp port even if proto = tcp is
                          specified
  - Resolves: Bug#1126725 radiusd silently fails when start_servers is higher
                          than max_servers
  - Resolves: Bug#1135446 Radeapclient is not available


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-1
changelog:
  - Upgrade to upstream 3.0.4 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-2
changelog:
  - Fix abort on home server triggers.
    Resolves: Bug#1113509 radiusd aborts when it has no proxy response with active
                          snmp traps
  - Fix segfault upon example.pl read failure.
    Resolves: Bug#1146403 radiusd segfaults when file for perl module has
                          wrong permissions
  - Fix example.pl permissions.
    Resolves: Bug#1146406 /etc/raddb/mods-config/perl/example.pl has wrong
                          permissions and radiusd fails to start
  - Fix integer handling in various cases.
    Resolves: Bug#1146441 upstream test suite fails
  - Fix dhcpclient's dictionary.dhcp loading.
    Resolves: Bug#1146939 dhcpclient lookups dictionary.dhcp file in wrong
                          location


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-3
changelog:
  - Fix a number of trigger issues.
    Resolves: Bug#1110407 radiusd doesn't send snmp trap after "radmin -e 'hup
                          files'"
    Resolves: Bug#1110414 radiusd doesn't send snmp trap when sql connection is
                          opened,closed or fail
    Resolves: Bug#1110186 radiusd doesn't send snmp trap when ldap connection
                          fails/opens/closes
    Resolves: Bug#1109164 snmp trap messages send by radiusd are inconsistent
                          and incomplete
  - Fix two omissions from radtest manpage.
    Resolves: Bug#1146898 'eap-md5' value is missing in -t option in SYNOPSIS
                          of radtest man page
    Resolves: Bug#1114669 Missing -P option in radtest manpage
  - Disable OpenSSL version checking to avoid the need to edit radiusd.conf to
    confirm heartbleed is fixed.
    Resolves: Bug#1155070 FreeRADIUS doesn't start after upgrade due to failing
                          OpenSSL version check


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-4
changelog:
  - Fix possible group info corruption/segfault in rlm_unix' fr_getgrnam.
  - Fix file configuration item parsing.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-5
changelog:
  - Disable rlm_rest building explicitly to avoid unintended builds on some
    architectures breaking RPM build.
    Resolves: Bug#1162156
  - Add -D option support to dhcpclient.
    Related: Bug#1146939
  - Don't install rbmonkey - a test tool only useful to developers.
    Related: Bug#1146966
  - Update clients(5) man page
    Resolves: Bug#1147464


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-6
changelog:
  - Don't remove backslash from unknown escape sequences in LDAP values.
    Resolves: Bug#1173526
  - Improve dhcpclient and rad_counter online help.
    Resolves: Bug#1146966
  - raddb: Move trigger.conf INCLUDE before modules, making it easier to refer
    to trigger variables from module configurations.
    Resolves: Bug#1155961
  - Fix ipaddr option fallback onto ipv6.
    Resolves: Bug#1168868
  - raddb: Comment on ipaddr/ipv4addr/ipv6addr use.
    Resolves: Bug#1168247


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-8
changelog:
  - Disable internal OpenSSL cache and fix session cache file permissions.
    Resolves: Bug#1459131 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Soren Sandmann <ssp@redhat.com> - 1.0.2-3
changelog:
  - Man page fixes
    - Document that multiple connections don't work (988294)
    - Document the list of plugins (988307, 988308)


author: yaolijun<yaolijun2@huawei.com> - 1.0.2-6.1.h1
changelog:
  - Type:cves
  - ID:CVE-2018-8786 CVE-2018-8787 CVE-2018-8788
  - SUG:restart
  - DESC:fix CVE-2018-8786 CVE-2018-8787 CVE-2018-8788


author: daiqianwen<daiqianwen@huawei.com> - 1.0.2-6.1.h2
changelog:
  - Type:cves
  - ID:CVE-2013-4118 CVE-2014-0250 CVE-2014-0791 CVE-2017-2835 CVE-2017-2836 CVE-2017-2837 CVE-2017-2838 CVE-2017-2839
  - SUG:restart
  - DESC:fix CVE-2013-4118 CVE-2014-0250 CVE-2014-0791 CVE-2017-2835 CVE-2017-2836 CVE-2017-2837 CVE-2017-2838 CVE-2017-2839


author: ruanweidong<ruanweidong1@huawei.com> 1.0.2-6.1.h6
changelog:
  - Type:cves
  - ID:CVE-2020-11089 CVE-2020-4033 CVE-2020-11098
  - SUG:NA
  - DESC:fix CVE-2020-11089 CVE-2020-4033 CVE-2020-11098


author: ruanweidong<ruanweidong1@huawei.com> - 1.0.2-6.1.h9
changelog:
  - Type:cves
  - ID:CVE-2020-11045 CVE-2020-11096 CVE-2020-11523
  - SUG:NA
  - DESC:fix CVE-2020-11045 CVE-2020-11096 CVE-2020-11523


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-3
changelog:
  - Fix emboldening:
      - split out MSB function
      - fix integer overflows
      - fix broken emboldening at small sizes
  - Resolves: #891457


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-10.el7_1.1
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197739


author: zhangyi <zhangyi79@huawei.com> - 2.4.11-10.1.1.h2
changelog:
  - Type:cves
  - ID:CVE-2017-8105
  - SUG:NA
  - DESC:heap-based buffer overflow related to the t1_decoder_parse_charstrings


author: Chunxiao Chen <chenchunxiao@huawei.com> - 2.4.11-10.1.h3
changelog:
  - Type:cves
  - ID:CVE-2016-10244
  - SUG:NA
  - DEC:Fixes CVE-2016-10244 Fix heap buffer overflow ,reject fonts that don't contain glyph names.


author: Chunxiao Chen <chenchunxiao@huawei.com> - 2.4.11-10.1.h4
changelog:
  - Type:cves
  - ID:CVE-2016-10328
  - SUG:NA
  - DEC:Fixes CVE-2016-10328 Fix heap buffer overflow problem related to the cff_parser_run function in cff/cffparse.c


author: Yitao He <heyitao@huawei.com> - 2.4.11-10.1.h5
changelog:
  - Type:cves
  - ID:CVE-2017-8287
  - SUG:NA
  - DEC:Fixes CVE-2017-8287 Fix out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs.c


author: Jan Synáček <jsynacek@redhat.com> - 0.17-58
changelog:
  - Extend the input line buffer and the argument storage buffer
  - Prettify spec some more and remove trailing space


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.0.0-1
changelog:
  - Remove gawk-3.1.8-syntax.patch, gawk-3.1.8-double-free-wstptr.patch
  - Update to upstream 4.0.0 (#717885)


author: Martin Bříza <mbriza@redhat.com> - 4.0.1-1
changelog:
  - Update to upstream 4.0.1 (#808005)
  - Corrected Source0 link to .tar.gz extension as not all releases are available as .tar.bz2
  - Resolves #724817 - gawk-4.0.0 regression in '\' escape handling in gsub()
  - Resolves #820550 - gawk: getline in BEGIN skips 2 lines


author: Honza Horak <hhorak@redhat.com> - 2.0.35-19
changelog:
  - Spec file cleanup
  - Compile and run test suite during build
  - Using chrpath to get rid of --rpath in gd-progs


author: zhangyuyun<zhangyuyun@huawei.com> - 2.0.35-26.h3
changelog:
  - Type:cves
  - ID:CVE-2016-9317
  - SUG:NA
  - DESC:fix: before 2.2.4 allows remote attackers to cause a denial of service


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-73.el7
changelog:
  - Remove wrongly backported patches (5of7, 6of7, 7of7) from RH BZ
    1225569 backport.  Add new patches necessary to fix failures.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-74.el7
changelog:
  - Fix '[7.2 FEAT] GDB Transactional Diagnostic Block support on System
    z' (Andreas Arnez, RH BZ 1105165).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-75.el7
changelog:
  - Fix typo/thinko on
    'gdb-rhbz1105165-ibm-tdb-support-system-z-3of9.patch', where the
    type of the 'hwcap' variable in the 's390_core_read_description'
    function should be 'CORE_ADDR', and not 'unsigned log'.  This caused
    a build breakage on s390 (31-bit) (RH BZ 1105165).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-77.el7
changelog:
  - Address issues from Coverity Scan related to '[7.2 FEAT] Enable
    reverse debugging support for PowerPC on GDB' (RH BZ 1218710).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-78.el7
changelog:
  - Fix 'Backport upstream GDB AArch64 SDT probe support to RHEL GDB'
    (Sergio Durigan Junior, RH BZ 1247107).


author: jiangjun<jiangjun34@huawei.com> - 7.6.1-80.1.h3
changelog:
  - Type:cves
  - ID:CVE-2016-4488 CVE-2016-4492 CVE-2016-4493
  - SUG:NA
  - DESC:fix CVE-2016-4488 CVE-2016-4492 CVE-2016-4493


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-72.el7
changelog:
  - Fix 'gdb output a internal-error: Assertion `num_lwps (GET_PID
    (inferior_ptid)) == 1' failed' (Pedro Alves, RH BZ 1184724).


author: Honza Horak <hhorak@redhat.com> - 1.9.1-1
changelog:
  - Updated to new upstream release 1.9.1
  - Dropped -filestruct, -ndbmlock and -fhs patches, they are not 
    needed anymore and GDBM_NOLOCK is used always
  - Run testsuite


author: Honza Horak <hhorak@redhat.com> - 1.10-1
changelog:
  - Updated to new upstream release 1.10
  - Dropped -shortread patch, which has been already applied by upstream
  - Disable large file support, that is enabled by default since 1.9, 
    but not compatible with db files created using gdbm-1.8.3 and lower
  - License change to GPLv3+
  - Add doc files THANKS AUTHORS NOTE-WARNING
  - Changed text in NOTE-WARNING to correspond with build settings


author: zhangruifang<zhangruifang1@huawei.com> - 2.36.5-1.h2
changelog:
  - Type:cves
  - ID:CVE-2017-6312 CVE-2017-6313 CVE-2017-6314
  - SUG:restart
  - DESC:fix CVE-2017-6312 CVE-2017-6313 CVE-2017-6314


author: Shuaishuai Song <songshuaishuai2@huawei.com> 3.14.3-9.h1
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: activities overview: Right click on gedit will not active a new gedit window
    Resoves: #744184


author: Yuanpei Wang <wangyuanpei@huawei.com> 3.14.2-9.h2
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC:fix bug with document metadata
    Resoves:#741853
  - DESC:Unset correctly GVFS file attributes
    Related:#741853
  - DESC:Printing: fix margins
    Resoves:#572741
  - DESC:Printing: set default margin-top to 15mm
    Related:#572741


author: zhengshaoyu<zhengshaoyu@huawei.com> - 3.14.3-9.h4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix Add "0100-Do-not-merge-xml-translation-in-gschema-files.patch" to solve gschema build error


author: zhangwenlong<zhangwenlong13@huawei.com> - 3.14.1-2.h1
changelog:
  - Type:bugfix
  - ID:NA 
  - SUG:NA
  - DESC:Multi-process compilation changed to single process compilation


author: Nils Philippsen <nils@redhat.com> - 0.2.0-11
changelog:
  - replace lua-5.2 patch by upstream commit
  - fix buffer overflow in and add plausibility checks to ppm-load op
    (CVE-2012-4433)
  - fix multi-lib issue in generated documentation


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-18
changelog:
  - ported from cdda-paranoia to libcdio-paranoia, modified paranoia-cdda.patch
  - fixed bogus date in changelog


author: Andrew Price <anprice@redhat.com> - 3.1.7-4
changelog:
  - mkfs.gfs2: Revert default resource group size
    Resolves: rhbz#1162817
  - Add ExclusiveArch
    Resolves: rhbz#1161936


author: Andrew Price <anprice@redhat.com> - 3.1.7-6
changelog:
  - fsck.gfs2: fix broken i_goal values in inodes
  - gfs2_convert: use correct i_goal values instead of zeros for inodes
  - tests: test for incorrect inode i_goal values
  - fsck.gfs2: Reprocess nodes if anything changed - addendum 1 of 2
  - fsck.gfs2: addendum to fix broken i_goal values in inodes - addendum 2 of 2
    Resolves: rhbz#1178604


author: Andrew Price <anprice@redhat.com> - 3.1.8-1
changelog:
  - Rebase to new upstream version 3.1.8
    Resolves: rhbz#1184482
    Resolves: rhbz#1153316
    Resolves: rhbz#1154726
    Resolves: rhbz#1162216
    Resolves: rhbz#1165285
    Resolves: rhbz#1186515
    Resolves: rhbz#1186847
    Resolves: rhbz#1194446
    Resolves: rhbz#1195394


author: Andrew Price <anprice@redhat.com> - 3.1.8-4
changelog:
  - fsck.gfs2: Change duptree structure to have generic flags
  - fsck.gfs2: Detect, fix and clone duplicate block refs within a dinode
    Resolves: rhbz#1236669


author: Andrew Price <anprice@redhat.com> - 3.1.8-5
changelog:
  - gfs2-utils: Fix hang on withdraw (4 patches)
  - Include new withdraw helper scripts in files section
    Resolves: rhbz#1225634


author: Tim Waugh <twaugh@redhat.com> 9.07-10
changelog:
  - Added in missing part of gs_sprintf backport: add in the header to
    stdio_.h. Without this there are problems with va_args on some
    platforms (bug #979681).


author: Tim Waugh <twaugh@redhat.com> 9.07-18
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1105519).


author: huawei@huawei.com 9.07-18.h1
changelog:
  - Fix multiple -dsafer realated CVE's (bsc#1001951)
    * CVE-2013-5653.patch
    rm gs_init.ps.orig
    * CVE-2016-7977.patch
    * CVE-2016-7979.patch
    * CVE-2015-3228.patch fixes out of bound read/write cause
    by integer overflow in gsmalloc.c (boo#939342).


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-19
changelog:
  - Import LCMS2 2.6 rebase changes into ghostscript (bug #959351)
  - Fix hanging of ghostscript when converting PDF -> PNG (bug #1302121)
  - Do not SIGSEGV after icc_profile error, report error instead (bug #1243784)
  - Fix the color printing on HP InkJet printers (bug #1225858)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-20_1
changelog:
  - Added security fixes for:
    - CVE-2013-5653 (bug #1380327)
    - CVE-2016-7977 (bug #1380415)
    - CVE-2016-7978 (bug #1382300)
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-8602 (bug #1383940)


author: Yitao He<heyitao@huawei.com> - 9.07-20_1.h2
changelog:
  - Type:cves
  - ID: CVE-2017-8291
  - SUG:NA
  - DEC:Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or 
        printed.


author: zhouyi<zhouyi20@huawei.com> - 9.07-20_1.h3
changelog:
  - Type:cves
  - ID:CVE-2017-7207
  - SUG:NA
  - DEC:The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-25
changelog:
  - Added security fix for CVE-2017-7207 (bug #1434353)
  - Added explicit requirement for lcms2 version we are build with (bug #1436273)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29
changelog:
  - Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
  - Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29.el7_5.1
changelog:
  - Added security fixes for:
    - CVE-2018-16509 (bug #1621156)
    - CVE-2018-15910 (bug #1621157)
    - CVE-2018-16542 (bug #1621380)


author: zhangshaoning<euleros@huawei.com> - 9.07-29.2.h1
changelog:
  - Type:security
  - ID:CVE-2018-10194 CVE-2018-15910 CVE-2018-16509 CVE-2018-16542
  - SUG:restart
  - DESC:1)update to version 9.07-29.2
         2)fix CVE-2015-3228


author: heyitao<heyitao@huawei.com> - 9.07-29.2.h2
changelog:
  - Type:security
  - ID:CVE-2018-16540 CVE-2018-16541
  - SUG:restart
  - DESC:1)avoid sharing pointers between pdf14 compositors
         2)ensure the correct is in place before cleanup


author: lirui<lirui130@huawei.com> - 9.07-31.6.h9
changelog:
  - Type:cves
  - ID:CVE-2016-10217 CVE-2016-10219 CVE-2017-5951
  - SUG:restart
  - DESC:fix CVE-2016-10217 CVE-2016-10219 CVE-2017-5951


author: wangyue<wangyue92@huawei.com> - 9.07-31.6.h16
changelog:
  - Type:cves
  - ID:CVE-2019-14811 CVE-2019-14812 CVE-2019-14813 CVE-2019-14817
  - SUG:restart
  - DESC:fix CVE-2019-14811 CVE-2019-14812 CVE-2019-14813 CVE-2019-14817


author: wangyue<wangyue92@huawei.com> - 9.07-31.6.h17
changelog:
  - Type:cves
  - ID:CVE-2019-14811 CVE-2019-14812 CVE-2019-14813
  - SUG:restart
  - DESC:refix CVE-2019-14811 CVE-2019-14812 CVE-2019-14813


author: jiangshan<jiangshan27@huawei.com> - 9.07-31.6.h20
changelog:
  - Type:cves
  - ID:CVE-2020-16287 CVE-2020-16288 CVE-2020-16289 CVE-2020-16290 CVE-2020-16291 CVE-2020-16292 CVE-2020-16294 CVE-2020-16295 CVE-2020-16296 CVE-2020-16297 CVE-2020-16298 CVE-2020-16299 CVE-2020-16300 CVE-2020-16301 CVE-2020-16305 CVE-2020-16308 CVE-2020-16309 CVE-2020-16310 CVE-2020-17538
  - SUG:restart
  - DESC:fix CVE-2020-16287 CVE-2020-16288 CVE-2020-16289 CVE-2020-16290 CVE-2020-16291 CVE-2020-16292 CVE-2020-16294 CVE-2020-16295 CVE-2020-16296 CVE-2020-16297 CVE-2020-16298 CVE-2020-16299 CVE-2020-16300 CVE-2020-16301 CVE-2020-16305 CVE-2020-16308 CVE-2020-16309 CVE-2020-16310 CVE-2020-17538


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-31
changelog:
  - Added security fixes for:
    - CVE-2018-16509 (bug #1621158)
    - CVE-2018-15910 (bug #1621160)
    - CVE-2018-16542 (bug #1621382)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.1
changelog:
  - Remove as many non-standard operators as possible to make the codebase
    closer to upstream for later CVEs
  - Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
    checker (699659)
  - Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
    in temp file handling to disclose contents of files (699658) 
  - Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
    issues (699657)
  - Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
    type checking (699660)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.4
changelog:
  - Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
    access in the aesdecode operator (699665)
  - Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
    privilege" checking when running out of stack during exception handling
  - Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.5
changelog:
  - Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
    pagedevice replacement (699664)
  - Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
    exception table
  - Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.6
changelog:
  - Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
    smooth shading object (Error: /rangecheck in --run--)


author: zhangshaoning<euleros@huawei.com> - 9.07-31.6.h3
changelog:
  - Type:cves
  - ID:CVE-2018-16540 CVE-2018-16543 CVE-2015-3228
  - SUG:NA
  - DESC:1)update version to 9.07-31.6
         2)fix above cves


author: liuqianya<liuqianya@huawei.com> - 9.07-31.6.h4
changelog:
  - Type:security
  - ID:NA 
  - SUG:NA
  - DESC:fix for CVE-2018-19475 CVE-2018-19476 CVE-2018-19477 CVE-2019-6116


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: zhangshaoning <zhangshaoning1@huawei.com> - 2:2.8.10-3.h1
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DEC:fix CVE-2017-17784 CVE-2017-17785 CVE-2017-17786 CVE-2017-17787 CVE-2017-17788 CVE-2017-17789


author: Nils Philippsen <nils@redhat.com> - 2.8.1-1
changelog:
  - version 2.8.1
  - reenable parallel building
  - add Brazilian Portuguese translation
  - remove (empty) translations: Finnish, Hungarian, Lithuanian, Polish
  - fix translation that makes xml2po.py/libxml2 crash


author: Nils Philippsen <nils@redhat.com> - 2.8.0-1
changelog:
  - version 2.8.0
  - add po files missing in tarball
  - add new build requirements: dblatex, graphviz, pngnq, pngcrush
  - fix file list generation


author: Petr Stodulka <pstodulk@redhat.com> -1.8.3.1-9
changelog:
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1369173


author: wuyou <wuyou88@huawei.com> - 1.8.3.1-12.h1
changelog:
  - Type:cves
  - ID:CVE-2017-14876
  - DESC:
    CVE-2017-14876:unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name


author: Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13
changelog:
  - fall back to Basic auth if Negotiate fails
    Resolves: #1490998
  - handle request-pull when multiple tags point to the same commit
    Resolves: #1192146


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
changelog:
  - Backport fix for CVE-2018-11235
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: wuyou<wuyou88@huawei.com> - 1.8.3.1-14.h1
changelog:
  - Type:cves
  - ID:CVE-2017-14876
  - SUG:restart
  - DESC:unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS com


author: yaoxin<yaoxin23@huawei.com> - 1.8.3.1-14.h6
changelog:
  - Type:cves
  - ID:CVE-2018-17456 CVE-2020-11008
  - SUG:restart
  - DESC:fix CVE-2018-17456 CVE-2020-11008


author: Yanko Kaneti <yaneti@declera.com> - 1.1-5.20130122
changelog:
  - Newer upstream snapshot. Minor upstream rearrangement.
  - Remove checkout script from sources and add to git.
  - Try to actually use the bundled mathml2. Fix warnings.


author: zwx499727 <zhangyujing1@huawei.com> - 2.42.0-1.h1
changelog:
  - Type:bugfix
  - SUG: NA
  - DESC:gnutls Reorder static and const attributes
    Resolves:736809
  - DESC:gnutls Fix a signed unsigned integer comparison
    Resolves:736809
  - DESC:gnutls Add a missing enum value to a switch statemen
    Resolves:736809
  - DESC:tls Fix a leak in GTlsDatabaseGnutls
    Resolves:737106
  - DESC:tls Fix various leaks in the TLS unit tests
    Resolves:737106
  - DESC:gnutls Ensure all private members of GTlsConnectionG
    Resolves:736809


author: gulining <gulining@huawei.com> - 2.42.0-1.h2
changelog:
  - Type:bugfix
  - SUG: NA
  - DESC:tlsconnection plug a small memory leak
  - DESC:tlsoutputstream Use thread safe GWeakRef
    Resolves:735754
  - DESC:tlsinputstream Use thread safe GWeakRef
    Resolves:735754
  - DESC:gnutls Fix leaking GTask on TLS close after implicit
    Resolves:736809
  - DESC:configure test 1 uses to test for string equality
    Resolves:765396
  - DESC:gnutls Prevent cycles when building the certificate 
    Resolves:765317


author: Colin Walters <walters@redhat.com> - 2.36.3-5
changelog:
  - Backport patch to fix gnome-shell lockups
    Resolves: #1030601
  - Backport patch to fix vmtoolsd hangs
    Resolves: #1063789


author: Richard Hughes <rhughes@redhat.com> - 2.42.2-2
changelog:
  - Update to 2.42.2
  - [walters] Switch to autosetup -Sgit for less painful patch management
  - [walters] Actually forward port patches
  - Resolves: #1203755


author: gulining <gulining@huawei.com> - 2.42.2-5.h1
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC:gmain Fix some signed unsigned integer comparisons.patch
    Resolves:#737338
  - DESC:gmain Unref child sources when finalising a GSource.patch
    Related:#737338
  - DESC:docs Add missing get_type reference to gio.types.patch
    Resolves:#738675
  - DESC:Allow hash table destroy notifiers to remove other e.patch
    Resolves:#695082
  - DESC:GApplication ignore help if not handling args.patch
    Resolves:#737869
  - DESC:Guard g_inet_address_mask_equal against invalid inpu.patch
    Resolves:#733338


author: gulining <gulining@huawei.com> - 2.42.2-5.h1
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC:gmain Fix some signed unsigned integer comparisons
    Resolves:#737338
  - DESC:gmain Unref child sources when finalising a GSource
    Related:#737338
  - DESC:docs Add missing get_type reference to gio.types
    Resolves:#738675
  - DESC:Allow hash table destroy notifiers to remove other e
    Resolves:#695082
  - DESC:GApplication ignore help if not handling args
    Resolves:#737869
  - DESC:Guard g_inet_address_mask_equal against invalid inpu
    Resolves:#733338


author: cangyi <cangyi@huawei.com> - 2.42.2-5.h2
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC:gapplication enable help when app has options 
    Resolves:#740157
  - DESC:GSocketClient fix handling of application proxies
    Related:#733876
  - DESC:gio Prevent hang writing to a large GMemoryBuffer
    Resolves:#727988
  - DESC:gio tests Prevent hangs and aborts in socket listene
    Resolves:#712570
  - DESC:GTlsClientConnection loosen the semantics of use ssl
    Resolves:#738633
  - DESC:gio Prevent hang writing to a large GMemoryOutputStr 
    Resolves:#727988


author: Colin Walters <walters@redhat.com> - 2.46.2-3
changelog:
  - Rebase to 2.46.2
  - Backport two additional notable+applicable patches from upstream
    branch
  - Resolves: #1305515


author: lining<euleros@huawei.com> - 2.46.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: update glib2 to 2.46.2 for NetworkManager-1.4.0 needs glib2 >= 2.46.2


author: gulining<gulining1@huawei.com> - 2.50.3-3.h2
changelog:
  - Type:cves
  - ID:CVE-2018-16428 CVE-2018-16429
  - SUG:restart
  - DESC:fix CVE-2018-16428 CVE-2018-16429


author: Carlos O'Donell <carlos@redhat.com> - 2.17-111.h6
changelog:
  - Fix memory leak in ftell for wide-oriented streams (#1323781).
  - Avoid race condition in _int_free involving fastbins (#1313308).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-111.h7
changelog:
  - Fix NULL pointer dereference in stub resolver with unconnectable name
    server addresses (#1323839).


author: gaochong <gaochong4@huawei.com> -2.17-111.h14
changelog:
  - Type:CVE
  - ID:CVE-2017-1000366
  - SUG:NA
  - DESC:heap/stack gap jumping via unbounded stack allocations


author: zhouyi <zhouyi20@huawei.com> -2.17-111.h15
changelog:
  - Type:CVE
  - ID:CVE-2014-9402
  - SUG:NA
  - DESC:A non-standard system configuration ("networks: file dns" 
    in /etc/nsswitch.conf) and possibly a DNS spoofing attack is 
    required to exploit this flaw.


author: gaochong <gaochong4@huawei.com> -2.17-111.h20
changelog:
  - Type:CVE
  - ID:CVE-2014-9761 CVE-2015-8776 CVE-2015-8777 CVE-2015-8778 CVE-2015-8779
  - SUG:NA
  - DESC: A stack overflow vulnerability was found in nan* functions that could 
          cause applications, which process long strings with the nan function, 
  		to crash or, potentially, execute arbitrary code;(CVE-2014-9761)
  		other informations look up CVE-2015-8776 CVE-2015-8777 CVE-2015-8778 CVE-2015-8779.


author: zhangyi <zhangyi79@huawei.com> - 2.17-111.h10
changelog:
  - Type:cves
  - ID:CVE-2016-10228
  - SUG:NA
  - DESC:Fix that conv program can hang when invoked with the -c option


author: gaochong <gaochong4@huawei.com> - 2.17-111.h14
changelog:
  - Type:cves
  - ID:CVE-2017-1000366
  - SUG:NA
  - DESC: heap/stack gap jumping via unbounded stack allocations


author: zhouyi <zhouyi20@huawei.com> - 2.17-111.h15
changelog:
  - Type:cves
  - ID:CVE-2014-7207
  - SUG:NA
  - DESC: The nss_dns implementation of getnetbyname in GNU C Library (aka glibc)
    before 2.21, when the DNS backend in the Name Service Switch configuration is
    enabled, allows remote attackers to cause a denial of service (infinite loop)
    by sending a positive answer while a network name is being process


author: zhangyuyun <zhangyuyun@huawei.com> - 2.17-111.h20
changelog:
  - Type:cves
  - ID:CVE-2014-9761,CVE-2015-8776,CVE-2015-8778,CVE-2015-8779,CVE-2015-8777
  - SUG:NA
  - DESC: fix CVEs
    CVE-2014-9761: Unbounded stack allocation in nan* functions
    CVE-2015-8779: Unbounded stack allocation in catopen function
    CVE-2015-8777: LD_POINTER_GUARD in the environment is not sanitized
    CVE-2015-8778: Integer overflow in hcreate and hcreate_r
    CVE-2015-8776: Segmentation fault caused by passing out-of-range data to strftime()


author: wuyou <wuyou88@huawei.com> -2.17-111.h23
changelog:
  - Type:cves
  - ID:CVE-2017-15670 CVE-2017-15804
  - SUG:reboot
  - DESC:
    CVE-2017-15670: glob: Fix one-byte overflow
    CVE-2017-15804: glob: Fix buffer overflow during GLOB_TILDE unescaping


author: likexin<likexin4@huawei.com> - 2.17-111.h28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix Bug 19282-dl_load_write_lock isn't reinitialised during fork


author: shuna<shuna@huawei.com> - 2.17-111.h30
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix pthread_once for aarch64, backport 36875b06e0ed7f137190b9228bef553adfc338ba from mainline


author: zhangshaoning<zhangshaoning1@huawei.com> - 2.17-111.h33
changelog:
  - Type:cves
  - ID:CVE-2018-6485
  - SUG:restart
  - DESC:Integer overflow in posix_memalign in memalign functions


author: lirongjin<lirongjin@huawei.com> - 2.17-111.h35
changelog:
  - Type:cves
  - ID:CVE-2014-4043 CVE-2015-8982 CVE-2016-4429
  - SUG:restart
  - DESC:fix CVE-2014-4043 CVE-2015-8982 CVE-2016-4429


author: huanghaitao<huanghaitao8@huawei.com> - 2.17-111.h46
changelog:
  - Type:cves
  - ID:CVE-2019-9192 CVE-2018-20796 CVE-2019-1010023
  - SUG:restart
  - DESC: fix CVE-2019-9192 CVE-2018-20796 CVE-2019-1010023


author: liuxueping <liuxueping@huawei.com> - 2.17-111
changelog:
  - Update glibc-rh1032435.patch glibc-rh1165192.patch 
    glibc-rh1183545.patch and remove glibc-hw10000


author: zwx499727 <zhangyujing1@huawei.com> - 2.42.0-1.h1
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: gmmproc added warning when ignored method or signal 
    Resolves:737212
  - DESC: Glib Property Add some documentation
    Resolves:523043
  - DESC: Glib Checksum ChecksumType Remove erroneous document


author: Bala.FA <barumuga@redhat.com> - 3.7.1-10
changelog:
  - fixes bugs bz#1224177 bz#1230513 bz#1240617 bz#1242367 bz#1242423 
    bz#1242543 bz#1242585 bz#1242767


author: Bala.FA <barumuga@redhat.com> - 3.7.1-12
changelog:
  - fixes bugs bz#1027723 bz#1064265 bz#1065651 bz#1134288 bz#1213893 
    bz#1226665 bz#1226817 bz#1229606 bz#1229621 bz#1230532 bz#1232216 bz#1235571 
    bz#1236546 bz#1236672 bz#1236990 bz#1238049 bz#1238071 bz#1239075 bz#1240657 
    bz#1241649 bz#1241761 bz#1243542 bz#1243722 bz#1243886 bz#1244527 bz#1245448 
    bz#1245536 bz#1245542 bz#1245897 bz#1245915 bz#1245919 bz#1246946 bz#1252359 
    bz#1253549


author: Bala.FA <barumuga@redhat.com> - 3.7.1-13
changelog:
  - fixes bugs bz#1224184 bz#1225452 bz#1227759 bz#1228135 bz#1231080 
    bz#1234399 bz#1235971 bz#1236038 bz#1238070 bz#1238111 bz#1238171 bz#1238398 
    bz#1238977 bz#1239021 bz#1240918 bz#1245165 bz#1245636 bz#1245924 bz#1251409 
    bz#1255471 bz#1257007 bz#1247349


author: Bala.FA <barumuga@redhat.com> - 3.7.1-14
changelog:
  - fixes bugs bz#1115367 bz#1232569 bz#1234213 bz#1234610 bz#1241336 
    bz#1241385 bz#1241862 bz#1242803 bz#1245077 bz#1251457


author: Bala.FA <barumuga@redhat.com> - 3.7.1-15
changelog:
  - fixes bugs bz#1253774 bz#1257509 bz#1259221 bz#1259750 bz#1260086 
    bz#1260512 bz#1262236 bz#1262291


author: Johnny Hughes <johnny@centos.org> 3.7.1-16.0.1.el7.centos
changelog:
  - Increment version to change dist tag from .el7_2 to .el7.centos as this
    is a modified centos package.


author: zhangshaoning<euleros@huawei.com> - 3.7.1-16.0.1.h1
changelog:
  - Type:cves
  - ID:CVE-2018-10911
  - SUG:restart
  - DESC:Improper deserialization in dict.c:dict_unserialize() can allow attackers to read arbitrary memory


author: jiangjun<jiangjun34@huawei.com> - 3.7.1-16.0.1.h2
changelog:
  - Type:cves
  - ID:CVE-2018-10904 CVE-2018-10907 CVE-2018-10913 CVE-2018-10914 CVE-2018-10923 CVE-2018-10926 CVE-2018-10927 CVE-2018-10928 CVE-2018-10929 CVE-2018-10930
  - SUG:restart
  - DESC:fix CVE-2018-10904 CVE-2018-10907 CVE-2018-10913 CVE-2018-10914 CVE-2018-10923 CVE-2018-10926 CVE-2018-10927 CVE-2018-10928 CVE-2018-10929 CVE-2018-10930


author: Bala.FA <barumuga@redhat.com> - 3.7.1-9
changelog:
  - fixes bugs bz#1224177 bz#1224610 bz#1230525 bz#1231647 bz#1234725 
    bz#1235121 bz#1239057 bz#1239108 bz#1239317 bz#1240196 bz#1240338 bz#1240925 
    bz#1241048 bz#1241150 bz#1241366 bz#1241830 bz#1241839 bz#1241904 bz#1242046


author: Bala.FA <barumuga@redhat.com> - 3.7.1-8
changelog:
  - fixes bugs bz#1223205 bz#1224177 bz#1228247 bz#1229567 bz#1230513 
    bz#1231635 bz#1231732 bz#1239280 bz#1240168 bz#1240245


author: Tom Callaway <spot@fedoraproject.org> - 8.0.1-1.20121218git6eef979
changelog:
  - update to 8.0.1 (git checkout from 20121218)
  - update xdriinfo to 1.0.4
  - remove non-free files (bz892925)


author: Adam Jackson <ajax@redhat.com> 8.1.0-2
changelog:
  - Copy glxinfo to glxinfo%{__isa_bits}, to allow people to check that their
    compatibility drivers are working.


author: Jakub Filak <jfilak@redhat.com> 0.3.0-1
changelog:
  - Do not include url files twice
  - Get rid of Stock Items usage
  - Do not remove invalid problems while sorting the list
  - Check if X display can be opened
  - Fix a condition in the source changed notification handler
  - Update Translations
  - Skip inotify events for sub folders in dump location watcher
  - Use GLib.io_add_watch() instead of IOChanell.add_watch()
  - Fix a typo in macro name
  - Remove shebang from non-executable scripts
  - Remember missing elements and load them only once
  - Download more problem elements in a single D-Bus call
  - Improve data caching
  - Display two sets of problems (My/System)
  - Fix typo in dbus error message
  - Don't crash if a new directory problem is invalid
  - Resolves: #956912, #973125, #967499


author: Jakub Filak <jfilak@redhat.com> 0.3.1-1
changelog:
  - Improve user experience
  - Make About dialog transient for the main window
  - Add AppData file
  - Ship the 256x256 icon in the right place
  - Recover from fork errors
  - Add ABRT configure application menu
  - Use absolute path in python shebang
  - Recover from invalid time stamp values
  - Use wrapped text for the bug report link
  - Resolves: #994749, #995337, #995868, #1005472


author: Jakub Filak <jfilak@redhat.com> 0.3.4-1
changelog:
  - Do not use deprecated GObject API
  - Make gnome-abrt compatible with Python GObject < 3.7.2
  - Do not fail if there is no Problem D-Bus service
  - Make all labels selectable
  - Run xdg-open for problem directory nonblocking
  - Fix translations (rhbz#1044241)
  - Make problem list resizable
  - Make info about Reported state of problem more clear
  - Remove message about missing Bugzilla ticket
  - Fix a bug in SIGCHLD handler causing 100% CPU usage
  - Show "yes" in Reported field only if no URL is available
  - Load only the most recent reported to value
  - Check if Application has valid name in filter fn
  - Fix issues found by new pylint
  - Related: #1044241
  - Resolves: #1044569


author: Jakub Filak <jfilak@redhat.com> - 0.3.4-3
changelog:
  - Select multiple records to delete in gnome-abrt
  - Do not crash when a FileIcon can't be loaded
  - Resolves: #1048120, #1054089


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.3-10
changelog:
  - Set volume capacity in correct units (related: #1049316).
  - Refresh volume info after resize (related: #1049316).


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.3-11
changelog:
  - Don't hang on failure to handle a URL (related: #1046251).
  - Handle paths as well (related: #1046251).
  - Handle local paths to remote files (related: #1046251).


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.2-7
changelog:
  - Add missing resource files (related: #1028079).
  - Don't ignore removal of src/resources.c (related: #1028079).


author: zhangyi <zhangyi79@huawei.com> - 3.14.1-2.h1
changelog:
  - Type:recommended
  - SUG:NA
  - DESC:Add "fix-do-not-merge-xml-translation-in-gschema-files.patch" to fix
         that " Only one <summary> element allowed inside <key>.  --strict was specified; exiting. "


author: Richard Hughes <rhughes@redhat.com> - 3.8.2-3
changelog:
  - Do not build the clutter support to allow us to drop two deps
    now unsuitable for RHEL.
  - Resolves: #1025270


author: gulining <gulining@huawei.com> - 3.14.2-2.h1
changelog:
  - Type:bugfix
  - SUG: NA
  - DESC: thumbnail Fix a code path where the mutex is never u
  - DESC: GnomeRROutputInfo plug some memory leaks
  - DESC: languages plug memory leaks


author: Debarshi Ray <rishi@fedoraproject.org> - 3.8.5-8
changelog:
  - Fix the patch to preview encrypted PDFs
  - Fix the patch to protect against spurious view-as signals
    Resolves: #959175


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.2-8
changelog:
  - Remove patch 'daemon: Exit gnome-keyring-daemon when the DBus connection
    closes' (related: rhbz#1030671).


author: zwx499727 <zhangyujing1@huawei.com> - 3.14.0-1.h1
changelog:
  - Type:bugfix
  - SUG: NA
  - DESC:ssh agent Fix leak in remove_by_public_key
    Resloves:738508
  - DESC:ssh agent Fix leak in op_v1_request_identities
    Resloves:738508
  - DESC:ssh agent Fix leak in op_request_identities
    Resloves:738508
  - DESC:Unref GkmCredential secret in dispose
    Resloves:738508
  - DESC:gkm gnome2 file Fix leak in validate_buffer
    Resloves:738508
  - DESC:gkm gnome2 file Fix leaks in create_cipher
    Resloves:738508
  - DESC:Free GkmSecretItem schema in finalize
    Resloves:738508
  - DESC:test dbus items Fix memory leak
    Resloves:738508
  - DESC:egg cleanup Don t leak cleanup on unregister
    Resloves:738508
  - DESC:egg test dn Don t leak GBytes created in test_dn_val
    Resloves:738508
  - DESC:gkm data asn1 Unref buffer we got from egg_asn1x_get
    Resloves:738508
  - DESC:test data asn1 Fix memory leaks in test_asn1_integer
    Resloves:738508
  - DESC:test data der Fix various memory leaks
    Resloves:738508
  - DESC:gkm gnome2 file Free keys to entries hash tables
    Resloves:738508
  - DESC:test startup Use g_strfreev to free GStrv variable
    Resloves:738508
  - DESC:test asn1 Don t leak asn in test_create_quark
    Resloves:738508
  - DESC:test padding Don t leak egg_padding_pkcs1_pad_02 ret
    Resloves:738508
  - DESC:test pam Fix GError leak in error case
    Resloves:738508
  - DESC:test secret Don t leak new secrets in test_equal
    Resloves:738508
  - DESC:test sexp Fix 2 leaks
    Resloves:738508
  - DESC:egg asn1x Fix memory leak in egg_asn1x_set_any_raw
    Resloves:738508
  - DESC:egg hkdf Fix gcry_md_ht_t leak in egg_hkdf_perform
    Resloves:738508
  - DESC:test import Don t leak args.pReserved
    Resloves:738508
  - DESC:secret store test Don t leak secret data memory
    Resloves:738508
  - DESC:gkm gnome2 storage Unref GkmGnome2Storage login in d
    Resloves:738508
  - DESC:gkm secret search Fix leak in factory_create_search
    Resloves:738508
  - DESC:gkm secret textual Fix leak in generate_attribute
    Resloves:738508
  - DESC:Fix leak in mock_secret_C_CreateObject
    Resloves:738508
  - DESC:gkm xdg assertion Fix leak in factory_create_asserti
    Resloves:738508
  - DESC:Fix leak in gkm_mock_C_SetPIN
    Resloves:738508
  - DESC:xdg Don t leak ref in lookup_or_create_assertion_key
    Resloves:738508
  - DESC:test xdg module Fix memory leak
    Resloves:738508
  - DESC:Unref GkmXdgTrust bytes in finalize
    Resloves:738508
  - DESC:test xdg trust Fix GChecksum leaks
    Resloves:738508
  - DESC:xdg Remove wrong unref in gkm_xdg_trust_replace_asse
    Resloves:738508
  - DESC:xdg Fix ref leak in remove_assertion_from_trust
    Resloves:738508
  - DESC:test spawn Fix leaks of EchoData content
    Resloves:738508
  - DESC:GkmMock Fix handling of CKA_G_CREDENTIAL_TEMPLATE at
    Resloves:738508
  - DESC:Free GkdSecretService alias_directory in finalize
    Resloves:738508
  - DESC:GkdGpgAgent Unref GIOChannel when no longer needed
    Resloves:738508
  - DESC:Don t leak password in login_prompt_do_ specific use
    Resloves:738508
  - DESC:Don t leak password data in gkm_wrap_prompt_do_crede
    Resloves:738508
  - DESC:daemon Fix GStrv leak in DBus message handler
    Resloves:738508
  - DESC:asn1x Sanitize use of asn1_set_value asn1_take_value
    Resloves:738508


author: zhangwenlong<zhangwenlong13@huawei.com> - 3.14.0-1.h2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Eliminate difference in etc/xdg/autostart/gnome-keyring-gpg.desktop betwen i686 and x86


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.4-2
changelog:
  - Use newer WebKit
  - Refresh the credentials during startup and network changes
  Resolves: #1174600, #1189888


author: Jian Zhang <zhangjian94@huawei.com> - 3.14.4-3.h1
changelog:
  - Type:bugfix
  - SUG:rboot
  - DESC: build: Fix the wrong variable name 
    Resolves: #750479
  - DESC: daemon: Fix leak in process_config_entries
    Resolves: #752939
  - DESC: providers: Fix JsonParser leaks
    Resolves: #752939
  - DESC: Don't leak account in GoaMediaServerProvider::build_object()
    Resolves: #752939
  - DESC: owncloud: Fix 'documents' leak in ::build_object()
    Resolves: #752939
  - DESC: telepathy: Don't leak local GError after showing it
    Resolves: #756759
  - DESC: provider: Fix GoaProviderFactory leak 
    Resolves: #756759
  - DESC: imap-smtp: Fix typo in error message
    Resolves: #755316
  - DESC: smtp-auth: Plug leaks in error handling 
    Resolves: #758361
  - DESC: mail-auth: We want check_cancellable, not handle_cancellation
    Resolves: #758361


author: Richard Hughes <rhughes@redhat.com> - 3.14.3-3
changelog:
  - Re-apply the fix "Change the UI policy to show the comps tree" as it was
    lost in the rebase process.
  - Resolves: #1174550


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.28.1-6
changelog:
  - Fix missing deps in -gnome and -bonobo subpkg (#689836).
    gnome-python2-gnome should "Requires: gnome-python2-bonobo"
    gnome-python2-bonobo should "Requires: gnome-python2-canvas"


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.28.1-7
changelog:
  - Drop unused/ancient -capplet subpackage definition remains.
  - Add %?_isa to all explicit dependencies on package names.
  - Make pygtk2 dependency arch-specific (#749835).


author: Colin Walters <walters@verbum.org> - 2.28.1-12
changelog:
  - Drop requires on bonobo-activation, since it is the same as libbonobo,
    but that package dropped the provides.


author: Hang Tian <tianhang1@huawei.com> 3.14.4-9.h1
changelog:
  - Type:bugfix
   - SUG:rboot
   - DESC: power: Save last requested idle mode while temporarily unidle
     Resoves: #748849
   - DESC: device-mapper: Reset the "display" setting on NULL outputs
     Resoves: #749844
   - DESC: wacom: Read settings after connecting to changed::
     Resoves: #753170
   - DESC: xsettings: Read settings after connecting to changed::
     Resoves: #753170
   - DESC: datetime: Read settings after connecting to changed::
     Resoves: #753170
   - DESC: wacom: Fix hot(un)plug related crashes
     Resoves: #765996
   - DESC: wacom: Fix memory leaks


author: gulining <gulining@huawei.com> 3.14.4-9.h2
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: trash not clear garbage ontime

   * Wed May 10 2017 Hang Tian <tianhang1@huawei.com> 3.14.4-9.h1
   - Type:bugfix
   - SUG:rboot
   - DESC: power: Save last requested idle mode while temporarily unidle
     Resoves: #748849
   - DESC: device-mapper: Reset the "display" setting on NULL outputs
     Resoves: #749844
   - DESC: wacom: Read settings after connecting to changed::
     Resoves: #753170
   - DESC: xsettings: Read settings after connecting to changed::
     Resoves: #753170
   - DESC: datetime: Read settings after connecting to changed::
     Resoves: #753170
   - DESC: wacom: Fix hot(un)plug related crashes
     Resoves: #765996
   - DESC: wacom: Fix memory leaks


author: Ray Strode <rstrode@redhat.com> 3.14.4-30
changelog:
  - Another timed login update.  Makes the indicator work
    when animations are disabled.
    Related: #1252424


author: Ray Strode <rstrode@redhat.com> 3.14.4-35
changelog:
  - Ensure the unlock password entry is desensitized when there's
    no password being asked for (Such as when the message is just
    "Please insert smartcard")
    Resolves: #1262999


author: cwx519943<cangyi@huawei.com> - 3.14.4-37.h2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:loginDialog reset greeter proxy on auth prompt reset
      Normally when a user uses the login screen to log in, the
      login screen gets killed and the user session takes over
      the display.
      This doesn't happen for wayland sessions, though. Instead,
      the login screen gets reset, and the wayland session is started
      on another VT.
      The greeter proxy object needs to be recreated after this reset,
      since it's associated with state no longer coupled to the login
      screen after the reset.
      This commit moves greeter proxy creation to happen at reset time.


author: Kalev Lember <klember@redhat.com> - 3.14.7-1
changelog:
  - Update to 3.14.7
  - Show installation progress when installing apps
  - Fix incomplete Japanese translations
  - Show a new notification when security updates remain unapplied
  - Resolves: #1237181, #1055643, #1136954


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.3-1
changelog:
  - Update to 3.14.3
  - Drop the appdata-tools BR from RHEL
  - Add BRs on vala-devel, vala-tools and yelp-tools to generate the build
    scripts
  - Resolves: #1174726, #1180775


author: Hans de Goede <hdegoede@redhat.com> - 0.4.0-4
changelog:
  - Drop Requires for gstreamer-plugins, as we may be used with both
    gstreamer-0.10 and 1.0. Instead apps using gnome-video-effects should add
    the necessary Requires themselves


author: zhangwenlong<zhangwenlong13@huawei.com> - 0.4.1-1.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Multi-process compilation changed to single process compilation


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.22-4
changelog:
  - allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
  - do not abort when missing hash algorithm in FIPS mode (#1078962)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9
changelog:
  - Amended fix for FIPS enforcement issue (#1163848)
  - Fixed issue with applications that close all file descriptors (#1165047)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11
changelog:
  - Applied fix for urandom FD in FIPS140 mode (#1165047)
  - Applied fix for FIPS140-2 related regression (#1110696)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13
changelog:
  - Corrected reseed and respect of max_number_of_bits_per_request in 
    FIPS140-2 mode. Also enhanced the initial tests. (#1228199)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1
changelog:
  - Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
  - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
  - When writing certificates to smart cards write the CKA_ISSUER and
    CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
  - Use the shared system certificate store (#1110750)
  - Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
    CVE-2015-7575)
  - Allow hashing data over 2^32 bytes (#1306953)
  - Ensure written PKCS#11 public keys are not marked as private (#1339453)
  - Ensure secure_getenv() is called on all uses of environment variables
    (#1344591).
  - Fix issues related to PKCS #11 private key listing on certain HSMs
    (#1351389)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7
changelog:
  - Address interoperability issue with 3.5.x (#1388932)
  - Reject CAs which are both trusted and blacklisted in trust module (#1375303)
  - Added new functions to set issuer and subject ID in certificates (#1378373)
  - Reject connections with less than 1024-bit DH parameters (#1335931)
  - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
  - Mention limitations of certtool in manpage (#1375463)
  - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
  - Do not link directly to trousers but instead use dlopen (#1379739)
  - Fix incorrect OCSP validation (#1377569)
  - Added support for pin-value in PKCS#11 URIs (#1379283)
  - Added the --id option to p11tool (#1399232)
  - Improved sanity checks in RSA key generation (#1444780)
  - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
    CVE-2017-7869


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9
changelog:
  - Address crash in OCSP status request extension, by eliminating the
    unneeded parsing (CVE-2017-7507, #1455828)


author: zhangshaoning<euleros@huawei.com> - 3.3.26-9.h1
changelog:
  - Type:cves
  - ID:CVE-2018-10844
  - SUG:restart
  - DESC:HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls


author: xuyang<xuyang94@huawei.com> - 3.3.26-9.h2
changelog:
  - Type:cves
  - ID:CVE-2018-10845
  - SUG:restart
  - DESC:HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant
    patch from https://gitlab.com/gnutls/gnutls/commit/cc14ec5ece856cb083d64e6a5a8657323da661cb


author: zhangyi <zhangyi79@huawei.com> - 3.3.8-14.h1
changelog:
  - Type:cves
  - ID:CVE-2016-8610
  - SUG:NA
  - DESC:A denial of service flaw was found in the way
         the TLS/SSL protocol defined processing of
         ALERT packets during a connection handshake.
         A remote attacker could use this flaw to make
         a TLS/SSL server consume an excessive amount
         of CPU and fail to accept connections form other clients.


author: zhangyi <zhangyi79@huawei.com> - 3.3.8-14.h2
changelog:
  - Type:cves
  - ID:CVE-2017-7869
  - SUG:NA
  - DESC:Out-of-bounds write related to the cdk_pkt_read function (GNUTLS-SA-2017-3)


author: Jakub Čajka <jcajka@redhat.com> - 1.8.3-1
changelog:
  - bump to 1.8.3
  - fix CVE-2017-8932
  - Resolves: rhbz#1452616, rhbz#1452241, rhbz#1457169, rhbz#1448346


author: QiXie<xieqi10@huawei.com> - 1.8.3-1.2.1.h4
changelog:
  - Type:security
  - ID:CVE-2018-16873 CVE-2018-16874 CVE-2018-16875
  - SUG:restart
  - DESC:Fix for CVE-2018-16873 CVE-2018-16874 CVE-2018-16875


author: Pravin Satpute <psatpute@redhat.com> - 20130807-1
changelog:
  - Resolves: rh#1023312 Upstream new release of 20130807 tarball.
  - Packages unhinted upstream tarball.
  - This pulled fonts for number of missing Unicode scripts in Fedora


author: Miroslav Rezanina <mrezanin@redhat.com> 2.4-2
changelog:
  - gperf-allow-customizing-trace-filename.patch [bz#1232702]
  - Resolves: bz#1232702
    (gperftools: tcmalloc debug version uses hard-coded path /tmp/google.alloc)


author: Simon Lukasik <slukasik@redhat.com> - 1.3.0-6
changelog:
  - Resolve multilib conflict of gpgme-config (#341351)
  - Resolve multilib conflict of gpgme.h (#341351)


author: Tomas Mraz <tmraz@redhat.com> - 1.3.2-1
changelog:
  - new upstream version
  - re-enable gpg tests (original patch by John Morris <john@zultron.com>)
  - quiet configure warning 'could not find g13'
  - there is no libgpgme-pth anymore


author: Jaromir Capik <jcapik@redhat.com> - 1.20.6-29
changelog:
  - Removing OPTFLAGS
  - Introducing full RELRO
  - Missing header dir in Makefile.in / depend
  - Fixing UsrMove for i686 (mv -f says 'directory not empty')


author: Till Maas <opensource@till.name> - 1.2.4-4
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Caolán McNamara <caolanm@redhat.com> - 1.3.10-1
changelog:
  - Resolves: rhbz#1472290
    CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774
    CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 CVE-2017-7778


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-13
changelog:
  - Fixed multilib conflicts
    Rewrote lefty IO lib to use getaddrinfo instead of gethostbyname
    (by lefty-getaddrinfo patch)
    Resolves: rhbz#881173


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-17
changelog:
  - Prevent possible buffer overflow in yyerror()
    Resolves: CVE-2014-1235
  - Fix possible buffer overflow problem in chkNum of scanner
    Resolves: CVE-2014-1236


author: liuxueping<liuxueping1@huawei.com> - 2.30.1-19.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:set changeless return value to avoid the differences of .so file,
         no use the calculation of time function,because it is random


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14-4
changelog:
  - Added group-separator, no-group-separator options decription
  - Aligned output of built-in help
  - Defuzzified gnulib-tests-rm-f patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1217080
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#1159012
  - Documented --fixed-regexp option
    Resolves: rhbz#1103259
  - Updated pcre buildrequires to require pcre-devel >= 7.8-7
    Related: rhbz#1217080


author: Bastien Nocera <bnocera@redhat.com> 0.2.14-6
changelog:
  - Enable a number of missing plugins
  Related: #1184200
  - Disable blip.tv plugin as service has now closed
  - Add patch to downgrade the gom requirements
  - Port back local-metadata plugin to libmediaart-1.0


author: Jan Vcelak <jvcelak@redhat.com> 1.22.1-1
changelog:
  - new upstream release (#890973)
    + various fixes in manual pages
    + various fixes and improvements in macros
    + new gropdf driver for generating PDF files
  - fix: backslash-period escape does not work (#682857)
  - fix: groff ftbfs - patch does not apply (#885225)


author: linyan <linyanly.lin.huawei.com> - 2.02-0.17
changelog:
  - This patch 0001-Mod-EFI-GRUB_DISK_CACHE_BITS-to-11.patch lead to boot efi fail in x86_64, so remove it in euler_2.1.


author: edony <zhoupengchen@huawei.com> - 2.02-0.33.h1
changelog:
  - Type:security
  - SUG:reboot
  - DEC:New security feature to enable grub2 to support trusted computing


author: chenchunxiao <chenchunxiao@huawei.com> - 2.02-0.33.h2
changelog:
  - Type:enhance
  - SUG:reboot
  - DEC:Updte for better aarch64 support.1)fix cdcrom support problem;2)support D05 new BIOS firmware (v1.22+).


author: Peter Jones <pjones@redhat.com> - 2.02-0.11
changelog:
  - Fix grub2 segfault when root isn't set.
    Resolves: rhbz#1084536
  - Make the aarch64 loader be SB-aware.
    Related: rhbz#1100048
  - Enable regexp module
    Resolves: rhbz#1125916


author: Peter Jones <pjones@redhat.com> - 2.02-0.60
changelog:
  - Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
    exists.  This is also why the bug we fixed in 0.59 showed up at all.
    Resolves: rhbz#1443809
    Resolves: rhbz#1442970
  - Fix a regexp problem where rpm spec parser un-escapes things that
    don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
    to fail.
    Related: rhbz#1443809


author: Peter Jones <pjones@redhat.com> - 2.02-0.61
changelog:
  - Fix some minor ia32 booting bugs
    Related: rhbz#1310763
    Related: rhbz#1411748
    Related: rhbz#1300009
  - Add support for non-Ethernet network cards
    Related: rhbz#1232432
  - Add support for http booting
    Resolves: rhbz#1232432
  - Fix efi module subpackage obsoletes/provides
    Resolves: rhbz#1447723
  - Make ppc modules subpackages use different directories on the filesystem.
    Resolves: rhbz#1455243


author: edony <zhoupengchen@huawei.com> - 2.20-0.64.h2
changelog:
  - Type:security
  - SUG:reboot
  - DEC:backport (New security feature to enable grub2 to support trusted computing)


author: shuna<euleros@huawei.com> - 2.20-0.64.h2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:update grub2 for shim-signed-12 and and solve this problem from the 2.5 sync code


author: chentongbiao<euleros@huawei.com> - 2.20-0.64.h3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:commit Add-support-for-non-Ethernet-network-cards  introduced support for larger network hw addresses.
         However, grub_net_hwaddr_to_str() relies on GRUB_NET_MAX_STR_ADDRESS_SIZE
         to prevent a spurious ':' at the end of the string. So now, if actual
         hwaddr size is less than max, an extra ':' appears at the end of the
         string. So calculate max string size based on actual hwaddr length to
         fix the problem.


author: zhengshaoyu<zhengshaoyu@huawei.com> - 2.20-0.64.h7
changelog:
  - Type:cves
  - ID:CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707
  - SUG:restart
  - DESC:fix CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707


author: tangxiaolan<tangxiaolan9@huawei.com> - 2.20-0.64.h9
changelog:
  - Type:cves
  - ID:bugfix
  - SUG:restart
  - DESC:revert patch for CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15706 CVE-2020-15707


author: Peter Jones <pjones@redhat.com> - 8.28-8
changelog:
  - Fix crash when config file doesn't match command line.
    Related: rhbz#1070646
  - Make crashes work with abrt better.
    Resolves: rhbz#1070646


author: Peter Jones <pjones@redhat.com> - 8.28-10
changelog:
  - Use the correct load commands for aarch64 efi.
    Resolves: rhbz#1081269
  - Support "devicetree" directive in grub2.
    Resolves: rhbz#1063534
  - Explain the default bootloaders and configuration paths slightly better
    in the manual.
    Resolves: rhbz#1001664
  - Conditionally create debug entries when installing kernels.
    Resolves: rhbz#957681
  - Make sure --banner from the command line is used correctly.
    Resolves: rhbz#1032048


author: Peter Jones <pjones@redhat.com> - 8.28-11
changelog:
  - Fix a memory corruption issue we're hitting on s390/s390x
    Resolves: rhbz#1152152
  - Don't use spaces on zipl platforms to describe debugging entries
    Related: rhbz#1152152


author: Peter Jones <pjones@redhat.com> - 8.28-12
changelog:
  - Do a better job recognizing "title" and "default" position and formatting
    on extlinux
    Resolves: rhbz#1200045
  - Do a better job recognizing stanza names and defaults on grub1 and grub2
    Related: rhbz#1142545
  - (reordered some patches to match the ordering in master)
    Related: rhbz#1200045
    Related: rhbz#1142545
  - Add test suite coverage and minor fixes related to zipl and
    --default-{kernel,index,title}
    Related: rhbz#1184014
  - Use systemd debug options that work on RHEL 7
    Resolves: rhbz#1212128


author: Peter Jones <pjones@redhat.com> - 8.28-14
changelog:
  - Handle "set variable" commands separately from other parsing in grubby's
    GetNextLine()
    Resolves: rhbz#1152550


author: Peter Jones <pjones@redhat.com> - 8.28-17
changelog:
  - Fix the ordering of creating the debug entries, so they don't get picked
    when we're choosing kernel command line defaults on upgrades.
    Related: rhbz#1212128


author: Roland Mainz <rmainz@redhat.com> 0.4.1-0
changelog:
  - Rebase gssproxy to 0.4.1 per bug #1132389 ("[RFE] Rebase
    gssproxy to the latest to match expectations of other
    projects").


author: Roland Mainz <rmainz@redhat.com> 0.4.1-1
changelog:
  - Add patch to remove -fno-strict-aliasing (gssproxy ticket #140,
    a dependicy for the fix for bug #1092515 (see below))
  - Add patch to fix bug #1092515 ("gssproxy - PIE and RELRO check")


author: Roland Mainz <rmainz@redhat.com> 0.4.1-2
changelog:
  - The following bugs have been fixed by the rebase to 0.4.1
    in bug ("[RFE] Rebase gssproxy to the latest to match
    expectations of other projects"):
    - Bug #1196371 ("rpc.gssd segfaults in gssproxy (proxymech.so)")
      Upstream tickets { #137, #144 }
    - Bug #1053730 ("KrbLocalUserMapping does not work with
      Apache & GSS-Proxy")
      Upstream ticket #101
    - Bug #1168962 ("gssproxy is not working with httpd on ppc64 and s390x")
      Upstream ticket #146


author: Roland Mainz <rmainz@redhat.com> 0.4.1-3
changelog:
  - Bug #1213852 ("[gssproxy] NFS clients cannot mount with
    sec=krb5 if the NFS server is running gssproxy") was
    fixed by the rebase to 0.4.1 in bug ("[RFE] Rebase
    gssproxy to the latest to match expectations of other
    projects").
    Note that the same bug was also fixed in the kernel with
    "9507271 svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT
    decoding failures" (see
    https://bugzilla.redhat.com/show_bug.cgi?id=1213852#c2
    and RH Bug #1120860 ("[NFS] NFS clients cannot mount with
    sec=krb5 if the NFS server is running gssproxy")) to
    handle various corner cases not covered by gssproxy,
    for example individual krb5 ticket fields exceeding
    the kernel's buffer size.


author: Roland Mainz <rmainz@redhat.com> 0.4.1-6
changelog:
  - Remove extra whitespaces from #1208640/#1194299 patches
  - spec file cleanup
  related: #1208640 #1194299


author: Colin Walters <walters@verbum.org> 0.10.23-17
changelog:
  - Hack the gtk-doc to remove plugin docs that are not shipped
  - Drop mythtv, opencv sources that are no longer buildable


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-21
changelog:
  - Remove insecure NSF plugin
  - vmncdec: Sanity-check width/height before using it
  Resolves: rhbz#1400838


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-22
changelog:
  - h264parse: Ensure codec_data has the required size when reading number of SPS
  Resolves: rhbz#1400838


author: Hans de Goede <hdegoede@redhat.com> - 0.10.31-3
changelog:
  - v4l2: Don't probe UVC devices for being interlaced, this saves seconds when
    starting a pipeline with a v4l2 element (rhbz#797188, gnome#677722)


author: zhangyi <zhangyi79@huawei.com> - 0.10.31-12
changelog:
  - Type:cves
  - ID:CVE-2016-9636 CVE-2016-9635 CVE-2016-9634
       CVE-2016-9808 CVE-2016-9807
  - SUG:NA
  - DESC:Heap buffer overflow in FLIC decoder


author: Wim Taymans <wtaymans@redhat.com> - 1.4.5-6
changelog:
  - Fix h264 and h265 buffer size checks
  - Fix mpegts pat parsing and add more size checks
  Resolves: rhbz#1400898


author: Wim Taymans <wtaymans@redhat.com> - 1.4.5-6
changelog:
  - Fix h264 and h265 buffer size checks
  - Fix mpegts pat parsing and add more size checks
  Resolves: rhbz#1400897


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.0-1
changelog:
  - Update to 0.7.0 release (rhbz #1416783)
  - Release held keys when loosing focus (rhbz #921008)
  - Avoid warnings when disconnecting (rhbz #1126825)
  - Workaround to avoid hang connecting to SPICE guest (rhbz #921330)
  - CVE-2017-5884 - fix bounds checking for RRE, hextile and
    copyrect encodings (rhbz #1425367)
  - CVE-2017-5885 - fix color map index bounds checking (rhbz #1425367)


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.0-2
changelog:
  - Fix reserved data size (rhbz #1416783)
  - Fix inverted args in tests (rhbz #1416783)	  
  - Avoid sign extension problems (rhbz #1416783)
  - Fix crash with opening via GSocketAddress (rhbz #1416783)
  - Fix crash & error reporting during connection timeout (rhbz #1441120)
  - Fix incompatibility with libvncserver websockets (rhbz #921330)


author: Matthias Clasen <mclasen@redhat.com> 3.14.13-8
changelog:
  - Don't emit warnings for 'new' deprecations by default
  - Disable GtkMenuButton if the associated action says so
  Resolves: #1210747
  Resolves: #1223463


author: Milan Crha <mcrha@redhat.com> - 4.8.5-2
changelog:
  - Add patch for RH bug #1255831 (Crash under html_text_get_link_at_offset())
  - Add patch for RH bug #1255826 (Images are not displayed in gtkhtml-editor-test)


author: Kalev Lember <kalevlember@gmail.com> - 2.24.2-1
changelog:
  - Update to 2.24.2
  - Removed mm-common buildrequire which is no longer needed for tarball builds
  - Cleaned up the spec file for modern rpmbuild


author: Matthew Barnes <mbarnes@redhat.com> - 2.0.16-1.fc13
changelog:
  - Update to 2.0.16
  - No need to run libtoolize and autoreconf.
  - Remove language comparison patch (fixed upstream).


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.10.2-1
changelog:
  - 0.10.2 release
  - http://ftp.gnome.org/pub/GNOME/sources/gupnp-dlna/0.10/gupnp-dlna-0.10.2.news

   * Wed Apr 10 2013 Peter Robinson <pbrobinson@fedoraproject.org> 0.10.1-1
  - 0.10.1 release
  - http://ftp.gnome.org/pub/GNOME/sources/gupnp-dlna/0.10/gupnp-dlna-0.10.1.news


author: Tim Waugh <twaugh@redhat.com> - 5.2.9-17
changelog:
  - More fixes for bug #948967:
    - Supply man page for gutenprint-foomaticupdate.
    - Link to cups-genppd(8) man page from cups-genppd.5.2(8).


author: Ondrej Holy <oholy@redhat.com> - 1.22.4-1
changelog:
  - Update to 1.22.4
  - Remove obsolete upstream patches
  - Add translations updates from upstream
  - Resolves: #1174716


author: Michal Luscon <mluscon@redhat.com> 1.5-1
changelog:
  - New upstream version
  - Removed gzip-1.3.9-stderr.patch
  - Removed gzip-1.3.10-zgreppipe.patch
  - Removed gzip-1.3.13-noemptysuffix.patch


author: Petr Stodulka <pstodulk@redhat.com> - 1.5-8
changelog:
  - Gzip overwrite existing files when user choose "no" on yes/no question.
    It's due to wrong dupicit declaration of yesno() function in gzip.h
    which is compiled wrong with -O2 option.
    Resolves: rhbz#1201689


author: lansheng<lansheng@huawei.com> - 0:1.3-6.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add getMethods_sort.patch,for eliminate class file differences


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-11
changelog:
  - don't use mmap(2) to avoid failures on i386 with 1GB files and larger (#672917)
  - fix package URL (#676962)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-12
changelog:
  - fix possible buffer overflows, integer overflows (CVE-2011-3630 CVE-2011-3631 CVE-2011-3632)
  - update man page


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-14
changelog:
  - do not allow to hardlink files across filesystems by default (#786719)
    (use -f option to override)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.4-3
changelog:
  - PIDFile should be stored at /run instead of the default location /var/run 
  - There is  long term plan that directory /var/run will not further exist in the future Fedora versions
  - Asked upstream to add -p <PID_FILE_location> switch to influence the location of the PID File
  - Set PIDFile=/var/run/haveged.pid This is needed as long -p option is not implemented
  - https://bugzilla.redhat.com/show_bug.cgi?id=770306#c10


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.5-1
changelog:
  - Update to the version 1.5
  - Main new feature is a run time verification of the produced random numbers
  - PIDFILE set to /run/haveged.pid
  - converted README and man page to UTF-8. Informed the upstream to fix it.


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.5-2
changelog:
  - BZ 850144
  - Introduce new systemd-rpm macros in haveged spec file
  - Fedora 19 changes the way how to work with services in spec files. 
  - It introduces new macros - systemd_post, systemd_preun and systemd_postun; 
  - which replace scriptlets from Fedora 18 and older
  - see https://fedoraproject.org/wiki/Packaging:ScriptletSnippets#Systemd


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.8-1
changelog:
  - Unversioned docdir change, more info on 
    https://fedoraproject.org/wiki/Changes/UnversionedDocdirs


author: Aleš Kozumplik <ales@redhat.com> - 0.5.1-1
changelog:
  - pool_split_evr() assert if we hit unexpected data. (Related:RhBug:1141634) (Ales Kozumplik)
  - README: changed references to new repo location (Jan Silhan)
  - iutil-py: removed pyseq_to_packagelist function (Jan Silhan)
  - improved performance of python sequence iteration (RhBug:1109554) (Jan Silhan)
  - reldep: constructor accepts unicode strings (RhBug:1124968) (Jan Silhan)
  - Fix pool_split_evr's handling of EVRs without releases. (Radek Holy)
  - added sha512 support (RhBug:1082658) (Jan Silhan)
  - cosmetic: removed unneeded semicolon (Jan Silhan)
  - goal: does not raise exception on empty selector (Related:RhBug:1127206) (Jan Silhan)


author: Jan Silhan <jsilhan@redhat.com> - 0.5.3-1
changelog:
  - README: made readthedoc documentation official (Jan Silhan)
  - sack: deprecation of create_cmdline_repo (Jan Silhan)
  - does not break Sack.__init__ API from 8ce3ce7 (Jan Silhan)
  - doc: document the new logdir parameter of Sack.__init__. (Radek Holy)
  - New version: 0.5.3 (Jan Silhan)
  - apichange: sack: added optional param logdir (Related:RhBug:1175434) (Jan Silhan)
  - apichange: py: rename: Sack.cache_path -> Sack.cache_dir (Radek Holy)
  - doc: add Sack to the Python API reference manual. (Radek Holy)
  - cosmetic: autopep8 applied on __init__.py (Jan Silhan)
  - query: support multiple flags in filter (RhBug:1173027) (Jan Silhan)
  - packaging: make the spec file compatible with GitHub packaging guideliness. (Radek Holy)
  - New version: 0.5.2 (Michal Luscon)
  - hy_chksum_str() returns NULL in case of incorrect type (Michal Luscon)
  - Fix defects found by coverity scan (Michal Luscon)
  - selector: allow selecting provides with globs (RhBug: 1148353) (Michal Luscon)
  - py: nevra_init() references possibly uninitialized variable. (Ales Kozumplik)
  - package: add weak deps attributes. (Ales Kozumplik)


author: Jan Silhan <jsilhan@redhat.com> - 0.5.3-2
changelog:
  - bumped release to be greater than f21 release
  - Add Peter to Authors (Peter Hjalmarsson)
  - Add support for armv6hl (Peter Hjalmarsson)


author: Michal Luscon <mluscon@redhat.com> 0.5.4-1
changelog:
  - setup tito to bump version in VERSION.cmake (Michal Luscon)
  - initialize to use tito (Michal Luscon)
  - prepare repo for tito build system (Michal Luscon)
  - New version 0.5.4 (Michal Luscon)
  - goal: implement methods for optional installation (RhBug:1167881) (Michal Luscon)
  - setup tito to bump version in VERSION.cmake (Michal Luscon)
  - initialize to use tito (Michal Luscon)
  - prepare repo for tito build system (Michal Luscon)
  - New version 0.5.4 (Michal Luscon)
  - goal: implement methods for optional installation (RhBug:1167881) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 0.5.5-1
changelog:
  - get rid of yum references (Jan Silhan)
  - sack: force recomputing excludes (Jan Silhan)
  - doc: cosmetic: made Sack headline more readable (Jan Silhan)
  - doc: sack: warning about using excludes, includes, disabling and enabling
    repos (Jan Silhan)
  - cosmetic: removed commented code (Jan Silhan)
  - sack: calls reinitiate provides after changing considered map (RhBug:1099342)
    (Jan Silhan)
  - fixed memleak from d8f2ca7 (Jan Silhan)
  - doc: add to CMDLINE_REPO_NAME and SYSTEM_REPO_NAME the Python API reference
    manual. (Radek Holy)
  - doc: add Repo to the Python API reference manual. (Radek Holy)
  - updated load_test_repo() to be able to load non-standard system repo (Michael
    Mraka)
  - python tests for goal.run(verify=True) (Michael Mraka)
  - test for HY_VERIFY flag (Michael Mraka)
  - introduced verify option for goal.run() (Michael Mraka)
  - AUTHORS: fixed name (Michael Mraka)
  - AUTHORS: added 3 Michaels (Jan Silhan)
  - Build for x86_64, correction for C++ (Michal Ruprich)


author: Michal Luscon <mluscon@redhat.com> 0.5.7-1
changelog:
  - spec: add a %{snapshot} macro for easier snapshot building (Radek Holy)
  - doc: sack: deep copy added to warning section (Jan Silhan)
  - doc: sack: warning about multiple Sack usage (Jan Silhan)
  - doc: sack: len(sack) -> method __len__ (Jan Silhan)
  - Package.files returns list of Unicode objects (Jan Silhan)


author: Jan Silhan <jsilhan@redhat.com> 0.5.8-1
changelog:
  - added implicit-function-declaration compile flag (Jan Silhan)
  - subject: Fix compiler warning introduced by previous commit (Colin Walters)
  - python: Verify that nosetest actually ran any tests (Colin Walters)
  - AUTHORS: updated (Jan Silhan)
  - subject: Remove internal header includes from public header (Colin Walters)
  - maintain result map in query (RhBug:1049205) (Jan Silhan)
  - AUTHORS: updated (Jan Silhan)
  - package: Don't assume the same pool in hy_package_cmp() (Matthew Barnes)


author: Jan Silhan <jsilhan@redhat.com> 0.5.8-2
changelog:
  - tito: change vesiontagger to releasetagger (Jan Silhan)
  - don't require python3 in rhel (Jan Silhan)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-18
changelog:
  - adjust buildroot location (guidelines)
  - disable static libraries (guidelines)
  - tweak default payload attributes (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-19
changelog:
  - fix the release number noted for the previous changelog entry (#225884)
  - remove unapplied "classes" patch (#225884)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.2.1-1
changelog:
  - update to 3.2.1
    - merged all patches or equivalents
    - re-merged hesinfo, so we obsolete it now
    - adds a pkgconfig configuration file for libhesiod
  - correct inconsistent changelog dates, assuming day-of-week is correct
  - add build requirement on libidn-devel
  - package the license


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.13-2
changelog:
  - Bring back config patch to fix -debuginfo, it hasn't been upstreamed yet.
  - Drop empty TODO from docs.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.8-1
changelog:
  - New upstream version 1.3.8.
  - Fixes handling of keys which use ri-records, for both reading and
    writing (RHBZ#717583, RHBZ#987463).
  - Remove upstream patch.
  - Rebase dirs patch against new upstream sources.
  - Rebase ruby patch against new upstream sources.
  - Modernize the RPM spec file.
  - Fix .gitignore.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7
changelog:
  - Fix: "Argument list too long" when using virt-v2v on Windows guest
    with French copy of Citrix installed
    related: rhbz#1145056


author: Nalin Dahyabhai <nalin@redhat.com> - 0.9.13-1
changelog:
  - treat unexpected command-line arguments as an error to avoid setting
    incorrect expectations, and warn when a check file doesn't appear to
    contain anything for us to check (#1016706)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.9.13-4
changelog:
  - only BuildRequire: prelink on the arches on which we know it runs (currently
    %{ix86}, x86_64, ppc, ppc64, s390, s390x), so that it can be built on the
    rest (#1061889)


author: Jiri Popelka <jpopelka@redhat.com> - 3.11-3
changelog:
  - remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
  - remove outdated de & pt man pages
  - /usr move: use _bindir macro


author: Jiri Popelka <jpopelka@redhat.com> - 3.13.6-1
changelog:
  - 3.13.6
  - hplip-ipp-accessors.patch merged upstream
  - /etc/cron.daily/hplip_cron -> /usr/share/hplip/hplip_clean.sh


author: Tim Waugh <twaugh@redhat.com> - 3.13.7-2
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37
changelog:
  - core: fix chunk header parsing defect (CVE-2015-3183)
  - core: replace of ap_some_auth_required with ap_some_authn_required
    and ap_force_authn hook (CVE-2015-3185)


author: CentOS Sources <bugs@centos.org> - 2.4.6-40.el7.centos.4
changelog:
  - Remove index.html, add centos-noindex.tar.gz
  - change vstring
  - change symlink for poweredby.png
  - update welcome.conf with proper aliases


author: Guoqiang Deng <dengguoqiang@huawei.com> - 2.4.6-40.4.h1
changelog:
  - mod_lua: Fix handling of the Require line when a LuaAuthzProvider is
    used in multiple Require directives with different arguments(CVE-2014-8109)


author: zhangyi <zhangyi79@huawei.com> - 2.4.6-45.0.1.4.h1
changelog:
  - Type:cves
  - ID:CVE-2016-0736,CVE-2016-2161,CVE-2016-8743
  - SUG:NA
  - DESC:1)Padding Oracle in Apache mod_session_crypto (CVE-2016-0736)
         2)DoS vulnerability in mod_auth_digest (CVE-2016-2161)
         3)Apache HTTP Request Parsing Whitespace Defects(CVE-2016-8743)


author: zhangyi <zhangyi79@huawei.com> - 2.4.6-45.0.1.4.h2
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC:1)Use index.html(for EulerOS) instead of oracle_index.html
         2)Requires is changed: system-logos >= 7.92.1-1 -> system-logos


author: wangzezhi <wangzezhi2@huawei.com> - 2.4.6-45.0.1.4.h4
changelog:
  - Type:cves
  - SUG:NA
  - DESC:fix vnlnerrabilities (CVE-2017-3167,CVE-2017-3169,CVE-2017-7668,CVE-2017-7679,CVE-2017-9788)


author: zhangchenfeng<zhangchenfeng1@huawei.com> - 2.4.6-45.0.1.4.h8
changelog:
  - Type:cves
  - ID:CVE-2018-1312 CVE-2017-15710 CVE-2017-15715
  - SUG:NA
  - DESC:fix vnlnerrabilities (CVE-2018-1312 CVE-2017-15710 CVE-2017-15715)


author: nidailiang<nidailiang@huawei.com> - 2.4.6-45.0.1.4.h14
changelog:
  - Type:cves
  - ID:CVE-2016-4975
  - SUG:restart
  - DESC:delete the wrong patch because CVE-2016-4975 is already fixed by CVE-2016-8743 commits


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 2.4.6-45.0.1.4.h16
changelog:
  - Type:cves
  - ID:CVE-2019-10092 CVE-2019-10098 CVE-2020-1927 CVE-2020-1934
  - SUG:restart
  - DESC:fix CVE-2019-10092 CVE-2019-10098 CVE-2020-1927 CVE-2020-1934


author: Joe Orton <jorton@redhat.com> - 2.4.6-45.3
changelog:
  - prefork: fix delay completing graceful restart (#1327624)
  - mod_ldap: fix authz regression, failing to rebind (#1415257)


author: Caolán McNamara <caolanm@redhat.com> - 1.3.2-6
changelog:
  - Resolves: rhbz#573516 have hunspell require hunspell-en to ensure
    at least one dictionary exists


author: Michal Minar <miminar@redhat.com> 0.252-7.1
changelog:
  - Bumped release to reflect rhel version.
  - Fixed bogus dates in changelog.
  - Generate and install hwdb.d/* files.


author: Michal Minar <miminar@redhat.com> 0.252-8.1
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1236458
  - Resolves: rhbz#1256004
  - Resolves: rhbz#1266217
  - Resolves: rhbz#1271797


author: swx458333<sunguoshuai@huawei.com> - 0.252-8.1.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove some redhat pci name in case of "Red hat Inc." shows in network setting interface when use gnome Desktop or install Euler.


author: Vitezslav Crhonek <vcrhonek@redhat.com> 0.252-8.5
changelog:
  - Updated pci, usb and vendor ids
  - Resolves: #1386133 #1424763
  - Removed module nx_crypto from blacklist on PowerPCs
  - Resolves: #1264326


author: songshuaishuai<songshuaishuai2@huawei.com> - 0.252-8.6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:upgrade to 0.252-8.6 from upstream to fix lspci query Mellanox MT28800 netcard error


author: snwint@suse.de
changelog:
  - support Validity fingerprint sensor (bnc #644149)
  - add vmbus storage controllers (bnc #654959)
  - fix SPARC compile fixes


author: snwint@suse.de
changelog:
  - fix network detection if several interfaces are attached to a single pci function (bnc #693090)
  - fixed typo
  - USB joystick fixes
  - replace USB details by joystick details
  - set unix_dev_name2 to /dev/input/jsX
  - added Gameport bus, detect gameport joysticks
  - cleanup - removed unused variables
  - added NULL checks
  - joystick: detect and report number of axes and buttons
  - added support for detecting USB joysticks
  - updated .gitignore
  - added .gitignore files
  - show disk capacity in GB


author: snwint@suse.de
changelog:
  - basic arm support
  - updated git related scripts
  - Use new and correct sysfs driver names:
  - hv_storvsc instead of storvsc
  - hv_netvsc instead of netvsc
  - Remove blkvsc, the driver was merged into hv_storvsc
  - detect fcoe disks (bnc #725134)


author: snwint@suse.de
changelog:
  - increase major version to 20 to avoid ABI change problems (maybe bnc #739349)
  - change multi-interface detection to work with old sysfs layout (bnc #739368, bnc #693090)


author: Jay Fenlason <fenlason@redhat.com> - 1.7-1.1
changelog:
  - Remove build dependencies on libXNVCtrl-devel and w3m because RHEL
    does not have them (w3m is available on x86_64, but not s390).
    Resolves: rhbz978752


author: Jay Fenlason <fenlason@redhat.com> - 1.7-1.2
changelog:
  - Split out lstopo into a -gui subpackage, so the hwloc base package
    does not pull in all of X.
    Resolves: rhbz910165


author: Tomas Hozza <thozza@redhat.com> - 0-0.20.20130826git
changelog:
  - Build daemons only for x86_64 architecture (#1010220)
  - Bump release to 20 to prevent RHEL6 -> RHEL7 update path issues


author: Tomas Hozza <thozza@redhat.com> - 0-0.21.20130826git
changelog:
  - Use 'hypervkvpd' directory in libexec for KVP daemon scripts (#1010280)
  - daemons are now WantedBy multi-user.target instead of basic.target (#1010284)


author: Matej Muzila <mmuzila@redhat.com> - 0-0.25.20141008git
changelog:
  - Daemons updated to the last git snapshot
  - Use kernel-headers instead of kernel-devel to build
  - Added Hyper-V fcopy daemon as hypervfcopyd subpackage


author: Vitaly Kuznetsov <vkuznets@redhat.com> - 0-0.26.20150402git
changelog:
  - 2015-04-02 git snapshot
  - VSS: skip all readonly-mounted filesystems (#1160584)
  - VSS: support partitions mounted several times (#1169724)


author: Jaromir Capik <jcapik@redhat.com> - 3.1.0-5
changelog:
  - Introducing man pages for binaries in the eepromer subpackage
  - Introducing -r switch in the i2cset help


author: Michal Schmidt <mschmidt@redhat.com> - 1.0.10-0.1.20150717git825da3ccd2
changelog:
  - Update to pre-release git snapshot of 1.0.10.
  - Adds libibacmp shared library.
  - Rebase coverity patch.
  - Minor spec file cleanup.
  - Resolves: bz1169952


author: Michal Schmidt <mschmidt@redhat.com> - 1.0.10-0.3.20150717git825da3ccd2
changelog:
  - Put libibacmp.so in the main package, it's needed at runtime.
  - No need to run ldconfig, the .so is not in the linker path.
  - Filter the plugin from RPM provides.
  - Related: bz1169952


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-1
changelog:
  - Bumped to 1.5.3
  - Deleted ibus-xx-g-s-disable-preedit.patch as EOL.
  - Deleted ibus-gjs as EOL.
  - Removed imsettings-gnome, im-chooser, libgnomekbd dependencies.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-6
changelog:
  - Resolves: #1051389, #1051391, #1051408, #1051397, #1051398, #1051415,
                Updated ibus-HEAD.patch for upstream
  - Resolves: #1050813
    Deleted notify-python in Requires


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-12
changelog:
  - Resolves: #1183909 - programs using "PreeditType: OverTheSpot" is stalled
  - Resolves: #1191825 - gtk2's immodules.cache won't be updated in some cases


author: Ding-Yi Chen <dchen at redhat.com> - 1.4.4-1
changelog:
  - Resolves Bug 842856 - ibus-chewing 1.4.3-1 not built with $RPM_OPT_FLAGS
  - Resolves Bug 1027030 - CVE-2013-4509 ibus-chewing: ibus: visible 
    password entry flaw [fedora-all]
    Thanks czchen for the GitHub pull request 39.
  - Added translations: fr_FR, ja_JP, ko_KR
  - Adopt cmake-fedora-1.2.0


author: Ding-Yi Chen <dchen at redhat.com> - 1.4.4-7
changelog:
  - Target "translation" is built separately with all, 
    in order to tame multiple job make.
  - Resolves Bug 1013977 - ibus-chewing needs to have ibus write-cache --system in %post and %postun
  - Resolves Bug 1027031 - CVE-2013-4509 ibus-chewing: ibus: visible password entry flaw [rhel-7.0]
  - Resolves Bug 1028911 - [zh_TW]'Chinese<->English' switch does not work when clicking on the Chewing menu list.
  - Resolves Bug 1045868 - ibus-chewing *again* not built with $RPM_OPT_FLAGS
  - Option "Sync between caps lock and IM":
    + Default of  is changed to "disable",  because the previous default
      "keyboard" cause bug 1028911 for GNOME Shell.
    + Now Sync from "input method" can control Caps LED in GNOME shell.
  - Translation added: de_DE, es_ES, it_IT, pt_BR, uk_UA
  - Set environment IBUS_CHEWING_LOGFILE for ibus-chewing log.


author: Ding-Yi Chen <dchen at redhat.com> - 1.4.4-9
changelog:
  - Resolves Bug 1119963 - Slow focus change with ibus-chewing
  - Resolves Bug 1062133 - ibus-chewing may not handle key event after focus change
  - Resolves Bug 1073797 - Cannot identify input mode for Chinese IME (ibus-chewing)


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-3
changelog:
  - Remove have_bridge_hotkey and need_pygobject3 macros which does no
    longer make sense after F17
  - Add ibus-hangul-dconf-prefix.patch
  - Fix bug 909509 - Hangul Keybaord doesn't be changed in IBusHangul Setup


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-7
changelog:
  - Invoke ibus-setup-hangul with the absolute path.
  - Fix bug 1012732 - Click ibus hangul setup on gnome-shell top bar's
    ibus -> No Response


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-10
changelog:
  - Add ibus-hangul-hangul-toggle.patch
  - Fix bug 1071351 - Cannot switch English input mode and Hangul
    (Korean) input mode by Hangul key


author: Peng Wu <pwu@redhat.com> - 1.6.91-4
changelog:
  - Resolves: rhbz#1068338, rhbz#1068448
  - Add patch ibus-libpinyin-update-gnome-shell-indicatior.patch
  - Add patch ibus-libpinyin-drop-xdg-depends.patch


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-4
changelog:
  - Add ibus-m17n-translit-layout.patch
  - Fix bug 847495 - For non-US keyboard layout Ibus-m17n adds English
    (US) to the list of input methods and other input methods use US
    layout
  - Require eekboard-service instead of eekboard
  - Fix bug 847500 - Don't install Eekboard by default in the desktop spin


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-6
changelog:
  - Add ibus-m17n-desktop-file.patch
    Fix bug 860955 - ibus-m17n setup is not enabled in
    gnome-control-center region, .desktop file is missing


author: Daiki Ueno <deno@redhat.com> - 1.3.4-8
changelog:
  - Update ibus-m17n-HEAD.patch to the latest upstream master
  - Remove unnecessary and not upstreamable patches
  - Use gtk3 always
  - Fix bug 912592 - ibus-m17n should use default keyboard in most cases


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-9
changelog:
  - Update ibus-m17n-xkb-options.patch to set XKB option for Inscript2
  - Fix bug 957993 - ibus-m17n doesn't automatically map Alt_R to AltGr
    when Inscript2 maps are used


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-10
changelog:
  - Add ibus-m17n-fix-data-location.patch
  - Fix bug 962144 [abrt] ibus-m17n-1.3.4-9.fc19:
    setup_dialog_load_config: Process /usr/libexec/ibus-setup-m17n was
    killed by signal 11 (SIGSEGV)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20120907-3
changelog:
  - Resolves: #856903
  - Fix ipa-x-sampa table and phrases containing spaces in emoji-table
    Currently there is a regular expression which filters out several
    lines defining valid phrases. The emoji-table for example has phrases
    containing spaces which are currently filtered out and the ipa-x-sampa
    table has trailing comments which are filtered out as well.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20121113-1
changelog:
  - update to latest upstream 1.4.99.20121113 from Caius ‘kaio’ Chance’s repository, using rel20121101 git tag
  - remove ibus-table-1.4.99.20120907-improve-chinese-category-check.patch (included upstream)
  - remove fix-ipa-x-sampa-table-and-phrases-containing-spaces.patch (included upstream)
  - Fix marking of translatable strings for gettext
  - update zh_??.po files
  - Add German translation
  - Do not fail if the ~/.ibus/byo-tables/ directory does not exist


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20130108-1
changelog:
  - update to latest upstream 1.4.99.20130108 from Caius ‘kaio’ Chance’s repository, 1.5.0 branch
  - includes port to GObjectIntrospection now


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20130110-1
changelog:
  - Resolves: #513901 ibus-table setup does not store config settings
  - update to latest upstream 1.4.99.20130110 from Caius ‘kaio’ Chance’s repository, 1.5.0 branch
  - When detecting the Chinese mode from the environment, also check LC_ALL
  - Fix typo in self._chinese_mode variable (The typo broke the SC/TC property)
  - Make cursor in lookup table always visible (became invisible after the port to GObjectIntrospection)
  - apply changes in values of dconf keys immediately


author: Mike FABIAN <mfabian@redhat.com> - 1.5.0-1
changelog:
  - update to latest upstream 1.5.0  from Caius ‘kaio’ Chance’s repository
  - add patches for better simplified/traditional Chinese detection
  - Resolves: #857967 - simplified/traditional Chinese detection in ibus-table does not work well


author: Mike FABIAN <mfabian@redhat.com> - 1.5.0-2
changelog:
  - Resolves: #911487 - Non-Chinese tables from the ibus-table-other package do not work
  - Add auto_select functionality to select the first phrase when typing.
    Useful for Cyrillic transliteration
  - Update cmode property in chinese mode only
  - Fall back to auto_select = False if neither dconf nor the table
    have a value for auto_select
  - Preedit needs to be updated on page-up and page-down


author: Mike FABIAN <mfabian@redhat.com> - 1.5.0-5
changelog:
  - Resolves: rhbz#1049760 - [ALL LANG] Traceback produced when run ibus-table-createdb from terminal.
  - When tabcreatedb.py is called without any options, print a usage message. Do not just show a cryptic backtrace.


author: Ding-Yi Chen <dchen@redhat.com> - 1.3.0.20110114-1
changelog:
  - Fix Bug 667877: ibus-table-yinma and ibus-table-xingma have been obsoleted.
  - Now depends on cmake-fedora


author: Ding-Yi Chen <dchen@redhat.com> - 1.3.4-1
changelog:
  - Fixed Bug 715707 - FTBFS ibus-table-chinese-1.3.0.20110114-2.fc15
  - Fixed Bug 629212 - bad candidate orders in ibus-table-quick
  - Merged patch from sagara @ github, which address IBus issue 787
  - Make it compatible with cmake-fedora-0.7.994
  - Move the cmake policies to the front
  - Suppress the misleading warning from rpm -V


author: Ding-Yi Chen <dchen@redhat.com> - 1.4.0-1
changelog:
  - Table build scripts has been refactored.
  - cmake-fedora is added as submodule.
  - Fixed Bug 855250 - Change the default filtering for Quick and Cangjie by
    merging maxiaojun's repository
  - Fixed Google Issue 1405: failed to build ibus-table-chinese due to missing db files


author: Ding-Yi Chen <dchen@redhat.com> - 1.4.5-1
changelog:
  - Table build scripts has been refactored.
  - cmake-fedora is added as submodule.
  - Fixed Bug 855250 - Change the default filtering for Quick and Cangjie by
    merging maxiaojun's repository
  - Fixed Google Issue 1405: failed to build ibus-table-chinese due to missing db files
  - Fixed Google issue 1507: Add CJKV Extension C/D support for Array30
  - Merge GitHub Pull request 3: Added the inter punct
  - Merge GitHub Pull request 4: Give Cangjie and Quick users 9 candidates per page


author: Ding-Yi Chen <dchen@redhat.com> - 1.4.6-1
changelog:
  - Fixed IBus Google issue 1126: An error in ChineseTableLicenseAuditing
  - Complete LICENSE tag for all of the tables.


author: Mike FABIAN <mfabian@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3 upstream version
  - Don’t output page_size in “/usr/libexec/ibus-engine-typing-booster --xml” (Resolves: rhbz#975449 - ibus-daemon prints warnings because “/usr/libexec/ibus-engine-typing-booster --xml” prints the invalid element “page_size”)
  - Use ~/.local/share/ibus-typing-booster/ to store user data and log files (Resolves: rhbz#949035 - don't use a hidden directory under .local/share)


author: Mike FABIAN <mfabian@redhat.com> - 1.1.0-1
changelog:
  - Update to 1.1.0 upstream version
  - Add a commit=True parameter to check_phrase_and_update_frequency()
  - Fix that the page_size is shown as 0 in the setup tool if it has not been set before
  - Do not use AUTOINCREMENT
  - Make it possible to exit the setup tool by typing Control-C in the terminal
  - Add feature to read a text file for training the user database
  - Update German translations and .pot file
  - Fix error when the hunspell dictionary for an engine is missing


author: Mike FABIAN <mfabian@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 upstream version
  - Make TAB when used to enable/disable the lookup table work as a toogle
  - Create a VIEW for “LIKE input_phrase%” in select_words() and use that
    in the following SELECT statements (Makes candidate calculation more
    than 10 times faster)


author: Mike FABIAN <mfabian@redhat.com> - 1.2.1-1
changelog:
  - Update to 1.2.1 upstream version
  - Pop up a message box when a file has been read to train the database, indicating success or failure (Resolves: rhbz#979933)
  - Update German translation
  - Ignore most punctuation characters and mathematical symbols when tokenizing (Resolves: rhbz#979939)


author: Mike FABIAN <mfabian@redhat.com> - 1.2.2-1
changelog:
  - Update to 1.2.2 upstream version
  - Commit immediately when certain punctuation characters are typed and transliteration is not used (Resolves: rhbz#981179)
  - Add an option to try completion only when a minimum number of characters has been typed


author: Mike FABIAN <mfabian@redhat.com> - 1.2.3-1
changelog:
  - Update to 1.2.3 upstream version
  - Fix exception handling when trying to install a rpm package (Resolves: rhbz#986178)


author: Jay Fenlason <fenlason@redhat.com> 1.5.7-8
changelog:
  - Add the -output patch to have programs use /var/cache/ibutils
    instead of /tmp
    Resolves: bz958569


author: Doug Ledford <dledford@redhat.com> - 1.5.7-12
changelog:
  - Change ExclusiveArch to ExcludeArch instead so we don't have
    the same problem again in the future
  - Update to the git repo tarball that we shipped in rhel6.6
  - Related: bz1123998


author: Jiri Vanek <jvanek@redhat.com> 1.6.0-1
changelog:
  - update to upstream 1.6
  - made to use jdk8 (rh1184970)
  - it will be necessary for 1.6.1 anyway (rh1233687)
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.1-1
changelog:
  - updated to upstream release 1.6.1
  - metadata xml files enhanced for javaws
  - forced to use jdk8 by default
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.1-4
changelog:
  - added and and applied patch2 fileLogInitializationError-1.6.patch to prevent 
  consequences 1268909
  - Resolves: rhbz#1217153


author: Martin Gieseking <martin.gieseking@uos.de> 0.30.0-1
changelog:
  - updated to release 0.30.0
  - dropped patch as it has been applied upstream
  - removed old buildroot stuff


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - Rebase to upstream version 0.31.3.
  - This version includes multiple security fixes
    CVE-2017-5208, CVE-2017-5333, CVE-2017-5332, CVE-2017-6009,
    CVE-2017-6010, CVE-2017-6011
    resolves: rhbz#1430610


author: zhangyi <zhangyi79@huawei.com> - 0.31.3-1
changelog:
  - Type:cves
  - ID:CVE-2017-5208
       CVE-2017-5332
       CVE-2017-5333
       CVE-2017-6009
       CVE-2017-6010
       CVE-2017-6011
  - SUG:NA
  - DESC:1)Check_offset overflow on 64-bit systems
         2)Access to unallocated memory possible in extract.c
         3)Integer overflow vulnerability in extract.c
         4)Buffer overflow in the decode_ne_resource_id function
         5)Buffer overflow in the extract_icons function
         6)Buffer overflow in the simple_vec function


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0.3-3
changelog:
  - IlmBase.pc: +Requires.private: gl glu
  - -devel: drop hard-coded libGL/pkgconfig deps, let rpm autodetect now


author: Akira TAGOH <tagoh@redhat.com> - 1.6.2-1
changelog:
  - New upstream release.
  - the spec file cleanup.
  - Correct License field
  - Add Provides: bundled(egglib) to im-chooser-common since
    it actually contains things in libimchooseui.so.0


author: Akira TAGOH <tagoh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release.
    - Add a link to the log file in the error dialog (#950488)
    - Fix a crash issue (#859624)


author: Doug Ledford <dledford@redhat.com> - 1.6.2-1
changelog:
  - Update to latest upstream release (resolves bz998816)
  - Revive all_hcas patch (otherwise would be a regression)
  - Fix ibnodes -h output (another regression, bz1054545)
  - Resolves: bz998816, bz1054545


author: Michal Schmidt <mschmidt@redhat.com> - 1.6.5-1
changelog:
  - Update to latest upstream release. Adds rdma-ndd daemon.
  - Rebase patches, cherry-pick fixes from upstream git.
  - Enable build on s390(x).
  - Fixed bogus changelog dates.
  - Add Conflicts with old rdma. It needs to be aware of rdma-ndd.
  - Resolves: bz1169968


author: Jay Fenlason <fenlason@redhat.com> 3.1-1
changelog:
  - Upgrade to new upstream version.
  - add the -edata patch to handle the type-change of the edata sypmbol
    from 'A' to 'D'.


author: jay Fenlason <fenlason@redhat.com> 3.1-2.r364.1140_open
changelog:
  - Pull in upstream patch to close
    Resolves: rhbz907730 - [RHEL-7.0] libpsm_infinipath.so: undefined reference to knem_open_device


author: Jay Fenlason <fenlason@redhat.com> 3.1-3.r364.1140_open
changelog:
  - Fix the path to the udev file to close
    Resolves: rhbz1034508 - [RHEL-7.0] /dev/ipath* permissions are wrong


author: Jay Fenlason <fenlason@redhat.com> -3.2-2_ga8c3e3e_open.2
changelog:
  - Update the -build patch and this spec file so the library is built
    with the standard optimization and security flags.
    Resolves: rhbz1070814


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.24-1
changelog:
  - Make Initial Setup compatible with rebased Anaconda (#1229747) (mkolman)
    Resolves: rhbz#1229747
  - Log the reason if GUI import fails (#1229747) (mkolman)
    Related: rhbz#1229747


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.25-2
changelog:
  - Don't show the EULA spoke in reconfig mode if license is already accepted (#1110439) (mkolman)
    Related: rhbz#1110439
  - Read the kickstart from previous IS run, if available (#1110439) (mkolman)
    Related: rhbz#1110439
  - Add support for externally triggered reconfig mode (#1110439) (mkolman)
    Resolves: rhbz#1110439


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.26-1
changelog:
  - Use systemd service status for run detection on the S390 console (#1181209) (mkolman)
    Resolves: rhbz#1181209
  - Bump the required Anaconda version (#1229747) (mkolman)
    Related: rhbz#1229747


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.28-1
changelog:
  - Run the TUI service before hvc0.service (#1209731) (mmatsuya)
    Resolves: rhbz#1209731
  - Don't create /etc/sysconfig/initial-setup on s390 (#1181209) (mkolman)
    Related: rhbz#1181209
  - Setup the locale before starting the UI (dshea)
    Resolves: rhbz#1198642


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.30-1
changelog:
  - Only root should be able to read the initial-setup-ks.cfg file (#1264336) (mkolman)
    Resolves: rhbz#1264336


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.31-1
changelog:
  - Makefile improvements (#1249598) (mkolman)
  - Make Initial Setup startup more robust (#1249598) (mkolman)
  - Move the s390 profile scripts to a subfolder (#1249598) (mkolman)
  - Improve log messages for kickstart parsing error (#1249598) (mkolman)
  - Make sure full screen is used & window header bar is hidden (#1290321) (mkolman)
  - Use blank title for the Initial Setup window (#1310179) (mkolman)


author: zwx499727 <zhangyujing1@huawei.com> - 0.3.9.31-1.h3
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC:on firstboot interface, after changing network setting,done button lose effectiveness


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.31-1
changelog:
  - Makefile improvements (#1249598) (mkolman)
    Related: rhbz#1249598
  - Make Initial Setup startup more robust (#1249598) (mkolman)
    Resolves: rhbz#1249598
  - Move the s390 profile scripts to a subfolder (#1249598) (mkolman)
    Realeted: rhbz#1249598
  - Improve log messages for kickstart parsing error (#1249598) (mkolman)
    Related: rhbz#1249598
  - Make sure full screen is used & window header bar is hidden (#1290321) (mkolman)
    Resolves: rhbz#1290321
  - Use blank title for the Initial Setup window (#1310179) (mkolman)
    Resolves: rhbz#1310179


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.32-1
changelog:
  - Fix reconfiguration service name (mkolman)
    Related: rhbz#1257624
  - Fix installation path for a reconfiguration related script (mkolman)
    Related: rhbz#1257624
  - Use the environs flag when setting the environment (mkolman)
    Related: rhbz#1270354
  - Some typo fixes and logging improvements (mkolman)
    Related: rhbz#1257624
  - Add a systemd service that enables Initial Setup if /.unconfigured exists (#1257624) (mkolman)
    Resolves: rhbz#1257624
  - Initialize Thread Manager as early as possible (#1249598) (mkolman)
    Related: rhbz#1249598
  - Adapt to addon execute() signature change (mkolman)
    Related: rhbz#1288636
  - Suppress an error message about missing initial-setup-graphical.unit (#1249598) (mkolman)
    Related: rhbz#1249598


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.34-1
changelog:
  - Suppress logging to stdout when TUI is started by s390 startup scripts (mkolman)
    Related: rhbz#1366776
  - Fix path to TUI executable in the s390 startup scripts (#1366776) (mkolman)
    Resolves: rhbz#1366776
  - Canonicalize symlinks returned by readlink (mkolman)
    Related: rhbz#1360343


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.35-1
changelog:
  - Change how Initial Setup reconfig mode is started (#1342536) (mkolman)
    Related: rhbz#1342536
  - Add systemd scriptlets for initial-setup-reconfigure.service (#1342536) (mkolman)
    Related: rhbz#1342536


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.25-1
changelog:
  - network: tell NM to reload its configuration during start
  - bonding: warn if the ifup for slave device failed
  - brandbot: move to /usr/libexec/initscripts
  - sysctl.conf: drop SHMALL and SHMMAX, they have sane default values in kernel
  - rename_device: allow non-channel nics for s390x machines
  - network-functions: fix check in install_bonding_driver
  - ifup-aliases: don't return with error when arping fails
  - network-functions: fix change_resolv_conf after grep update
  - clarify daemon() usage message
  - ifup: don't call NM for loopback
  - ifup: add missing quotes


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.26-1
changelog:
  - import-state: don't run restorecon when it does not exist
  - network-functions: reeplace iwconfig with iw
  - fedora-readonly: use --make-slave with --bind mounts


author: heyitao<heyitao@huawei.com> - 9.49.30-1.2.h5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:when PERSISTENT_DHCLIENT=y is not set and link is down, do not call dhclient for link


author: zhengshaoyu<zhengshaoyu@huawei.com> - 9.49.30-1.2.h6
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:run ifdown on all interfaces, backport from upstream.


author: zhengshaoyu<zhengshaoyu@huawei.com> - 9.49.30-1.2.h9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:execute udevadm settle when network starts default timeout 120 seconds


author: Alon Levy <alevy@redhat.com>
changelog:
  - Update to 0.50.0
  - Drop patch carried for bz#568845 (schemas-merge) per last comment
    in that bug.


author: Jon Ciesla <limburgher@gmail.com> - 0.50.2-1
changelog:
  - Latest stable release.
  - Merge review BZ 225902 fixes:
  - Removed Obsoletes/Provides for xml-i18n-tools.
  - Swapped gettext/gettext-devel Requires, BuildRequires.
  - Added %check section.


author: Andrew Price <anprice@redhat.com> - 0.0-1.20130117git26d4e95
changelog:
  - Further improve the versioning
  - Preserve timestamp on man page
  - Remove BuildRoot, the clean and defattr sections and don't clean buildroot
  - Install to DESTDIR
  - Update Source and add a comment on how the tarball was generated
  - Use _smp_mflags in build
  - Thanks to Eduardo Echeverria for reviewing the package


author: Andrew Price <anprice@redhat.com> - 1.0-4
changelog:
  - Fix a label overflow in plot_io
    Resolves: rhbz#1004820
  - Add bounds checking in find_step
    Resolves: rhbz#1004882
  - Fix processing of trace filenames containing spaces
    Resolves: rhbz#1004865


author: Andrew Price <anprice@redhat.com> - 1.0-6
changelog:
  - Add Requires: librsvg2-tools to enable video generation
  - Merge trace dumping functions into one
  - Check program exit code properly
  - Fix up directory trace processing
    Resolves: rhbz#1004865


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.12
changelog:
  - Resolves: #1309382 issues with migration from RHEL 6 self-signed to RHEL 7 CA
    IPA setup
    - replica install: improvements in the handling of CA-related IPA config
      entries


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.13
changelog:
  - Resolves: #1324060 Installers fail when there are multiple versions of the
    same certificate
    - certdb: never use the -r option of certutil


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.15
changelog:
  - Related: #1327197 Crash during IPA upgrade due to slapd
    - spec file: update minimum required version of slapi-nis


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.16
changelog:
  - Resolves: #1337820 URI details missing and OCSP-URI details are incorrectly
    displayed when certificate generated using IPA on RHEL 7.2up2.
    - Prevent replica install from overwriting cert profiles
    - Detect and repair incorrect caIPAserviceCert config


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.17
changelog:
  - Resolves: #1339304 CA installed on replica is always marked as renewal master
    - replica install: do not set CA renewal master flag


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.18
changelog:
  - Resolves: #1350305 Multiple clients cannot join domain simultaneously:
    /var/run/httpd/ipa/clientcaches race condition?
    - mod_auth_gssapi: enable unique credential caches names
  - Related: #1347175 Multiple clients cannot join domain simultaneously:
    /var/run/httpd/ipa/clientcaches race condition?


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.19
changelog:
  - Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
    certificate revocation
    - cert-revoke: fix permission check bypass (CVE-2016-5404)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.11
changelog:
  - Resolves: #1311470 ipa trust-add succeded but after that ipa trust-find
    returns "0 trusts matched"
    - Fix broken trust warnings


author: zhangyuyun <zhangyuyun@huawei.com> - 1.8.13-8.h3
changelog:
  - Type:bugfix
  - SUG:NA
  - DESC: Fix SEGV in ipmi_lanplus_open_session
          Open session retries hit assert in ipmi_lanplus_send_payload
          fix LANplus retry


author: Xiaogang Wang<wangxiaogang3@huawei.com> - 1.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:tcphdr length should bigger than 20 to aviod tc corrupt packet


author: Xiaogang Wang<wangxiaogang3@huawei.com> - 1.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:only TCP protocol do ipnat and fix cp->timer is del but also do mod_timer.


author: Phil Sutter - 3.10.0-47
changelog:
  - Related: #1215006 - backport current version of the ss command
  - Related: #1219280 - backport: iproute2: vti6 support


author: Phil Sutter - 3.10.0-48
changelog:
  - Related: #1215006 - backport current version of the ss command
  - Resolves: #1247315 - Fix limitation in iproute/ss regarding dual-stack sockets


author: Phil Sutter - 3.10.0-49
changelog:
  - Resolves: bz#1241486 - backport: tc: fq scheduler
  - Related: #1215006 - backport current version of the ss command


author: Phil Sutter - 3.10.0-50
changelog:
  - Resolves: #1244851 - vti tunnel does not work
  - Resolves: #1155116 - iproute2: implement "-d" option for "ip mon"


author: Phil Sutter - 3.10.0-51
changelog:
  - Resolves: bz#1251451 - can't change the remote/local address of tunnel
    interface to "any" in ipip mode
  - Related: #1213869 - [6wind 7.2 Feat]: backport: iproute2: various netns
    features
  - Related: #1215006 - [RFE] backport current version of the ss command
  - Resolves: #1251070 - Fix multiple programming errors in iproute package
  - Related: #1198456 - backport: dynamic precision, human readable, and IEC
    output to ip stats
  - Related: #1210402 - [6wind 7.2 Feat]: backport: vxlan: unable to configure
    UDP checksums
  - Related: #1213869 - [6wind 7.2 Feat]: backport: iproute2: various netns
    features


author: Phil Sutter - 3.10.0-52
changelog:
  - Resolves: #1254095 - bridge: Add master device name to bridge fdb show
  - Resolves: #1255316 - tc does not allow to attach pfifo_fast qdisc
  - Related: #1251070 - Fix multiple programming errors in iproute package


author: Phil Sutter - 3.10.0-53
changelog:
  - Related: #1212026 - [6wind 7.2 Feat]: backport: ipxfrm: unable to configure
    SPD hash table - reverted this backport due to unmet dependencies


author: Phil Sutter <psutter@redhat.com> [3.10.0-71.el7]
changelog:
  - ip: add paren to silence warning (Phil Sutter) [1340914]
  - Fix MAC address length check (Jakub Sitnicki) [1253767 1271580]
  - iplink: Check address length via netlink (Jakub Sitnicki) [1253767 1271580]
  - iplink: Add missing variable initialization (Jakub Sitnicki) [1253767 1271580]
  - ip link: Fix crash on older kernels when show VF dev (Jakub Sitnicki) [1340914]
  - ip link: Remove unnecessary device checking (Jakub Sitnicki) [1340914]
  - ip: check for missing dev arg when doing VF rate (Jakub Sitnicki) [1340914]
  - Add support to configure SR-IOV VF minimum and maximum Tx rate through ip tool (Jakub Sitnicki) [1340914]


author: Phil Sutter <psutter@redhat.com> [3.10.0-72.el7]
changelog:
  - macsec: cipher and icvlen can be set separately (Davide Caratti) [1354408]
  - ip {link,address}: add 'macsec' item to TYPE list (Davide Caratti) [1354702]
  - man: macsec: fix macsec related typos (Davide Caratti) [1354702 1354319]
  - Revert "Allow specifying bridge port STP state by name rather than number." (Phil Sutter) [1288042]
  - Revert "fix ip -force -batch to continue on errors" (Phil Sutter) [1288042]
  - Revert "ip: fix exit code for addrlabel" (Phil Sutter) [1288042]
  - Revert "link dump filter" (Phil Sutter) [1288042]
  - Revert "ip: return correct exit code on route failure" (Phil Sutter) [1288042]
  - Revert "ip: fix exit code for rule failures" (Phil Sutter) [1288042]
  - man: ip-link: Drop fou and gue related documentation (Phil Sutter) [1013584]
  - man: ip-link, ip-address: Drop references to ipvlan (Phil Sutter) [1013584]
  - doc, man: ip-rule: Remove incorrect statement about rule 0 (Phil Sutter) [1362561]


author: Phil Sutter <psutter@redhat.com> [3.10.0-73.el7]
changelog:
  - ip-link: add missing {min,max}_tx_rate to help text (Phil Sutter) [1340914]
  - man: ip-link.8: Document missing geneve options (Phil Sutter) [1339178]
  - iproute.spec: Fix for missing cbq.8 man page (Phil Sutter) [1362551]


author: liming <limingming.li@huawei.com> [3.10.0-74.h1]
changelog:
  - change proc to ipnetnsproc which is private for ip netns subcmd
  - do not delete namespace while net device still exist
  - update to iproute-2.6.10-74


author: lining<lining57@huawei.com> - 3.10.0-74.h3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix get_addr() and get_prefix() error messages
  This patch introduces a wrapper around family_name() which returns the
  string "any valid" for AF_UNSPEC instead of the three question marks
  unsuitable for use in error messages.


author: xuchunmei<xuchunmei@huawei.com> - 3.10.0-74.h4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:backport ipvlan support from https://git.kernel.org/pub/scm/network/iproute2/iproute2.git


author: Jakub Čajka <jcajka@redhat.com> - 2.4.2-1
changelog:
  - Resolves: #1088562 - [7.1 FEAT] iprutils package update - ppc64
  - Resolves: #1044679 - iprutils should use systemd
  - Resolves: #1092519 - iprutils - PIE and RELRO check


author: Jakub Čajka <jcajka@redhat.com> - 2.4.8-1
changelog:
  - Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le
  - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.14-1
changelog:
  - New upstream release.
  - Fix scriptlets, ldconfig is needed for the libs subpackage, not the main one.


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 1.0.0-6
changelog:
  - Removed gpg key check during build RHBZ#1248529
  - Fixed the license tag to include external code RHBZ#1248538
  - Use full path url RHBZ#1251149


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 1.0.0-7
changelog:
  - Added dependency on python-requests for client RHBZ#1254644
  - Fixed possible XSS flaws CVE-2015-5215, CVE-2015-5216
  - Fixed permission check CVE-2015-5217


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 1.0.0-8
changelog:
  - Moved ipsilon-client-install man page to client subpackage RHBZ#1255103
  - Backported patch to count IPA as login plugin RHBZ#1256517
  - Backported patch to log error if nameid is invalid RHBZ#1256520
  - Backported patch to add city attribute RHBZ#1257213


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 1.0.0-9
changelog:
  - Backport database keys patch RHBZ#1252392
  - Backport SAML path check patch RHBZ#1253821
  - Backport database cleanup RHBZ#1256518


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-9
changelog:
  - fixed missing system hang at shutdown if root device is network based
    (RHBZ#1007934)
  - Fixed iptables-save man page completely wrong (RHBZ#1054871)
  - Fixed missing reload action for iptables service (RHBZ#1066007)
  - Fixed regressions from RHEL-6 iptables services (RHBZ#1067670)


author: Jan Synáček <jsynacek@redhat.com> - 20121221-7
changelog:
  - ping returns odd results with options inet6 in resolv.conf (#1210331)
  - count of "back" is not correct in tracepath (#1208372)


author: Jan Synáček <jsynacek@redhat.com> - 20121207-1
changelog:
  - Update to iputils-s20121207 (#884983) - fixes a ping segfault introduced
    by the previous update
  - Update ninfod-minor patch
  - Renumber patches
  - Fix -F switch (flowlabel patch)


author: wangxiaogang3@huawei.com 1.0.1-8
changelog:
  - Type:bugfix
  - SUG:rstart
  - DEC: fix free_percpu double free caused BUG ON and fix consisent sh bug


author: wangxiaogang3@huawei.com 1.0.1-9
changelog:
  - Type:bugfix
  - SUG:rstart
  - DEC: fix configure clean up bug when create and remove bridge networkmode docker image


author: wangxiaogang3@huawei.com - 1.0.1-11
changelog:
  - Type: bufix
  - SUG:  restart
  - DEC:  fix thread schedule be Preempted cause MD5 algorithm oops when use consist hash


author: hu.huyan@huawei.com - 1.0.1-13
changelog:
  - Type: enhancement
  - SUG:  restart
  - DEC:  drop the udp packets which are not to vport for nmap scan


author: wangxiaogang3@huawei.com - 1.0.1-14
changelog:
  - Type: bugfix
  - SUG:  restart
  - DEC:  fix overlay Network create special packet lead to lvs out of memory and coredump


author: hu.huyan@huawei.com 1.0.1-17
changelog:
  - Type:bugfix
  - SUG:rstart
  - DEC: add the initialization of ip_vs_dest_entry and ip_vs_timeout_user data structure
  -      to prevent kernel stack information from being leaked


author: hu.huyan@huawei.com 1.0.1-18
changelog:
  - Type:bugfix
  - SUG:rstart
  - DEC: add the judgment of cmd in do_ip_vs_get_ctl and do_ip_vs_set_ctl fun to prevent the array bound
  -      and decrease the number of svc usecnt in do_ip_vs_set_ctl fun for avoid kernel resource leak


author: wangxiaogang3@huawei.com - 1.0.1-20
changelog:
  - Type: bugfix
  - SUG:  restart
  - DEC:  fix weak_update entry not remove caused "ipvs-switch fnat" depmod failed warning,
  	and when kernel version not matched ipvs's kernenl version print "install ipvs-fnat first!!!" 
  	cause ipvs function unavailable.


author: wangxiaogang3@huawei.com - 1.0.1-22
changelog:
  - Type: bugfix
  - SUG:  restart
  - DEC:  consh fix memory leak risk and after free data put data to NULL to avoid error pointer addr


author: hu.huyan@huawei.com - 1.0.1-23
changelog:
  - Type: enhancement
  - SUG:  restart
  - DEC: drop the udp packets which send to only-tcp-vip and the same to tcp packets for nmap scan


author: wangxiaogang3@huawei.com - 1.0.1-24
changelog:
  - Type: enhancement
  - SUG:  restart
  - DEC: fix crypto module not free and ipvs_rb_lookup func can't exit when entry->key equal to  key


author: hu.huyan@huawei.com - 1.0.1-25
changelog:
  - Type: enhancement
  - SUG:  restart
  - DEC:  modify the permission of ip_vs_allow_client, ip_vs_est, ip_vs_exclude_client, ip_vs_ext_stats from 444 to 440


author: hu.huyan@huawei.com - 1.0.1-28
changelog:
  - Type: enhancement
  - SUG:  restart
  - DEC:  change the permission mode of directory from 755 to 750, and ko from 644 to 640


author: zhengshaoyu<zhengshaoyu@huawei.com> - 1.0.1-31
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix softlock, fix NULL in func ip_vs_info_seq_show  and other oops


author: zhengshaoyu<zhengshaoyu@huawei.com> - 1.0.1-32
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:revert fix softlock, fix NULL in func ip_vs_info_seq_show  and other oops


author: wangxiaogang<wangxiaogang3@huawei.com> - 1.0.1-46
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC: lvs_index should expand to 16 bit to distinguish lvs cluster


author: lansheng<lansheng@huawei.com> - 1.0.1-51
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: add protection for vxlan encap in case of sk_buff no memory


author: XiaoGang Wang<wangxiaogang3@huawei.com> - 1.0.1-65
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: fix qos flow_control_interval set 0, cause status residual


author: Ruijun Ge<geruijun@huawei.com> - 1.0.1-66
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC: add proc ip_vs_stats_info to show tcp connection statistics


author: Ruijun Ge<geruijun@huawei.com> - 1.0.1-67
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: add in2out_xmit_suc statistics in ip_vs_fast_response_xmit function


author: XiaoGang Wang<wangxiaogang3@huawei.com> - 1.0.1-68
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: __ip_vs_del_service del svc->timer don't success,but svc free in rcu_call,
  cause timer in use svc is freed.


author: Jie Liu<liujie165@huawei.com> - 1.0.1-79
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC: send back a reset packet when receives an untracked tcp packet


author: lansheng<lansheng@huawei.com> - 1.0.1-81
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: fix rlock caused by svc conns lock without softirq disable


author: lansheng<lansheng@huawei.com> - 1.0.1-82
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: fix rlock caused by rmmod ip_vs when lots of conns exist


author: wangxiaogang3@huawei.com 1.0-2
changelog:
  - Type:bugfix
  - SUG:rstart
  - DEC: fix special packet part of tcp option  locate in noliner region will cause toa analyzed error.


author: hu.huyan@huawei.com 1.0-5
changelog:
  - Type: bugfix
  - SUG:  rstart
  - DEC:  change the permission mode of directory from 755 to 750, and ko from 644 to 640


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-4.gitc4bce43
changelog:
  - ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
  - Resolves: bz#1062644
    (pxe boot fails if next-server details come from a different dhcp server)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-5.gitc4bce43.el7
changelog:
  - ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
  - ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
  - ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
  - ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
  - ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
  - ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
  - ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
  - Resolves: bz#1031518
    (iPXE does not honor specified boot device)
  - Resolves: bz#857123
    (Guests never get an iPXE prompt)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-6.gitc4bce43.el7
changelog:
  - ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
  - ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
  - ipxe-redhat-delete-useless-editor-backup-of-spec.template.patch [bz#1084561]
  - ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
  - Resolves: bz#1084561
    (RFE: ship UEFI drivers for ipxe in RHEL-7.y)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-7.gitc4bce43.el7
changelog:
  - ipxe-Extract-timing-parameters-out-to-config-dhcp.h.patch [bz#1196352]
  - ipxe-Use-spec-compliant-timeouts.patch [bz#1196352]
  - Resolves: bz#1196352
    ([RFE] option to increase gpxe retry timeout)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.6-5
changelog:
  - Fixed irqbalance web adresses in spec (bz1060810)
  - Default hintpolicy adjusted (bz1060814)
  - Missing autogen.sh call fixed


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.8.15-8
changelog:
  - Fixed crash that can occur if term is resized during irssi init
    (init-resize-crash-fix patch)
    Resolves: rhbz#796457


author: zhangyi <zhangyi79@huawei.com> - 0.8.15-16.h1
changelog:
  - Type:cves
  - ID:CVE-2017-7191
  - SUG:NA
  - DESC:The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service (use-after-free) and possibly execute arbitrary code via unspecified vectors.


author: lirui<lirui130@huawei.com> - 0.8.15-16.h4
changelog:
  - Type:cves
  - ID:CVE-2017-5193 CVE-2017-5194 CVE-2017-5356 CVE-2017-9468 CVE-2017-9469 CVE-2017-10965 CVE-2017-10966
  - SUG:restart
  - DESC:Fix CVE-2017-5193 CVE-2017-5194 CVE-2017-5356 CVE-2017-9468 CVE-2017-9469 CVE-2017-10965 CVE-2017-10966


author: lingsheng<lingsheng@huawei.com> - 0.8.15-16.h5
changelog:
  - Type:cves
  - ID:CVE-2018-5205 CVE-2018-5206 CVE-2018-5207
  - SUG:restart
  - DESC:fix CVE-2018-5205 CVE-2018-5206 CVE-2018-5207


author: xuewenzhen<euleros@huawei.com> - 6.2.0.873-33.2.h4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add sleep in service so systemd can get the right pidfile


author: zhaiwenbin<zhaiwenbin1@huawei.com> - 6.2.0.873-33.2.h5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Use timeout when waiting for responses from iscsid and not to send stop
    to iscsid if iscsid is absent(github)
  - DESC:Fix-coredump-when-printing-session-info(github)
  - DESC:not-send-stop-message-if-iscsid-absent and monitored by systemd
  - DESC:treat SIGTERM like "iscsiadm -k 0"(github)
  - DESC:iscsid-SIGTERM-syncprocess-hang
  - DESC:fix timeout setting on discoverydb commands(github)
  - DESC:fix timeout setting on session commands


author: yaoxin<yaoxin23@huawei.com> - 6.2.0.873-33.2.h10
changelog:
  - Type:cves
  - ID:CVE-2020-13987 CVE-2020-13988 CVE-2020-17437
  - SUG:restart
  - DESC:fix CVE-2020-13987 CVE-2020-13988 CVE-2020-17437


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-29
changelog:
  - 1166713 1187792 add missing ExecStart, only newer systemd lets that be optional for oneshot services


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-32
changelog:
  - 1235684 apply safe_logout setting to flashnode sessions as well
    but only when logging out by session id, not by flashnode index


author: Than Ngo <than@redhat.com> - 3.2-94
changelog:
  - Resolves: bz#1060370
    update patch to handle all cases by recursing through fmtmsg
    instead of vfmtmsg directly which depends on va_list type.


author: Chris Leech <cleech@redhat.com> - 0.93-4
changelog:
  - set hardened build flag, required for long running processes (isnsd)
  - patch makefile to actually use LDFLAGS


author: Brian C. Lane <bcl@redhat.com> 1.0.9-1
changelog:
  - Add python-isomd5sum package with python bindings
  - Add callback and interrupt support to the python library
  - Add RPM_OPT_FLAGS to CFLAGS and update makefile to use CFLAGS from environment


author: Brian C. Lane <bcl@redhat.com> 1.0.10-1
changelog:
  - Fix for gcc type-punned and sizeof pointer warnings. (bcl)
  - Add exit code 2 for user abort (#907600) (bcl)
  - Cleanup TABs and update Copyrights (bcl)
  - Standardize *FLAGS in Makefile (ryan)


author: hanzhijun<hanzhijun1@huawei.com> - 1:0-0.15.release20050331.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Eliminate the timestamp difference swashes of the version.properties file


author: Jarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80c
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Adds Intel Quick Assist Technology firmware (rhbz 1127338)
  - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403)
  - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702)
  - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595)


author: Rafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfa
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256)
  - qat: Update to the latest upstream firmware (rhbz 1173792)
  - Use a common version number for both the iwl*-firmware packages and linux-firmware itself


author: Rafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5
changelog:
  - Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910)
  - Update skl firmware for gpu (rhbz 1210012)


author: Jarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5
changelog:
  - Add more old chelsio firmwares, they nuked the one the driver in
    RHEL7.2 is expecting from upstream (rhbz 1262128)
  - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)


author: Rafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)


author: Rafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - chelsio: Update to the latest firmware released version (rhbz 1395322)
  - iwlwifi: Update to the latest firmware released version (rhbz 1385749)
  - ath10k: Update to the latest firmware released version (rhbz 1385743)
  - hfi1: Update to the latest firmware released version (rhbz 1382805)


author: Rafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - chelsio: Update to the latest firmware released version (rhbz 1385911)
  - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)


author: Rafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8d
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)


author: Rafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)


author: Michal Srb <msrb@redhat.com> - 0:1.1.2-13
changelog:
  - Prevent XXE and RCE in JSTL XML tags
  - Apply correction for previous CVE-2015-0254 patch (prevent XXE in <x:transform>)
  - Resolves: CVE-2015-0254


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171211)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)


author: Josef Ridky <jridky@redhat.com> - 1.900.1-30
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: shijian<shijian16@huawei.com> - 1.900.1-33.h1
changelog:
  - Type:cves
  - ID:CVE-2017-6852 CVE-2017-13748 CVE-2017-13751
  - SUG:restart
  - DESC:fix CVE-2017-6852 CVE-2017-13748 CVE-2017-13751


author: shijian<shijian16@huawei.com> - 1.900.1-33.h2
changelog:
  - Type:cves
  - ID:CVE-2018-9055 CVE-2018-19539 CVE-2018-19540 CVE-2018-19541 CVE-2018-19542
  - SUG:restart
  - DESC:fix CVE-2018-9055 CVE-2018-19539 CVE-2018-19540 CVE-2018-19541 CVE-2018-19542


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.5
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.0
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Separate SystemTap option from bootstrap options.
  - Depend on mailcap for /etc/mime.types (PR2800)
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Fix context for rpath patch following PR3140.
  - Add RHEL version of b40 tarball.
  - Require mailcap at build time as well, so configure finds /etc/mime.types
  - Resolves: rhbz#1350046


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.1
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350046


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.3
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350046


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.5
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.8
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.9
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.3
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.2
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.3
changelog:
  - Add additional changes to 8162344 to fix issues which only show up on a full build.
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.4
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Use readlink rather than a wildcard to resolve the system JDK directory
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.5
changelog:
  - Change to disable RC4 did not add MD5 checksum of previous java.security file from 2016/01
  - Resolves: rhbz#1350042


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.111-2.6.7.6
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.7
changelog:
  - Rebuild java-1.7.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372747)
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.0
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1410612


author: Forrest <linyanly.lin@huawei.com> - 1:1.7.0.131-2.6.9.0
changelog:
  - Type:cves
  - ID:CVE-2016-5546|CVE-2016-5547|CVE-2016-5548|CVE-2016-5552|CVE-2017-3231|CVE-2017-3241|CVE-2017-3252|CVE-2017-3253|CVE-2017-3261|CVE-2017-3272|CVE-2017-3289
  - SUG:false
  - DESC: fix CVE-2016-5546|CVE-2016-5547|CVE-2016-5548|CVE-2016-5552|CVE-2017-3231|CVE-2017-3241|CVE-2017-3252|CVE-2017-3253|CVE-2017-3261|CVE-2017-3272|CVE-2017-3289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.0
changelog:
  - Bump to 2.6.10 and u141b00.
  - Adjust RH1022017 following application of 8173783
  - Add more detailed output to fsg.sh and generate_source_tarball.sh.
  - Update md5sum list with checksum for the new java.security file.
  - Bump to u141b01 to include S8043723 fix for s390.
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.3
changelog:
  - Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
  - Apply backports before local RPM fixes so they will be the same as when applied upstream
  - Adjust RH1022017 following application of 8173783
  - Resolves: rhbz#1422738


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.1
changelog:
  - Bump to 2.6.10 and u141b00.
  - Add more detailed output to fsg.sh and generate_source_tarball.sh.
  - Update md5sum list with checksum for the new java.security file.
  - Drop 8173783 backport which is now applied upstream.
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.3
changelog:
  - Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
  - Resolves: rhbz#1273760


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.4
changelog:
  - Fix merge error with "native2ascii changes file permissions of input file"
  - Resolves: rhbz#1446700


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.141-2.6.10.5
changelog:
  - make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
  - aligned with this change, applied repackReproduciblePolycies.sh
  - 1183793 is missing blocker
  - Resolves: rhbz#1448880


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.151-2.6.11.1
changelog:
  - Bump to 2.6.11 and u151b00.
  - Update java-access-bridge-security.patch to apply against 2.6.11.
  - Drop 7177216 merge fix which is applied upstream.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.2
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Update jstack tapset to handle AArch64
  - Handle unsupported architectures by calling the error function rather than a parse failure
  - ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
  - Resolves: rhbz#1373986


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.161-2.6.12.0
changelog:
  - Bump to 2.6.12 and u161b00.
  - Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
  - Drop 8185716 patch, now applied upstream.
  - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.161-2.6.12.0
changelog:
  - Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Bump to 2.6.13 and u171b01.
  - Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
  - Drop PR3497 AArch64 patch now applied upstream.
  - Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
  - Fix file path in rh1022017.patch.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Update to new tarball with AArch64 return value fixes, dropping local patch.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.0
changelog:
  - Bump to 2.6.14 and u181b00.
  - Drop 8197981 Zero 32-bit patch now applied upstream.
  - Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.1
changelog:
  - Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.3
changelog:
  - Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
  - Resolves: rhbz#1559766


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.181-2.6.14.5
changelog:
  - added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
  - Resolves: rhbz#1559766


author: zhangshaoning<zhangshaoning1@huawei.com> - 1.7.0.181-2.6.14.5
changelog:
  - Type:cves
  - ID:CVE-2018-2790 CVE-2018-2794 CVE-2018-2795 CVE-2018-2796 CVE-2018-2797 CVE-2018-2798 CVE-2018-2799 CVE-2018-2800 CVE-2018-2814 CVE-2018-2815
  - SUG:restart
  - DESC:update to version 1.7.0.181-2.6.14.5


author: xuewenzhen<euleros@huawei.com> - 1.7.0.181-2.6.14.8
changelog:
  - Type:security
  - ID:CVE-2018-3639
  - SUG:restart
  - DESC:upgrade from 1.7.0.181-2.6.14.5 to 1.7.0.181-2.6.14.8


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.10
changelog:
  - Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.191-2.6.15.0
changelog:
  - Bump to 2.6.15 and u191b00.
  - Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
  - Resolves: rhbz#1594249


author: zhangshaoning<zhangshaoning1@huawei.com> - 1.7.0.191-2.6.15.4
changelog:
  - Type:security
  - ID:CVE-2018-2952
  - SUG:restart
  - DESC:upgrade from 1.7.0.181-2.6.14.8 to 1.7.0.191-2.6.15.4


author: lunankun<lunankun@huawei.com> - 1.7.0.191-2.6.15.4.h2
changelog:
  - Type:cves
  - ID:CVE-2019-2698 CVE-2019-2602 CVE-2019-2684
  - SUG:restart
  - DESC:fix CVE-2019-2698 CVE-2019-2602 CVE-2019-2684


author: yaoxin<yaoxin23@huawei.com> - 1.7.0.191-2.6.15.4.h9
changelog:
  - Type:cves
  - ID:CVE-2019-2945 CVE-2019-2962 CVE-2019-2964 CVE-2019-2978 CVE-2019-2973 CVE-2019-2981 CVE-2019-2983
  - SUG:restart
  - DESC:fix CVE-2019-2945 CVE-2019-2962 CVE-2019-2964 CVE-2019-2978 CVE-2019-2973 CVE-2019-2981 CVE-2019-2983


author: yaoxin<yaoxin23@huawei.com> - 1.7.0.191-2.6.15.4.h11
changelog:
  - Type:cves
  - ID:CVE-2019-2762 CVE-2019-2769 CVE-2019-2786
  - SUG:restart
  - DESC:fix CVE-2019-2762 CVE-2019-2769 CVE-2019-2786


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.181-2.6.14.10
changelog:
  - jsa files changed to 444 to pass rpm verification
  - Add reg-ex for filtering private libraries' provides/requires.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14
changelog:
  - Update to aarch64-jdk8u102-b14.
  - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102.
  - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31.
  - Move 8158260 to 8u112 section following its backport to 8u.
  - Resolves: rhbz#1359857


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14
changelog:
  - @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005)
  - Resolves: rhbz#1295754


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1295754


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14
changelog:
  - Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750)
  - Resolves: rhbz#1359857


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14
changelog:
  - Runtime native library requirements need to match the architecture of the JDK
  - Resolves: rhbz#1375224


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14
changelog:
  - Update to aarch64-jdk8u111-b14.
  - Add latest md5sum for java.security file due to jar signing property addition.
  - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111.
  - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy.
  - Resolves: rhbz#1350037


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15
changelog:
  - Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it.
  - Resolves: rhbz#1382736


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18
changelog:
  - Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes
  - Replace our correct version of 8159244 with the amendment to the 8u version from 8160122.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18
changelog:
  - Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-0.b16
changelog:
  - Update to aarch64-jdk8u112-b16.
  - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
  - Re-generate size_t and key size (RH1163501) patches against u112.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-0.b13
changelog:
  - Update to aarch64-jdk8u121-b13.
  - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted)
  - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13
changelog:
  - Add backports from 8u131 and 8u152 ahead of April CPU.
  - Apply backports before local RPM fixes so they will be the same as when applied upstream
  - Adjust RH1022017 following application of 8173783
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11
changelog:
  - Update to aarch64-jdk8u131-b11.
  - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
  - Update generate_source_tarball.sh to remove patch remnants.
  - Cleanup tarball creation documentation to avoid duplication.
  - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing)
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b13
changelog:
  - Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command"
  - Resolves: rhbz#1442162


author: zhangyi <zhangyi79@huawei.com> - 1.8.0.131-2.b11
changelog:
  - Type:cves
  - ID:CVE-2017-3509,CVE-2017-3511,CVE-2017-3526,CVE-2017-3533,CVE-2017-3539,CVE-2017-3544
  - SUG:NA
  - DESC:1)CVE-2017-3509,CVE-2017-3539:Only affect client deployments that run untrusted code. Airlock WAF is not affected.
         2)CVE-2017-3511:Code Injection through DLL Sideloading in 64bit Oracle Java
         3)CVE-2017-3526:This issue in the JAXP component may allow denial of service attacks
           when parsing XML files. Airlock WAF is not affected because all XML input is trusted.
           The Airlock SOAP and XML filter are not affected, because Airlock WAF enforces size limits on XML documents.
         4)CVE-2017-3533:This can lead to XML external entity attacks (XXE),
           allowing remote users, e.g., to execute SMTP or FTP commands on the machine being attacked,
           or to open firewall ports.Airlock WAF is not affected because all XML input is trusted.
           The Airlock SOAP and XML filter are not affected by default since DTDs are not allowed.
         5)CVE-2017-3544:This allows manipulations of SMTP connections by inserting newline characters into sender
           or recipient addresses when sending mails. Airlock WAF is not affected because the affected Java SMTP client is not used.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b12
changelog:
  - Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix
  - Resolves: rhbz#1449258


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b12
changelog:
  - Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-0.b15
changelog:
  - Update to aarch64-jdk8u141-b15.
  - Update location of OpenJDK system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
  - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
  - Add MD5 checksum for the new java.security file (SHA1 disabled for server-side certificates in jdkCA)
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b16
changelog:
  - Update to aarch64-jdk8u141-b16.
  - Revert change to remove-intree-libraries.sh following backout of 8173207
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
  - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162.
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - repack policies adapted to new counts and paths
  - note that also c-j-c is needed to make this apply in next update
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-5.b12
changelog:
  - Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
  - Resolves: rhbz#1515212


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
  - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
    8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
    8175887 and 8180048 (RH1449870).(mbalao)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-0.b13
changelog:
  - Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12
changelog:
  - Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
  - Remove upstreamed patches for 8181055/PR3394/RH1448880,
  -  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
  -  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
  -  8181810/PR3466/RH1498319.
  - Resolves: rhbz#1559766


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-1.b10
changelog:
  - Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10
changelog:
  - Cleanup from previous commit.
  - Remove unused upstream patch 8167200.hotspotAarch64.patch.
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10
changelog:
  - Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10
changelog:
  - Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-7.b10
changelog:
  - Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
  - Resolves: rhbz#1559766


author: zhangshaoning<zhangshaoning1@huawei.com> - 1.8.0.171-7.b10
changelog:
  - Type:cves
  - ID:CVE-2018-2790 CVE-2018-2794 CVE-2018-2795 CVE-2018-2796 CVE-2018-2797 CVE-2018-2798 CVE-2018-2799 CVE-2018-2800 CVE-2018-2814 CVE-2018-2815
  - SUG:restart
  - DESC:upgrade to version 1.8.0.171-7.b10


author: xuewenzhen<euleros@huawei.com> - 1.8.0.171-8.b10
changelog:
  - Type:security
  - ID:CVE-2018-3639
  - SUG:restart
  - DESC:upgrade from 1.8.0.171-7.b10 to 1:1.8.0.171-8.b10


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-0.b03
changelog:
  - Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
  - Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b04
changelog:
  - Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13
changelog:
  - Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
  - Remove 8187577/PR3578 now applied upstream.
  - Resolves: rhbz#1594249


author: liuzongyu<euleros@huawei.com> - 1.8.0.181-7.b13
changelog:
  - Type:security
  - ID:CVE-2018-2952
  - SUG:restart
  - DESC:upgrade from 1.8.0.171-8.b10 to 1.8.0.181-7.b13


author: tangxiaolan<tangxiaolan9@huawei.com> - 1.8.0.191.b12-0.h6
changelog:
  - Type:cves
  - ID:CVE-2020-2803 CVE-2020-2805 CVE-2020-14556 CVE-2020-14577 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 CVE-2020-14579 CVE-2020-14578
  - SUG:restart
  - DESC:fix CVE-2020-2803 CVE-2020-2805 CVE-2020-14556 CVE-2020-14577 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 CVE-2020-14579 CVE-2020-14578


author: yaoxin<yaoxin23@huawei.com> - 1.8.0.191.b12-0.h7
changelog:
  - Type:cves
  - ID:CVE-2020-14796 CVE-2020-14797 CVE-2020-14803 CVE-2020-14782
  - SUG:restart
  - DESC:fix CVE-2020-14796 CVE-2020-14797 CVE-2020-14803 CVE-2020-14782


author: yaoxin<yaoxin23@huawei.com> - 1.8.0.191.b12-0.h8
changelog:
  - Type:cves
  - ID:CVE-2020-14779 CVE-2020-14781 CVE-2020-14792
  - SUG:restart
  - DESC:fix CVE-2020-14779 CVE-2020-14781 CVE-2020-14792


author: yaoxin<yaoxin23@huawei.com> - 1.8.0.191.b12-0.h10
changelog:
  - Type:cves
  - ID:CVE-2020-2604 CVE-2020-2654 CVE-2020-2659 CVE-2020-2754 CVE-2020-2755 CVE-2020-2756 CVE-2020-2757 CVE-2020-2773 CVE-2020-2781 CVE-2020-2800 CVE-2020-2830
  - SUG:restart
  - DESC:fix CVE-2020-2604 CVE-2020-2654 CVE-2020-2659 CVE-2020-2754 CVE-2020-2755 CVE-2020-2756 CVE-2020-2757 CVE-2020-2773 CVE-2020-2781 CVE-2020-2800 CVE-2020-2830


author: yaoxin<yaoxin23@huawei.com> - 1.8.0.191.b12-0.h12
changelog:
  - Type:cves
  - ID:CVE-2019-2987 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999
  - SUG:restart
  - DESC:fix CVE-2019-2987 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999


author: yaoxin<yaoxin23@huawei.com> - 1.8.0.191.b12-0.h14
changelog:
  - Type:cves
  - ID:CVE-2019-2945 CVE-2019-2964 CVE-2019-2975 CVE-2019-2978 CVE-2019-2973 CVE-2019-2981 CVE-2019-2983
  - SUG:restart
  - DESC:fix CVE-2019-2945 CVE-2019-2964 CVE-2019-2975 CVE-2019-2978 CVE-2019-2973 CVE-2019-2981 CVE-2019-2983


author: yaoxin<yaoxin23@huawei.com> - 1.8.0.191.b12-0.h15
changelog:
  - Type:cves
  - ID:CVE-2019-2762 CVE-2019-2769 CVE-2019-2786 CVE-2019-2842 CVE-2019-2962
  - SUG:restart
  - DESC:fix CVE-2019-2762 CVE-2019-2769 CVE-2019-2786 CVE-2019-2842 CVE-2019-2962


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b10.
  - Drop 8146115/PR3508/RH1463098 applied upstream.
  - Resolves: rhbz#1633817


author: zhangshaoning<euleros@huawei.com> - 1.8.0.191.b12-0
changelog:
  - Type:security
  - ID:CVE-2018-3136 CVE-2018-3139 CVE-2018-3149 CVE-2018-3169 CVE-2018-3180 CVE-2018-3183 CVE-2018-3214
  - SUG:restart
  - DESC:update to version 1.8.0.191.b12


author: yaolijun<yaolijun2@huawei.com> - 1.8.0.191.b12-0.h4
changelog:
  - Type:cves
  - ID:CVE-2019-2698，CVE-2019-2602，CVE-2019-2684
  - SUG:NA
  - DESC:fix CVE-2019-2698，CVE-2019-2602，CVE-2019-2684


author: hanzhijun<hanzhijun1@huawei.com> - 1.4.6-8.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add huawei-remove-timestamp.patch,for eliminate timestamp difference


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.3.1-2
changelog:
  - Remove workaround for guice-no_aop
  - Remove fedora-review subpackage
  - Resolves: rhbz#1016667
  - Related: rhbz#1015158


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.1.3-7
changelog:
  - Remove unneeded dependency from POM: maven-cobertura-plugin
  - Remove unneeded dependency from POM: maven-findbugs-plugin
  - Resolves: rhbz#880692


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Ville Skyttä <ville.skytta@iki.fi> - 20091111-6
changelog:
  - Address more comments/TODO's from #655601:
  - Patch test suite generation to use Xalan.
  - Include license texts in jing-javadoc.
  - Make datatype-sample buildable out of the box, drop prebuilt jar.


author: Ville Skyttä <ville.skytta@iki.fi> - 20091111-10
changelog:
  - Tweak java-devel build dep for buildability without Java 1.6.
  - Fix build classpath with recent TestNG.


author: Jan Pokorný <jpokorny@redhat.com> - 20091111-14
changelog:
  - Resync with recent spec file changes in Fedora by Ville Skyttä:
  - BuildRequire ant instead of -trax (non-EL).
  - Depend on headless JRE where available.
  - Fix build (#1048867) and depend on headless JRE on EL7


author: Chris Spike <spike@fedoraproject.org> 2.1-1.tzdata2012g
changelog:
  - Updated to 2.1
  - New tzdata (2012g)
  - Updated spec file according to latest java packaging guidelines


author: Parag <pnemade AT redhat DOT com> - 0.003-13
changelog:
  - Resolves:rh#847621 - better enabling autohinting by default
  - Resolves:rh#847623 - fontconfig file isn't shipped in rpm
  - Resolves:rh#847627 - Malformed fontconfig config file


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1:1.8.5-11
changelog:
  - Thanks to Ville Skyttä (bz#875343) build against libedit instead of readline
  	what simplify licensing apparently without any loss of functionality


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1:1.8.5-20
changelog:
  - Add Patch9: js-1.8.5-array-recursion.patch (bz#1178141 - http://hg.mozilla.org/mozilla-central/rev/a7b220e7425a)
  - Add %check section


author: Than Ngo <than@redhat.com> - 1:1.8.5-25
changelog:
  - Disable optimizations which caused regressions with new gcc
    Use fedora default -O2 instead of mozjs -O3


author: cwx519943 <cangyi@huawei.com> - 1.0.2-1.h1
changelog:
  -TYPE: bugfix
  -SUG: NA
  -DESC: json gvariant Parse json doubles that are whole numb
  -DESC: parser Correctly increment the array index counter
  -DESC: parser Detect missing commas in arrays


author: Juan Hernandez <juan.hernandez@redhat.com> 1.1.1-1
changelog:
  - Adapted (mostly copied, in fact) from the corresponding package from Mageia
    (http://www.mageia.org) with support from Gil Cattaneo <puntogil@libero.it>.


author: Christina Fu <cfu@redhat.com> - 4.2.6-35
changelog:
  - Bugzilla Bug #1040640 - Incorrect OIDs for SHA2 algorithms
    (cfu for jnimeh@gmail.com)
  - Bugzilla Bug #1133718 - Key strength validation is not performed for RC4
    algorithm (nkinder)
  - Bugzilla Bug #816396 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS (cfu)


author: Michal Srb <msrb@redhat.com> - 0:4.11-7
changelog:
  - Drop "-SNAPSHOT" from version ID
  - See: https://lists.fedoraproject.org/pipermail/java-devel/2013-August/004923.html


author: zhangyi <zhangyi79@huawei.com> - 04.11-8.h1
changelog:
  - Type:recommended
  - SUG:NA
  - DESC:Add "0001-del-InaccessibleBaseClassTest.patch" to solve obs build error.


author: Michal Srb <msrb@redhat.com> - 0:4.10-7
changelog:
  - Build-time dependency perl-MD5 replaced with perl(Digest::MD5)
  - Description cleanup (Resolves: #888389)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-3
changelog:
  - Include xkb layouts from xkeyboard-config converted to console keymaps
  - Add version to vlock provides
    Resolves: #902564


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Wei Chen<euleros@huawei.com> - 5.0-0.7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DEC:check the mount value to avoiding kbox module reference count increase


author: Wei Chen<euleros@huawei.com> - 5.0-2.5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DEC:remove the config action for kbox related parameters in /etc/kdump.conf


author: Jialong Chen<euleros@huawei.com> - 5.0-3.3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DEC:Use the architecture to determine whether it is a generic arm64 version


author: wangchang<wangchang10@huawei.com> - 5.0-4.2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:print kernel process name when kernel excute reboot command.


author: zhangshaoning<euleros@huawei.com> - 5.0-4.5
changelog:
  - Type:security
  - ID:NA
  - SUG:restart
  - DESC:security reason,optimize some ICSL buffer problems of strlen() and strncpy()


author: hu.huyan@huawei.com - 1.2.13-22.h8
changelog:
  - Type: bugfix
  - SUG:  restart
  - DEC:  change get_local_name() from gethostbyname() to getipaddrinfo() and only
          when the values did not be setted then set the values in set_default_values()


author: hu.huyan@huawei.com - 1.2.13-22.h9
changelog:
  - Type: enhancement
  - SUG:  restart
  - DEC:  for all rs are alived before healthcheck, we need to not in alpha mode.
          But the product need to execute quorum_up to set the vip when start the vs,
          so add the code in init_service_vs


author: hu.huyan@huawei.com - 1.2.13-22.h10
changelog:
  - Type: enhancement
  - SUG:  restart
  - DEC:  change the permission mode of scripts from 755 to 750, and 
  	chmod 640 /var/run/keepalived.pid.save


author: Suanming Mou<mousuanming@huawei.com> - 1.2.13-22.h20
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:not alive rs not be add without alpha feature support.


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.2.1.el7]
changelog:
  - [netdrv] macvtap: unbreak receiving of gro skb with frag list (Jason Wang) [1279794 1273737]
  - [net] ipv6: drop frames with attached skb->sk in forwarding (Hannes Frederic Sowa) [1281701 1243966]
  - [net] ipv6: ip6_forward: perform skb->pkt_type check at the beginning (Hannes Frederic Sowa) [1281701 1243966]
  - [net] sctp: Fix race between OOTB responce and route removal (Jamie Bainbridge) [1281426 1277309]
  - [x86] mm: fix VM_FAULT_RETRY handling (Andrea Arcangeli) [1281427 1277226]
  - [x86] mm: consolidate VM_FAULT_RETRY handling (Andrea Arcangeli) [1281427 1277226]
  - [x86] mm: move mmap_sem unlock from mm_fault_error() to caller (Andrea Arcangeli) [1281427 1277226]
  - [mm] let mm_find_pmd fix buggy race with THP fault (Larry Woodman) [1281424 1273993]
  - [mm] ksm: unstable_tree_search_insert error checking cleanup (Andrea Arcangeli) [1281422 1274871]
  - [mm] ksm: use find_mergeable_vma in try_to_merge_with_ksm_page (Andrea Arcangeli) [1281422 1274871]
  - [mm] ksm: use the helper method to do the hlist_empty check (Andrea Arcangeli) [1281422 1274871]
  - [mm] ksm: don't fail stable tree lookups if walking over stale stable_nodes (Andrea Arcangeli) [1281422 1274871]
  - [mm] ksm: add cond_resched() to the rmap_walks (Andrea Arcangeli) [1281422 1274871]
  - [powerpc] kvm: book3s_hv: Synthesize segment fault if SLB lookup fails (Thomas Huth) [1281423 1269467]
  - [powerpc] kvm: book3s_hv: Create debugfs file for each guest's HPT (David Gibson) [1281420 1273692]
  - [powerpc] kvm: book3s_hv: Add helpers for lock/unlock hpte (David Gibson) [1281420 1273692]
  - [powerpc] pci: initialize hybrid_dma_data before use (Laurent Vivier) [1279793 1270717]
  - [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1279796 1267652]
  - [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1279796 1267652]
  - [md] raid10: submit_bio_wait() returns 0 on success (Jes Sorensen) [1279796 1267652]
  - [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1279796 1267652]
  - [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1279796 1267652]
  - [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1279796 1267652]
  - [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1279796 1267652]
  - [block] nvme: Fix memory leak on retried commands (David Milburn) [1279792 1271860]
  - [cpufreq] intel_pstate: fix rounding error in max_freq_pct (Prarit Bhargava) [1281491 1263866]
  - [cpufreq] intel_pstate: fix PCT_TO_HWP macro (Prarit Bhargava) [1273926 1264990]
  - [cpufreq] revert "intel_pstate: add quirk to disable HWP on Skylake-S processors" (Prarit Bhargava) [1273926 1264990]
  - [cpufreq] revert "intel_pstate: disable Skylake processors" (Prarit Bhargava) [1273926 1264990]
  - [x86] kvm: svm: unconditionally intercept #DB (Paolo Bonzini) [1279469 1279470] {CVE-2015-8104}
  - [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277560 1277561] {CVE-2015-5307}


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.5.1.el7]
changelog:
  - [net] vsock: Fix lockdep issue (Dave Anderson) [1292372 1253971]
  - [net] vsock: sock_put wasn't safe to call in interrupt context (Dave Anderson) [1292372 1253971]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.7.1.el7]
changelog:
  - [scsi] scsi_sysfs: protect against double execution of __scsi_remove_device() (Vitaly Kuznetsov) [1292075 1273723]
  - [powerpc] mm: Recompute hash value after a failed update (Gustavo Duarte) [1289452 1264920]
  - [misc] genwqe: get rid of atomic allocations (Hendrik Brueckner) [1289450 1270244]
  - [mm] use only per-device readahead limit (Eric Sandeen) [1287550 1280355]
  - [net] ipv6: update ip6_rt_last_gc every time GC is run (Hannes Frederic Sowa) [1285370 1270092]
  - [kernel] tick: broadcast: Prevent livelock from event handler (Prarit Bhargava) [1284043 1265283]
  - [kernel] clockevents: Serialize calls to clockevents_update_freq() in the core (Prarit Bhargava) [1284043 1265283]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.8.1.el7]
changelog:
  - [md] dm: fix AB-BA deadlock in __dm_destroy() (Mike Snitzer) [1296566 1292481]
  - [md] revert "dm-mpath: fix stalls when handling invalid ioctls" (Mike Snitzer) [1287552 1277194]
  - [cpufreq] intel_pstate: Fix limits->max_perf rounding error (Prarit Bhargava) [1296276 1279617]
  - [cpufreq] intel_pstate: Fix limits->max_policy_pct rounding error (Prarit Bhargava) [1296276 1279617]
  - [cpufreq] revert "intel_pstate: fix rounding error in max_freq_pct" (Prarit Bhargava) [1296276 1279617]
  - [crypto] nx: 842 - Add CRC and validation support (Gustavo Duarte) [1289451 1264905]
  - [powerpc] eeh: More relaxed condition for enabled IO path (Steve Best) [1289101 1274731]
  - [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275929 1273465] {CVE-2015-7872}
  - [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275929 1273465] {CVE-2015-7872}
  - [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275929 1273465] {CVE-2015-7872}
  - [x86] paravirt: Replace the paravirt nop with a bona fide empty function (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Fix a paravirt stack-clobbering bug in the NMI code (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Use DF to avoid userspace RSP confusing nested NMI detection (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Reorder nested NMI checks (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Improve nested NMI comments (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Switch stacks on userspace NMI entry (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.9.1.el7]
changelog:
  - [security] keys: Fix keyring ref leak in join_session_keyring() (David Howells) [1298931 1298036] {CVE-2016-0728}


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.10.1.el7]
changelog:
  - [of] return NUMA_NO_NODE from fallback of_node_to_nid() (Thadeu Lima de Souza Cascardo) [1300614 1294398]
  - [net] openvswitch: do not allocate memory from offline numa node (Thadeu Lima de Souza Cascardo) [1300614 1294398]


author: Jialong Chen <chenjialong@huawei.com> - 327.59.59.37.h22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DEC:mm: consolidate GFP_NOFAIL checks in the allocator slowpath.


author: Jialong Chen <chenjialong@huawei.com> - 327.59.59.37.h23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DEC:rollback irq_statistics patches for performance degradation.


author: Jialong Chen <chenjialong@huawei.com> - 327.59.59.46.h29
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DEC:vfio: Do not enter D3hot state when QLogic HBA card is used


author: Jialong Chen <chenjialong@huawei.com> - 327.59.59.46.h30
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DEC:fix CVE-2017-12188/CVE-2017-12192/CVE-2017-15649/CVE-2017-15299


author: Jialong Chen <chenjialong@huawei.com> - 327.59.59.46.h32
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DEC:fix CVE-2017-16525 CVE-2017-16526 CVE-2017-16527 CVE-2017-16528
  - CVE-2017-16529 CVE-2017-16530 CVE-2017-16531 CVE-2017-16532
  - CVE-2017-16533 CVE-2017-16534 CVE-2017-16535 CVE-2017-16536
  - CVE-2017-16537 CVE-2017-16538


author: Jialong Chen <chenjialong@huawei.com> - 327.59.59.46.h33
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DEC:fix CVE CVE-2017-7184.
  - bonding: discard lowest hash bit for 802.3ad layer3+4.


author: zwx398844 <zhangshaoning1@huawei.com> - 327.59.59.46.h34
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DEC:fix CVE-2017-16643,CVE-2017-16644,CVE-2017-16645,CVE-2017-16649,CVE-2017-16650


author: Jialong Chen <chenjialong@huawei.com> - 327.59.59.46.h36
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DEC:sched/rt.c: pick and check task if double_lock_balance() unlock the rq.


author: Jingxiao Lu <lujingxiao@huawei.com> - 327.59.59.46.h37
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DEC:reopen CONFIG_FANOTIFY_ACCESS_PERMISSIONS for PaaS TwistLock


author: zhangshaoning <zhangshaoning1@huawei.com> - 327.59.59.46.h41
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DEC:fix CVE-2017-15868、CVE-2017-8824、CVE-2017-17450、CVE-2017-17449、CVE-2017-17448、CVE-2017-1000407


author: wujiangtao <wu.wujiangtao@huawei.com> - 327.59.59.46.h44
changelog:
  - Type:cves
  - ID:CVE-2017-5715 CVE-2017-5754 CVE-2017-5753
  - SUG:restart
  - DEC:add the detail description of the intel cpu vulnerability information,there is no code update in this version.
  	[x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland {CVE-2017-5715}
  	[x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd  {CVE-2017-5715}
  	[x86] x86/kaiser/mm: convert userland visible "kpti" name to "pti" {CVE-2017-5754}
  	[x86] Revert "x86/entry: Use retpoline for syscalls indirect calls" {CVE-2017-5715}
  	[x86] x86/spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 {CVE-2017-5715}
  	[x86] x86/kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored {CVE-2017-5754}
  	[x86] x86/spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing {CVE-2017-5715}
  	[x86] x86/spec_ctrl: Documentation spec_ctrl.txt {CVE-2017-5715}
  	[x86] x86/spec_ctrl: remove irqs_disabled() check from intel_idle() {CVE-2017-5715}
  	[x86] x86/spec_ctrl: use enum when setting ibrs/ibpb_enabled {CVE-2017-5715}
  	[x86] x86/spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline {CVE-2017-5715}
  	[x86] x86/spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS {CVE-2017-5715}
  	[x86] x86/spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB {CVE-2017-5715}
  	[x86] x86/spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs {CVE-2017-5715}
  	[x86] x86/spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 {CVE-2017-5715}
  	[x86] x86/spec_ctrl: use IBRS_ENABLED instead of 1 {CVE-2017-5715}
  	[x86] x86/spec_ctrl: allow the IBP disable feature to be toggled at runtime {CVE-2017-5715}
  	[x86] x86/spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER {CVE-2017-5715}
  	[x86] x86/spec_ctrl: ibrs_enabled() is expected to return > 1 {CVE-2017-5715}
  	[x86] x86/spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible {CVE-2017-5715}
  	[x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU {CVE-2017-5715}
  	[x86] x86/spec_ctrl: clear registers after 32bit syscall stackframe is setup {CVE-2017-5715}
  	[x86] x86/spec_ctrl: reload spec_ctrl cpuid in all microcode load paths {CVE-2017-5715}
  	[x86] x86/kaiser/mm: fix pgd freeing in error path {CVE-2017-5754}
  	[x86] x86/mm/kaiser: disable global pages by default with KAISER {CVE-2017-5754}
  	Revert [x86] x86/mm/kaiser: Disable global pages by default with KAISER {CVE-2017-5754}
  	[x86] x86/spec_ctrl: Prevent unwanted speculation without IBRS {CVE-2017-5715 CVE-2017-5754}
  	[x86] x86/entry: Remove trampoline check from paranoid entry path {CVE-2017-5715 CVE-2017-5754}
  	[x86] x86/entry: Fix paranoid_exit() trampoline clobber {CVE-2017-5715 CVE-2017-5754}
  	[x86] x86/entry: Simplify trampoline stack restore code {CVE-2017-5715 CVE-2017-5754}
  	[x86] x86/dumpstack: Remove raw stack dump {CVE-2017-5715}
  	[x86] x86/spec_ctrl: remove SPEC_CTRL_DEBUG code {CVE-2017-5715}
  	[x86] x86/spec_ctrl: add noibrs noibpb boot options {CVE-2017-5715}
  	[x86] x86/entry: Use retpoline for syscall's indirect calls {CVE-2017-5715}
  	[x86] x86/syscall: Clear unused extra registers on 32-bit compatible syscall entrance {CVE-2017-5715}
  	[x86] x86/spec_ctrl: cleanup unnecessary ptregscall_common function {CVE-2017-5715}
  	[x86] x86/spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore {CVE-2017-5715}
  	[x86] x86/syscall: Clear unused extra registers on syscall entrance {CVE-2017-5715}
  	[x86] x86/spec_ctrl: rescan cpuid after a late microcode update {CVE-2017-5715}
  	[x86] x86/spec_ctrl: add debugfs ibrs_enabled ibpb_enabled {CVE-2017-5715}
  	[x86] x86/spec_ctrl: consolidate the spec control boot detection {CVE-2017-5715}
  	[x86] x86/KVM/spec_ctrl: allow IBRS to stay enabled in host userland {CVE-2017-5715}
  	[x86] x86/spec_ctrl: add debug aid to test the entry code without microcode {CVE-2017-5715}
  	[x86] x86/spec_ctrl: move stuff_RSB in spec_ctrl.h {CVE-2017-5715}
  	[x86] x86/entry: Stuff RSB for entry to kernel for non-SMEP platform {CVE-2017-5715}
  	[x86] x86/mm: Only set IBPB when the new thread cannot ptrace current thread {CVE-2017-5715}
  	[x86] x86/mm: Set IBPB upon context switch {CVE-2017-5715}
  	[x86] x86/idle: Disable IBRS when offlining cpu and re-enable on wakeup {CVE-2017-5715}
  	[x86] x86/idle: Disable IBRS entering idle and enable it on wakeup {CVE-2017-5715}
  	[x86] x86/spec_ctrl: implement spec ctrl C methods {CVE-2017-5715}
  	[x86] x86/spec_ctrl: save IBRS MSR value in save_paranoid for NMI {CVE-2017-5715}
  	[x86] x86/enter: Use IBRS on syscall and interrupts {CVE-2017-5715}
  	[x86] x86/spec_ctrl: swap rdx with rsi for nmi nesting detection {CVE-2017-5715}
  	[x86] x86/spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline {CVE-2017-5715}
  	[x86] x86/spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs {CVE-2017-5715}
  	[x86] x86/enter: MACROS to set/clear IBRS and set IBPB {CVE-2017-5715}
  	[kvm] x86: add SPEC_CTRL to MSR and CPUID lists {CVE-2017-5715}
  	[x86] x86/cpuid: Provide get_scattered_cpuid_leaf() {CVE-2017-5715}
  	[x86] x86/cpuid: Cleanup cpuid_regs definitions {CVE-2017-5715}
  	[kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD {CVE-2017-5715}
  	[x86] x86/svm: Set IBPB when running a different VCPU {CVE-2017-5715}
  	[kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD {CVE-2017-5715}
  	[kvm] vmx: Set IBPB when running a different VCPU {CVE-2017-5715}
  	[kvm] x86: clear registers on VM exit {CVE-2017-5715}
  	[x86] x86/kvm: Pad RSB on VM transition {CVE-2017-5715}
  	[x86] x86/cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available {CVE-2017-5715}
  	[x86] x86/feature: Report presence of IBPB and IBRS control {CVE-2017-5715}
  	[x86] x86/feature: Enable the x86 feature to control Speculation {CVE-2017-5715}
  	[misc] locking/barriers: prevent speculative execution based on Coverity scan results {CVE-2017-5753}
  	[fs] udf: prevent speculative execution {CVE-2017-5753}
  	[fs] prevent speculative execution {CVE-2017-5753}
  	[kernel] userns: prevent speculative execution {CVE-2017-5753}
  	[scsi] qla2xxx: prevent speculative execution {CVE-2017-5753}
  	[net] p54: prevent speculative execution {CVE-2017-5753}
  	[net] carl9170: prevent speculative execution {CVE-2017-5753}
  	[media] uvcvideo: prevent speculative execution {CVE-2017-5753}
  	[x86] x86/cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature {CVE-2017-5753}
  	[x86] x86/cpu/AMD: Make the LFENCE instruction serialized {CVE-2017-5753}
  	[misc] locking/barriers: introduce new memory barrier gmb() {CVE-2017-5753}
  	[x86] x86/mm/kaiser: Replace kaiser with kpti to sync with upstream {CVE-2017-5754}
  	[x86] x86/mm/kaiser: add "kaiser" and "nokaiser" boot options {CVE-2017-5754}
  	[x86] x86/mm/kaiser: map the trace idt tables in userland shadow pgd {CVE-2017-5754}
  	[x86] x86/mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine {CVE-2017-5754}
  	[x86] x86/mm/kaiser: use stop_machine for enable/disable knob {CVE-2017-5754}
  	[x86] x86/mm/kaiser: use atomic ops to poison/unpoison user pagetables {CVE-2017-5754}
  	[x86] x86/mm/kaiser: use invpcid to flush the two kaiser PCID AISD {CVE-2017-5754}
  	[x86] x86/mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel {CVE-2017-5754}
  	[x86] x86/mm/kaiser: stop patching flush_tlb_single {CVE-2017-5754}
  	[x86] x86/mm/kaiser: use PCID feature to make user and kernel switches faster {CVE-2017-5754}
  	[x86] x86/mm: If INVPCID is available, use it to flush global mappings {CVE-2017-5754}
  	[x86] x86/mm/64: Fix reboot interaction with CR4.PCIDE {CVE-2017-5754}
  	[x86] x86/mm/64: Initialize CR4.PCIDE early {CVE-2017-5754}
  	[x86] x86/mm: Add a 'noinvpcid' boot option to turn off INVPCID {CVE-2017-5754}
  	[x86] x86/mm: Add the 'nopcid' boot option to turn off PCID {CVE-2017-5754}
  	[x86] x86/mm/kaiser: validate trampoline stack {CVE-2017-5754}
  	[x86] x86/entry: Move SYSENTER_stack to the beginning of struct tss_struct {CVE-2017-5754}
  	[x86] x86/mm/kaiser: isolate the user mapped per cpu areas {CVE-2017-5754}
  	[x86] x86/mm/kaiser: enable kaiser in build {CVE-2017-5754}
  	[x86] x86/mm/kaiser: selective boot time defaults {CVE-2017-5754}
  	[x86] x86/mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT {CVE-2017-5754}
  	[x86] x86/mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV {CVE-2017-5754}
  	[x86] x86/mm/kaiser: add Kconfig {CVE-2017-5754}
  	[x86] x86/mm/kaiser: avoid false positives during non-kaiser pgd updates {CVE-2017-5754}
  	[x86] x86/mm/kaiser: Respect disabled CPU features {CVE-2017-5754}
  	[x86] x86/mm/kaiser: trampoline stack comments {CVE-2017-5754}
  	[x86] x86/mm/kaiser: stack trampoline {CVE-2017-5754}
  	[x86] x86/mm/kaiser: remove paravirt clock warning {CVE-2017-5754}
  	[x86] kvmclock: export kvmclock clocksource pointer {CVE-2017-5754}
  	[x86] x86/mm/kaiser: re-enable vsyscalls {CVE-2017-5754}
  	[x86] x86/mm/kaiser: allow to build KAISER with KASRL {CVE-2017-5754}
  	[x86] x86/mm/kaiser: allow KAISER to be enabled/disabled at runtime {CVE-2017-5754}
  	[x86] x86/mm/kaiser: un-poison PGDs at runtime {CVE-2017-5754}
  	[x86] x86/mm/kaiser: add a function to check for KAISER being enabled {CVE-2017-5754}
  	[x86] x86/mm/kaiser: add debugfs file to turn KAISER on/off at runtime {CVE-2017-5754}
  	[x86] x86/mm/kaiser: disable native VSYSCALL {CVE-2017-5754}
  	[x86] x86/mm/kaiser: map virtually-addressed performance monitoring buffers {CVE-2017-5754}
  	[x86] x86/mm/kaiser: map debug IDT tables {CVE-2017-5754}
  	[x86] x86/mm/kaiser: add kprobes text section {CVE-2017-5754}
  	[x86] x86/mm/kaiser: map trace interrupt entry {CVE-2017-5754}
  	[x86] x86/mm/kaiser: map entry stack per-cpu areas {CVE-2017-5754}
  	[x86] x86/mm/kaiser: map dynamically-allocated LDTs {CVE-2017-5754}
  	[x86] x86/mm/kaiser: make sure static PGDs are 8k in size {CVE-2017-5754}
  	[x86] x86/mm/kaiser: allow NX poison to be set in p4d/pgd {CVE-2017-5754}
  	[x86] x86/mm/kaiser: unmap kernel from userspace page tables (core patch) {CVE-2017-5754}
  	[x86] x86/mm/kaiser: mark per-cpu data structures required for entry/exit {CVE-2017-5754}
  	[x86] x86/mm/kaiser: introduce user-mapped per-cpu areas {CVE-2017-5754}
  	[x86] x86/mm/kaiser: add cr3 switches to entry code {CVE-2017-5754}
  	[x86] x86/mm/kaiser: remove scratch registers {CVE-2017-5754}
  	[x86] x86/mm/kaiser: prepare assembly for entry/exit CR3 switching {CVE-2017-5754}
  	[x86] x86/mm/kaiser: Disable global pages by default with KAISER {CVE-2017-5754}
  	[x86] x86/mm: Document X86_CR4_PGE toggling behavior {CVE-2017-5754}
  	[x86] x86/mm/tlb: Make CR4-based TLB flushes more robust {CVE-2017-5754}
  	[x86] x86/mm: Do not set _PAGE_USER for init_mm page tables {CVE-2017-5754}
  	[x86] x86: increase robusteness of bad_iret fixup handler {CVE-2017-5754}
  	[perf] perf/x86/intel: Use PAGE_SIZE for PEBS buffer size on Core2 {CVE-2017-5754}
  	[include] include/stddef.h: Move offsetofend() from vfio.h to a generic kernel header {CVE-2017-5754}
  	[x86] microcode: Share native MSR accessing variants {CVE-2017-5754}
  	[include] include/linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() {CVE-2017-5754}


author: zhangshaoning <zhangshaoning1@huawei.com> - 327.59.59.46.h41
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DEC:fix CVE-2017-15868 CVE-2017-8824 CVE-2017-17450 CVE-2017-17449 CVE-2017-17448 CVE-2017-1000407


author: zhangshaoning <zhangshaoning1@huawei.com> - 327.59.59.46.h47
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DEC:fix CVE-2017-17558 CVE-2017-17805 CVE-2017-17806 CVE-2017-17807


author: zhangyuyun <zhangyuyun@huawei.com> - 327.59.59.46.h48
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DEC:ext4: bugfix for mmaped pages in mpage_release_unused_pages()
        ixgbevf: fix oops when race occurs between ixgbevf down and reset
        kernel: sched: Fix potential near-infinite distribute_cfs_runtime() loop


author: lwx457924<lining57@huawei.com> - 3.10.0-327.62.59.83.w/h91
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:If the read-only flag is true on a SCSI disk, re-reading the partition table 
  sets the flag back to false. Fix this issue.


author: wujiangtao<wu.wujiangtao@huawei.com> - 3.10.0-327.62.59.83.w/h92
changelog:
  - Type:bugfix
  - ID:CVE-2018-3639
  - SUG:restart
  - DESC:fix CVE-2018-3639 (intel vulnerability variant 4)


author: linyan<linyanly.lin@huawei.com> - 3.10.0-327.62.59.83.w/h94
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:md: fix problems with freeing private data after ->run failure.


author: chentongbiao<chentongbiao@huawei.com> - 3.10.0-327.62.59.83.w/h95
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Revert "tcp: remove cwnd moderation after recovery" patch


author: chentongbiao<chentongbiao@huawei.com> - 3.10.0-327.62.59.83.w/h97
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:On a huge mem cgroup mem_cgroup_force_empty_list() may iterate
         for a long time without rescheduling and cause softlockup.
         Add cond_resched() to avoid this.


author: chentongbiao<chentongbiao@huawei.com> - 3.10.0-327.62.59.83.w/h98
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Right now, if slice is expired, we start a new slice. If a bio is
         queued, we keep on extending slice by throtle_slice interval (100ms).
         This worked well as long as pending timer function got executed with-in
         few milli seconds of scheduled time. But looks like with recent changes
         in timer subsystem, slack can be much longer depending on the expiry time
         of the scheduled timer.


author: wujiangtao<wu.wujiangtao@huawei.com> - 3.10.0-327.62.59.83.w/h99
changelog:
  - Type:bugfix
  - ID:CVE-2018-3620,CVE-2018-3646
  - SUG:restart
  - DESC:fix L1TF(L1 Terminal Fault) vulnerabilities:CVE-2018-3620,CVE-2018-3646


author: wujiangtao<wu.wujiangtao@huawei.com> - 3.10.0-327.62.59.83.w/h100
changelog:
  - Type:bugfix
  - ID:CVE-2018-5390,CVE-2018-5391
  - SUG:restart
  - DESC: fix CVE-2018-5390,CVE-2018-5391
  	tcp: avoid collapses in tcp_prune_queue() if possible 
  	tcp: detect malicious patterns in tcp_collapse_ofo_queue()
  	Revert "net: increase fragment memory usage limits"


author: qiangxiaojun<qiangxiaojun@huawei.com> - 3.10.0-327.62.59.83.w/h101
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: mm/memcontrol.c: disable kernel memory account on cgroup


author: chentongbiao<chentongbiao@huawei.com> - 3.10.0-327.62.59.83.w/h108
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:mm,vmscan: Do not wait for page writeback for GFP_NOFS allocations


author: wujiangtao<wu.wujiangtao@huawei.com> - 3.10.0-327.62.59.83.w/h109
changelog:
  - Type:cves
  - ID:CVE-2018-14634
  - SUG:restart
  - DESC:exec: Limit arg stack to at most 75% of _STK_LIM


author: zhangshaoning<zhangshaoning1@huawei.com> - 3.10.0-327.62.59.83.w/h112
changelog:
  - Type:cves
  - ID:CVE-2017-18344
  - SUG:restart
  - DESC:out-of-bounds access in the show_timer function in kernel/time/posix-timers.c


author: zhangshaoning<zhangshaoning1@huawei.com> - 3.10.0-327.62.59.83.w/h115
changelog:
  - Type:cves
  - ID:CVE-2018-1092 CVE-2018-5848 CVE-2018-10881 CVE-2018-10878
  - SUG:restart
  - DESC:fix CVE-2018-1092 CVE-2018-5848 CVE-2018-10881 CVE-2018-10878


author: zhangshaoning<euleros@huawei.com> - 3.10.0-327.62.59.83.w/h119
changelog:
  - Type:cves
  - ID:CVE-2018-14633 CVE-2018-16658 CVE-2018-18690 CVE-2018-15594 CVE-2018-18386 CVE-2018-16276
  - SUG:restart
  - DESC:fix above cves


author: zhengshaoyu<zhengshaoyu@huawei.com> - 3.10.0-327.62.59.83.w/h120
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:sched/autogroup: Fix autogroup_move_group() to never skip sched_move_task()


author: zhangshaoning<euleros@huawei.com> - 3.10.0-327.62.59.83.w/h122
changelog:
  - Type:cves
  - ID:CVE-2018-13405 CVE-2018-1130 CVE-2018-10940 CVE-2017-18208 CVE-2018-1120 CVE-2018-7757
  - SUG:restart
  - DESC:fix above cves


author: zhangshaoning<euleros@huawei.com> - 3.10.0-327.62.59.83.w/h123
changelog:
  - Type:cves
  - ID:CVE-2017-18255 CVE-2017-18270 CVE-2017-7889 CVE-2018-10021 CVE-2018-1066 CVE-2018-13053 CVE-2018-13094 CVE-2018-14734 CVE-2018-7995
  - SUG:restart
  - DESC:fix above cves


author: zhengshaoyu<zhengshaoyu@huawei.com> - 3.10.0-327.62.59.83.w/h125
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: tcp allow one skb to be received per socket under memory pressure


author: zhengshaoyu<zhengshaoyu@huawei.com> - 3.10.0-327.62.59.83.w/h142
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:genirq/proc: Return proper error code when irq_set_affinity


author: zhangzhihui<zhangzhihui23@huawei.com> - 3.10.0-327.62.59.83.w/h145
changelog:
  - Type:cves
  - ID:CVE-2018-19985 CVE-2018-9568 CVE-2019-3459 CVE-2019-3460
  - SUG:restart
  - DESC:fix cves


author: chentongbiao<chentongbiao@huawei.com> - 3.10.0-327.62.59.83.w/h149
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:virtio-net: add using_XPS parm to decide whether using XPS to choose txq


author: wangchan<wangchan9@huawei.com> - 3.10.0-327.62.59.83.w/h150
changelog:
  - Type:cves
  - ID:CVE-2018-10877 CVE-2018-9422 CVE-2018-9516 CVE-2019-6133
  - SUG:restart
  - DESC:fix cves


author: zhengshaoyu<zhengshaoyu@huawei.com> - 3.10.0-327.62.59.83.w/h154
changelog:
  - Type:cves
  - ID:CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091
  - SUG:restart
  - DESC:fix cves


author: xuping<xuping21@huawei.com> - 3.10.0-327.62.59.83.w/h157
changelog:
  - Type:cves
  - ID:CVE-2019-11486 CVE-2019-11599 CVE-2019-3901 CVE-2019-11487
  - SUG:restart
  - DESC:fix cves


author: lansheng<lansheng@huawei.com> - 3.10.0-327.62.59.83.w/h159
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:avoid int overflows in rtc time
         avoid int overflows in vfs_fallocate and sr_select_speed
         backport "sock: consistent handling of extreme SO_SNDBUF/SO_RCVBUF values" patch


author: wangxiao<wangxiao65@huawei.com> - 3.10.0-327.62.59.83.w/h162
changelog:
  - Type:cves
  - ID:CVE-2019-11477 CVE-2019-11478 CVE-2019-11479
  - SUG:restart
  - DESC:fix cves
         revert CVE-2018-9422 CVE-2019-11487


author: zhengshaoyu<zhengshaoyu@huawei.com> - 3.10.0-327.62.59.83.w/h186
changelog:
  - Type:cves
  - ID:CVE-2018-10087 CVE-2018-10124 CVE-2018-10675 CVE-2018-12896 CVE-2018-3693 CVE-2018-13053 CVE-2017-18232 CVE-2016-7425 CVE-2015-8816 CVE-2017-7261 CVE-2016-3689 CVE-2016-3140 CVE-2016-3138 CVE-2016-2187 CVE-2016-2186 CVE-2016-2185 CVE-2016-2184 CVE-2016-2384 CVE-2016-4578 CVE-2016-4569 CVE-2017-7472 CVE-2018-18710 CVE-2019-12456 CVE-2019-9503 CVE-2019-15118 CVE-2015-9289 CVE-2019-15807 CVE-2019-12378 CVE-2019-3882 CVE-2016-3139 CVE-2019-15926 CVE-2019-15927 CVE-2017-1000379 CVE-2019-12381 CVE-2019-15292
  - SUG:restart
  - DESC:fix cves


author: hanzhijun<hanzhijun1@huawei.com> - 3.10.0-327.62.59.83.w/h188
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:sr: get/drop reference to device in revalidate and check_events


author: zhengshaoyu<zhengshaoyu@huawei.com> - 3.10.0-327.62.59.83.w/h189
changelog:
  - Type:cves
  - ID:CVE-2019-17052 CVE-2019-17053 CVE-2019-17054 CVE-2019-17055 CVE-2019-17056 CVE-2019-15505 CVE-2019-10140
  - SUG:restart
  - DESC:fix CVE-2019-17052 CVE-2019-17053 CVE-2019-17054 CVE-2019-17055 CVE-2019-17056 CVE-2019-15505 CVE-2019-10140


author: zhaoliang<zhaoliang45@huawei.com> - 3.10.0-327.62.59.83.w/h190
changelog:
  - Type:cves
  - ID:CVE-2019-17075 CVE-2019-17133
  - SUG:restart
  - DESC:fix CVE-2019-17075 CVE-2019-17133


author: zhengshaoyu<zhengshaoyu@huawei.com> - 3.10.0-327.62.59.83.w/h192
changelog:
  - Type:bugfix
  - ID:use-after-free in hash_sock_destruct
  - SUG:restart
  - DESC:use-after-free in hash_sock_destruct CVE-2015-8970


author: zhaoliang<zhaoliang45@huawei.com> - 3.10.0-327.62.59.83.w/h193
changelog:
  - Type:cves
  - ID:CVE-2014-1446 CVE-2016-2782 CVE-2016-4580 CVE-2017-13305 CVE-2017-14051 CVE-2017-18509 CVE-2018-10880 CVE-2018-20511 CVE-2019-12379 CVE-2019-12818 CVE-2019-15291
  - SUG:restart
  - DESC:fix CVE-2014-1446 CVE-2016-2782 CVE-2016-4580 CVE-2017-13305 CVE-2017-14051 CVE-2017-18509 CVE-2018-10880 CVE-2018-20511 CVE-2019-12379 CVE-2019-12818 CVE-2019-15291


author: zhaoliang<zhaoliang45@huawei.com> - 3.10.0-327.62.59.83.w/h194
changelog:
  - Type:cves
  - ID:CVE-2017-11089 CVE-2017-13167 CVE-2017-13216 CVE-2019-16232
  - SUG:restart
  - DESC:fix CVE-2017-11089 CVE-2017-13167 CVE-2017-13216 CVE-2019-16232


author: yaokai<yaokai13@huawei.com> - 3.10.0-327.62.59.83.w/h221
changelog:
  - Type:cves
  - ID:CVE-2020-8647 CVE-2020-8649 CVE-2019-16230
  - SUG:restart
  - DESC:fix CVE-2020-8647 CVE-2020-8649 CVE-2019-16230


author: zhaoliang<zhaoliang45@huawei.com> - 3.10.0-327.62.59.83.w/h225
changelog:
  - Type:cves
  - ID:CVE-2020-11494 CVE-2020-11565 CVE-2019-20636 CVE-2020-11608 CVE-2020-11609 CVE-2020-11668
  - SUG:restart
  - DESC:fix CVE-2020-11494 CVE-2020-11565 CVE-2019-20636 CVE-2020-11608 CVE-2020-11609 CVE-2020-11668


author: wangxiao<wangxiao65@huawei.com> - 3.10.0-327.62.59.83.w/h227
changelog:
  - Type:cves
  - ID:CVE-2019-14898 CVE-2020-12464 CVE-2020-12652 CVE-2020-12653 CVE-2020-12654 CVE-2020-12655
  - SUG:restart
  - DESC:fix CVE-2019-14898 CVE-2020-12464 CVE-2020-12652 CVE-2020-12653 CVE-2020-12654 CVE-2020-12655


author: wangxiao<wangxiao65@huawei.com> - 3.10.0-327.62.59.83.w/h230
changelog:
  - Type:cves
  - ID:CVE-2020-10720 CVE-2020-13143 CVE-2020-12770 CVE-2020-12826
  - SUG:restart
  - DESC:fix CVE-2020-10720 CVE-2020-13143 CVE-2020-12770 CVE-2020-12826


author: yaoxin<yaoxin23@huawei.com> - 3.10.0-327.62.59.83.w/h234
changelog:
  - Type:cves
  - ID:CVE-2020-16166  CVE-2020-0255
  - SUG:restart
  - DESC:fix CVE-2020-16166  CVE-2020-0255


author: tangxiaolan<tangxiaolan9@huawei.com> - 3.10.0-327.62.59.83.w/h241
changelog:
  - Type:cves
  - ID:CVE-2020-14314 CVE-2020-25212 CVE-2020-25284 CVE-2020-25285
  - SUG:restart
  - DESC:fix CVE-2020-14314 CVE-2020-25212 CVE-2020-25284 CVE-2020-25285


author: jiangshan<jiangshan27@huawei.com> - 3.10.0-327.62.59.83.w/h243
changelog:
  - Type:cves
  - ID:CVE-2020-14331 CVE-2020-25643
  - SUG:restart
  - DESC:fix CVE-2020-14331 CVE-2020-25643


author: yaoxin<yaoxin23@huawei.com> - 3.10.0-327.62.59.83.w/h246
changelog:
  - Type:cves
  - ID:CVE-2020-15436 CVE-2020-15437 CVE-2020-28915 CVE-2020-28974
  - SUG:restart
  - DESC:fix CVE-2020-15436 CVE-2020-15437 CVE-2020-28915 CVE-2020-28974


author: yaoxin<yaoxin23@huawei.com> - 3.10.0-327.62.59.83.w/h251
changelog:
  - Type:cves
  - ID:CVE-2020-27786 CVE-2019-20934 CVE-2020-29371
  - SUG:restart
  - DESC:fix CVE-2020-27786 CVE-2019-20934 CVE-2020-29371


author: yaoxin<yaoxin23@huawei.com> - 3.10.0-327.62.59.83.w/h252
changelog:
  - Type:cves
  - ID:CVE-2020-14351 CVE-2020-27777 CVE-2020-29661 CVE-2020-29660
  - SUG:restart
  - DESC:fix CVE-2020-14351 CVE-2020-27777 CVE-2020-29661 CVE-2020-29660


author: Junwei Hu<hujunwei4@huawei.com> - 3.10.0-327.62.59.83.w/h253
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix clear JBD2_ABORT flag before journal_reset to update log tail info


author: Jiangtao Wu<wu.wujiangtao@huawei.com> - 327.59.59.46.h52
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DEC:system can get hung task timeouts if a qlogic board fails during
  	initialization (if the board breaks again or fails the init). The hang
  	involves the scsi scan.


author: Jiangtao Wu <wu.wujiangtao@huawei.com> - 327.62.59.83.h54
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DEC:create symlink /lib/mmodules/$kernel/EulerOS to /lib/mmodules/EulerOS.


