# changelog

author: EL Errata <el-errata_ww@oracle.com> - 049-191.git20210920.0.1
changelog:
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Restore 51-dracut-rescue-postinst.sh for anaconda compatibility
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 049-201.git20220131
changelog:
  - ci: introduce C8S based GHA CI
  - ci: backport TEST-21-NFS-NM
  - dracut.sh: fix early microcode detection logic
  - fix(url-lib): make pre-pivot hook separetely per nfs mount
  - fix(watchdog): replace return with echo
  - fix(network): add errors and warnings when network interface
  - dracut.sh: add check for invalid configuration files
  - fips: removed false-positive 'FATAL: Module xxx not found'
  - fix(shutdown): be robust against forced shutdown
  - fix(fips): handle s390x OSTree systems


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 049-201.git20220131.0.1
changelog:
  - Enable the code to create ifcfg file [Orabug: 33888951]
  - Skip parse iscsiroot.sh on PV VMs [Orabug: 33676753]
  - Add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs [Orabug: 33603682]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Restore 51-dracut-rescue-postinst.sh for anaconda compatibility
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 049-209.git20220815
changelog:
  - fix(95iscsi): Fix network setup
  - fix(dracut-systemd): correct service dependencies
  - feat(lvm): add new module lvmthinpool-monitor
  - fix(dracut-shutdown): add cleanup handler on failure


author: Pavel Valena <pvalena@redhat.com> - 049-218.git20221019
changelog:
  - Dracut: only login to one target at a time
  - iscsi: don't continue waiting if the root device is present
  - network: stop waiting for interfaces if root device is
  - iscsiroot: parse_iscsi_root overwrites command line args
  - iscsiroot: there's never more than one target per call
  - iscsiroot: try targets only once
  - iscsiroot: remove bashisms
  - fixup "Dracut: only login to one target at a time"
  - 35network-legacy: only skip waiting for interfaces if netroot


author: Pavel Valena <pvalena@redhat.com> - 049-221.git20221214
changelog:
  - fix(80lvmthinpool-monitor): use systemsctl instead of
  - fix(squash): build ld cache for squash loader
  - fix(network-manager): write DHCP filename option to dhcpopts


author: EL Errata <el-errata_ww@oracle.com> - 049-228.git20230802.0.1
changelog:
  - Fix typo in orabug33888951-dracut-Enable-the-code-to-create-ifcfg-file.patch [Orabug: 35268918]
  - Enable the code to create ifcfg file [Orabug: 33888951]
  - Skip parse iscsiroot.sh on PV VMs [Orabug: 33676753]
  - Add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs [Orabug: 33603682]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Restore 51-dracut-rescue-postinst.sh for anaconda compatibility
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Sam Booth <sam.booth@oracle.com> - 049-228.git20230802.0.2
changelog:
  - Remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] and reworks patch 0193 [Orabug: 36119898]


author: Pavel Valena <pvalena@redhat.com> - 049-231.git20231115
changelog:
  - fix(iscsi): do not exit in handle_netroot() if discovery
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(fcoe-uefi): exit early on empty vlan


author: Craig Guiller <craig.guiller@oracle.com> - 049-233.git20240115.0.1
changelog:
  - Revert the fixes for bugs 33676753 and 33888951 due to regressions [Orabug: 35656614]
  - Fix typo in orabug33888951-dracut-Enable-the-code-to-create-ifcfg-file.patch [Orabug: 35268918]
  - Enable the code to create ifcfg file [Orabug: 33888951]
  - Skip parse iscsiroot.sh on PV VMs [Orabug: 33676753]
  - Add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs [Orabug: 33603682]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Restore 51-dracut-rescue-postinst.sh for anaconda compatibility
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-17.git20190725
changelog:
  - rngd: new module running early during boot to help generating entropy when system's default entropy sources are poor (e.g. use of SSD disks or UEFI RNG not available)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-24.git20190802
changelog:
  - 95fcoe: load 'libfcoe' module as a fallback
  - 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases
  - dracut: let module handling function accept optional path option
  - squash: also squash systemctl if switch-root is not needed
  - squash: fix and simplify required_in_root
  - squash: squash systemd binary and udevadm


author: Tianyue Lan <tianyue.lan@oracle.com> - 049-27.git20190906.0.1
changelog:
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Fix dhclient classless static route parsing [Orabug: 28881975]
  - Fix iscsi code strictly checking for is_boot_target [Orabug: 29864620]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: EL Errata <el-errata_ww@oracle.com> - 049-27.git20190906.0.2.el8_1.1
changelog:
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Fix dhclient classless static route parsing [Orabug: 28881975]
  - Fix iscsi code strictly checking for is_boot_target [Orabug: 29864620]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-60.git20191129
changelog:
  - 99squash: Only start the cleaner on switch-root
  - net-lib: check if addr exists before checking for dad state
  - always include sg module


author: Lukas Nykryn <lnykryn@redhat.com> - 049-63.git20200114
changelog:
  - network-legacy/ifup: fix typo when calling dhclient --timeout
  - network-legacy/ifup: dhclient should be started in oneshot mode
  - modules/network-manager: Install `ip`


author: Lukas Nykryn <lnykryn@redhat.com> - 049-68.git20200211
changelog:
  - Revert "wait for IPv6 RA if using none/static IPv6 assignment"
  - dhclient-script: ipv6 uses different variables for nameservers
  - 40network: bump rd.net.timeout.carrier to 10 seconds


author: Lukas Nykryn <lnykryn@redhat.com> - 049-83.git20200525
changelog:
  - Remove memtrace-ko and rd.memdebug=4 support in dracut
  - Add 99memstrack module
  - the strip command should avoid changing the file modification
  - dracut.sh: Adjust squash and strip order
  - Fine tune mksquashfs options for squash module
  - 90kernel-modules: don't install any block driver if not
  - 95znet: Add a rd.znet_ifname= option
  - Revert "[RHEL] network: default to network-legacy even in


author: Lukas Nykryn <lnykryn@redhat.com> - 049-89.git20200625
changelog:
  - Adapt to the new udevadm version output
  - network-manager: move connection generation to a lib file
  - cms: regenerate NetworkManager connections


author: Lukas Nykryn <lnykryn@redhat.com> - 049-92.git20200702
changelog:
  - install/dracut-install.c: install module dependencies of
  - install: also install post weak dependencies of kernel


author: Lukas Nykryn <lnykryn@redhat.com> - 049-94.git20200709
changelog:
  - dracut.sh: Move the library workaround after squash
  - dracut.sh: FIPS workaround for openssl-libs on Fedora/RHEL


author: EL Errata <el-errata_ww@oracle.com> - 049-95.git20200804.0.1
changelog:
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Fix dhclient classless static route parsing [Orabug: 28881975]
  - Fix iscsi code strictly checking for is_boot_target [Orabug: 29864620]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-95.git20200804.1
changelog:
  - multipath: require kpartx binary
  - Replace ln with systemctl
  - multipath: add automatic configuration for multipath
  - 98dracut-systemd: don't wait for root device if remote
  - 90crypt: pull in remote-cryptsetup.target enablement


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 049-95.git20200804.0.4.el8_u3.4
changelog:
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - install: string_hash_func should not be fed with NULL [Orabug: 32127301]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Fix dhclient classless static route parsing [Orabug: 28881975]
  - Fix iscsi code strictly checking for is_boot_target [Orabug: 29864620]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Stephen Brennan <stephen.s.brennan@oracle.com> - 0.0.27-1.0.1
changelog:
  - Rebase Oracle patches on 0.0.27
  - Add drgn-wheel subpackage to contain the wheel file produced during build


author: Stephen Brennan <stephen.s.brennan@oracle.com> - 0.0.29-1.0.1
changelog:
  - Rebase Oracle patches on 0.0.29
  - Enable builds for python 3.11 & 3.12 channels [Orabug: 37229451]


author: Merlin Mathesius <mmathesi@redhat.com> - 1.4-19
changelog:
  - Drop unnecessary BuildRequires for binutils-static
    Not building kernel modules, so use kernel-headers instead of kernel-devel


author: Ales Matej <amatej@gmail.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Relicense to LGPLv2+
  - Fix number of bugs mainly with drpm_make and drpm_apply
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-1
changelog:
  - Use 1.6.0 version [bz#1679676]
  - Resolves: bz#1679676
    (dtc changes blocked until gating tests are added)


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.1.b45
changelog:
  - New upstream release 0.4b45 (#1361495)
  - Fix issue with bad UUID error message (#1048548)
  - Spec file has been updated


author: Jakub Martisko <jamartis@redhat.com> - 7.1-27
changelog:
  - Include sys/sysmacros header in the growisofs.c file
  - Some macros have been moved from sys/types to sys/sysmacros which lead to FTBFS
  - Resolves: 1611716


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Resolves: rhbz#963475 dyninst must be ported to aarch64
    Remove Requires: glibc-static from %package testsuite


author: Lukas Czerner <lczerner@redhat.com> 1.45.4-1
changelog:
  - Rebase to the release 1.45.4 (#1783777)
  - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279)
  - fix crafted ext4 partition leads to out-of-bounds write (#1768709)
  - include note about supported rhel8 features and options (#1788573)


author: Darrick J. Wong <darrick.wong@oracle.com> 1.45.4-3.0.1
changelog:
  - Integrate patches from the "upstream" 1.45.4 package.
  - Fix the version number to match Oracle standards.
  - Re-integrate the multiarch build kludge from RH.
  - Enable e2scrub package for OL8 only
  - Start building newer package for UEK6


author: Darrick J. Wong <darrick.wong@oracle.com> 1.45.4-3.0.3
changelog:
  - Fix build scripts to generate i386 builds
  - Re-integrate ext2_types.h multiarch compatibility fixes.


author: Lukas Czerner <lczerner@redhat.com> 1.45.6-5
changelog:
  - Update e2fsprogs with upstream fixes and improvements (#2083621)
  - Fix out-of-bounds read/write via crafter filesystem (#2073548)


author: Mat Booth <mat.booth@redhat.com> - 1:4.15-3
changelog:
  - Don't build and ship the test framework. We are not shipping any actual tests
    anyway and this allows to drop the dependency on mockito and friends.


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-4.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-log-informative-memprotect-msg.patch [bz#1520485]
  - ovmf-MdeModulePkg-BdsDxe-fall-back-to-a-Boot-Manager-Menu.patch [bz#1515418]
  - Resolves: bz#1515418
    (RFE: Provide diagnostics for failed boot)
  - Resolves: bz#1520485
    (AAVMF: two new messages with silent build)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-2.gitee3198e672e2
changelog:
  - OvmfPkg/PlatformBootManagerLib: connect consoles unconditionally [bz#1577546]
  - build OVMF varstore template with SB enabled / certs enrolled [bz#1561128]
  - connect Virtio RNG devices again [bz#1579518]
  - Resolves: bz#1577546
    (no input consoles connected under certain circumstances)
  - Resolves: bz#1561128
    (OVMF Secure boot enablement (enrollment of default keys))
  - Resolves: bz#1579518
    (EFI_RNG_PROTOCOL no longer produced for virtio-rng)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-3.el8
changelog:
  - edk2-redhat-Provide-and-Obsolete-OVMF-and-AAVMF.patch [bz#1596148]
  - edk2-ArmVirtPkg-unify-HttpLib-resolutions-in-ArmVirt.dsc..patch [bz#1536627]
  - edk2-ArmVirtPkg-ArmVirtQemu-enable-the-IPv6-stack.patch [bz#1536627]
  - edk2-advertise-OpenSSL-due-to-IPv6-enablement-too-RHEL-on.patch [bz#1536627]
  - edk2-redhat-add-D-NETWORK_IP6_ENABLE-to-the-build-flags.patch [bz#1536627]
  - edk2-redhat-update-license-fields-and-files-in-the-spec-f.patch [bz#1536627]
  - Resolves: bz#1536627
    (IPv6 enablement in OVMF)
  - Resolves: bz#1596148
    (restore Provides/Obsoletes macros for OVMF and AAVMF, from RHEL-8 Alpha)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-4.el8
changelog:
  - edk2-redhat-provide-virtual-bundled-OpenSSL-in-edk2-ovmf-.patch [bz#1607801]
  - Resolves: bz#1607801
    (add 'Provides: bundled(openssl) = 1.1.0h' to the spec file)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-5.el8
changelog:
  - edk2-BaseTools-footer.makefile-expand-BUILD_CFLAGS-last-f.patch [bz#1607906]
  - edk2-BaseTools-header.makefile-remove-c-from-BUILD_CFLAGS.patch [bz#1607906]
  - edk2-BaseTools-Source-C-split-O2-to-BUILD_OPTFLAGS.patch [bz#1607906]
  - edk2-BaseTools-Source-C-take-EXTRA_OPTFLAGS-from-the-call.patch [bz#1607906]
  - edk2-BaseTools-Source-C-take-EXTRA_LDFLAGS-from-the-calle.patch [bz#1607906]
  - edk2-BaseTools-VfrCompile-honor-EXTRA_LDFLAGS.patch [bz#1607906]
  - edk2-redhat-inject-the-RPM-compile-and-link-options-to-th.patch [bz#1607906]
  - Resolves: bz#1607906
    (edk2-tools: Does not use RPM build flags)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-5.el8
changelog:
  - edk2-MdeModulePkg-Variable-Fix-Timestamp-zeroing-issue-on.patch [bz#1641436]
  - edk2-MdePkg-Add-more-checker-in-UefiDecompressLib-to-acce.patch [bz#1641449 bz#1641453 bz#1641464 bz#1641469]
  - edk2-IntelFrameworkModulePkg-Add-more-checker-in-UefiTian.patch [bz#1641453 bz#1641464 bz#1641469]
  - edk2-BaseTools-Add-more-checker-in-Decompress-algorithm-t.patch [bz#1641445 bz#1641453 bz#1641464 bz#1641469]
  - Resolves: bz#1641436
    (CVE-2018-3613 edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users [rhel-8])
  - Resolves: bz#1641445
    (CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c [rhel-8])
  - Resolves: bz#1641449
    (CVE-2017-5732 edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c [rhel-8])
  - Resolves: bz#1641453
    (CVE-2017-5733 edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function [rhel-8])
  - Resolves: bz#1641464
    (CVE-2017-5734 edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function [rhel-8])
  - Resolves: bz#1641469
    (CVE-2017-5735 edk2: Privilege escalation via heap-based buffer overflow in Decode() function [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-7.el8
changelog:
  - Rebuilding edk2 outside the module branch
  - Resolves: bz#1637650
    (Move ipxe and edk2 out of the virt module.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-8.el8
changelog:
  - edk2-NetworkPkg-UefiPxeBcDxe-Add-EXCLUSIVE-attribute-when.patch [bz#1643377]
  - Resolves: bz#1643377
    (Exception when grubx64.efi used for UEFI netboot)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-9.el8
changelog:
  - edk2-BaseTools-Fix-UEFI-and-Tiano-Decompression-logic-iss.patch [bz#1662184]
  - edk2-MdePkg-BaseUefiDecompressLib-Fix-UEFI-Decompression-.patch [bz#1662184]
  - edk2-IntelFrameworkModulePkg-Fix-UEFI-and-Tiano-Decompres.patch [bz#1662184]
  - edk2-git-Use-HTTPS-support.patch []
  - Resolves: bz#1662184
    (backport fix for (theoretical?) regression introduced by earlier CVE fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-9.el8_0
changelog:
  - edk2-MdeModulePkg-PartitionDxe-Ensure-blocksize-holds-MBR.patch [bz#1690501]
  - edk2-MdeModulePkg-RamDiskDxe-Restrict-on-RAM-disk-size-CV.patch [bz#1690501]
  - Resolves: bz#1690501
    (CVE-2018-12180 edk2: Buffer Overflow in BlockIo service for RAM disk [rhel-8.0.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20190308git89910a39dcfd-2.el8
changelog:
  - edk2-redhat-provide-firmware-descriptor-meta-files.patch [bz#1600230]
  - Resolves: bz#1600230
    ([RHEL 8.1] RFE: provide firmware descriptor meta-files for the edk2-ovmf and edk2-aarch64 firmware images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-4.el8
changelog:
  - edk2-OvmfPkg-raise-the-PCIEXBAR-base-to-2816-MB-on-Q35.patch [bz#1666941]
  - edk2-OvmfPkg-PlatformPei-set-32-bit-UC-area-at-PciBase-Pc.patch [bz#1666941]
  - Resolves: bz#1666941
    (UEFI guest cannot boot into os when setting some special memory size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-5.el8
changelog:
  - edk2-redhat-add-D-TPM2_ENABLE-to-the-edk2-ovmf-build-flag.patch [bz#1693205]
  - Resolves: bz#1693205
    (edk2: Enable TPM2 support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-6.el8
changelog:
  - edk2-ArmVirtPkg-silence-DEBUG_VERBOSE-masking-0x00400000-.patch [bz#1714446]
  - edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch [bz#1714446]
  - edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1714446]
  - Resolves: bz#1714446
    (edk2-aarch64 silent build is not silent enough)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-1.el8
changelog:
  - Rebase to edk2-stable201908 [bz#1748180]
  - Resolves: bz#1748180
    ((edk2-rebase-rhel-8.2) - rebase edk2 to upstream tag edk2-stable201908 for RHEL-8.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-2.el8
changelog:
  - edk2-MdePkg-Include-Protocol-Tls.h-Add-the-data-type-of-E.patch [bz#1536624]
  - edk2-CryptoPkg-TlsLib-Add-the-new-API-TlsSetVerifyHost-CV.patch [bz#1536624]
  - edk2-CryptoPkg-Crt-turn-strchr-into-a-function-CVE-2019-1.patch [bz#1536624]
  - edk2-CryptoPkg-Crt-satisfy-inet_pton.c-dependencies-CVE-2.patch [bz#1536624]
  - edk2-CryptoPkg-Crt-import-inet_pton.c-CVE-2019-14553.patch [bz#1536624]
  - edk2-CryptoPkg-TlsLib-TlsSetVerifyHost-parse-IP-address-l.patch [bz#1536624]
  - edk2-NetworkPkg-TlsDxe-Add-the-support-of-host-validation.patch [bz#1536624]
  - edk2-NetworkPkg-HttpDxe-Set-the-HostName-for-the-verifica.patch [bz#1536624]
  - edk2-redhat-enable-HTTPS-Boot.patch [bz#1536624]
  - Resolves: bz#1536624
    (HTTPS enablement in OVMF)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-3.el8
changelog:
  - Update used openssl version [bz#1616029]
  - Resolves: bz#1616029
    (rebuild edk2 against the final RHEL-8.2.0 version of OpenSSL-1.1.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-4.el8
changelog:
  - edk2-redhat-set-guest-RAM-size-to-768M-for-SB-varstore-te.patch [bz#1778301]
  - edk2-redhat-re-enable-Secure-Boot-varstore-template-verif.patch [bz#1778301]
  - Resolves: bz#1778301
    (re-enable Secure Boot (varstore template) verification in %check)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-5.el8
changelog:
  - edk2-MdeModulePkg-UefiBootManagerLib-log-reserved-mem-all.patch [bz#1789797]
  - edk2-NetworkPkg-HttpDxe-fix-32-bit-truncation-in-HTTPS-do.patch [bz#1789797]
  - Resolves: bz#1789797
    (Backport upstream patch series: "UefiBootManagerLib, HttpDxe: tweaks for large HTTP(S) downloads" to improve HTTP(S) Boot experience with large (4GiB+) files)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-6.el8
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-fix-2M-4K-page-splitting-r.patch [bz#1789335]
  - Resolves: bz#1789335
    (VM with edk2 can't boot when setting memory with '-m 2001')


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-7.el8
changelog:
  - edk2-SecurityPkg-Fix-spelling-errors-PARTIAL-PICK.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-simplify-Ver.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-remove-else-.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-keep-PE-COFF.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-narrow-down-.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-retval-o.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-remove-super.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-unnest-AddIm.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-eliminate-St.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-retval-f.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-imgexec-.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-defer-vs.patch [bz#1751993]
  - Resolves: bz#1751993
    (DxeImageVerificationLib handles "DENY execute on security violation" like "DEFER execute on security violation" [rhel8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-8.el8
changelog:
  - edk2-MdeModulePkg-Enable-Disable-S3BootScript-dynamically.patch [bz#1801274]
  - edk2-MdeModulePkg-PiDxeS3BootScriptLib-Fix-potential-nume.patch [bz#1801274]
  - Resolves: bz#1801274
    (CVE-2019-14563 edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-9.el8
changelog:
  - edk2-OvmfPkg-QemuVideoDxe-unbreak-secondary-vga-and-bochs.patch [bz#1806359]
  - Resolves: bz#1806359
    (bochs-display cannot show graphic wihout driver attach)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-1.el8
changelog:
  - Rebase to edk2-stable202005 [bz#1817035]
  - Resolves: bz#1817035
    ((edk2-rebase-rhel-8.3) - rebase edk2 to upstream tag edk2-stable202005 for RHEL-8.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-2.el8
changelog:
  - edk2-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch [bz#1844682]
  - edk2-OvmfPkg-GenericQemuLoadImageLib-log-Not-Found-at-INF.patch [bz#1844682]
  - edk2-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch [bz#1844682]
  - Resolves: bz#1844682
    (silent build of edk2-aarch64 logs DEBUG_ERROR messages that don't actually report serious errors)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-3.el8
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-pause-in-WaitForSemaphore-.patch [bz#1861718]
  - Resolves: bz#1861718
    (Very slow boot when overcommitting CPU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-4.el8
changelog:
  - edk2-OvmfPkg-SmmControl2Dxe-negotiate-ICH9_LPC_SMI_F_CPU_.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-befo.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-afte.patch [bz#1849177]
  - edk2-CryptoPkg-OpensslLib-Upgrade-OpenSSL-to-1.1.1g.patch [bz#1893806]
  - edk2-redhat-bump-OpenSSL-dist-git-submodule-to-1.1.1g-RHE.patch [bz#1893806]
  - Resolves: bz#1849177
    (OVMF: negotiate "SMI on VCPU hotplug" with QEMU)
  - Resolves: bz#1893806
    (attempt advancing RHEL8 edk2's OpenSSL submodule to RHEL8 OpenSSL 1.1.1g (or later))


author: Peter Jones <pjones@redhat.com> - 15-1
changelog:
  - Update to efibootmgr 15
  - Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  - make --loader default build-time configurable
  - sanitize set_mirror()/get_mirror()
  - Add support for parsing loader options as UCS2
  - GCC 7 fixes
  - Don't use -fshort-wchar since we don't run on EFI machines.
  - Also rebuild for efivar-31-1.fc26 to get symbol versioning right.
    Resolves: rhbz#1468841


author: Peter Jones <pjones@redhat.com> - 32-1
changelog:
  - efivar 32
  - lots of coverity fixes; mostly leaked memory and fds and the like
  - fix sysfs pci path formats
  - handle device paths for dns, nfit, bluetooth, wifi, emmc, btle.
  - improved abi checking on releases
  - Fix failures on EDIT_WRITE in edit_variable() when the variable doesn't exist
  - Add efi_guid_ux_capsule_guid to our guids
  - Now with %check


author: Peter Jones <pjones@redhat.com> - 35-1
changelog:
  - Update to efivar 35
  - fixes for older compilers
  - efi_get_variable_exists()
  - Lots of stuff to make CI work.
  - use usleep() to avoid hitting the kernel rate limiter on efivarfs
  - better EFI_GUID macro
  - add efi_guid_fwupdate (0abba7dc-e516-4167-bbf5-4d9d1c739416)


author: Peter Jones <pjones@redhat.com> - 36-1
changelog:
  - Update to efivar 36 (and some change)
    Resolves: rhbz#1635019
  - Add NVDIMM support
  - Re-written linux interface parser to handle how devices are
    partitioned better, and for cleaner code, with one file per device
    type.
  - lots of verbosity updates
  - better CI
  - analysis with clang's analyzer as well as coverity
  - Better handling of immutable bits in sysfs
  - LIBEFIVAR_OPS=help
  - lots of code cleanups.
  - Add emmc device support
  - Add SAS port expander support
  - Support for ACPI root nodes that are less common
    (i.e. ACPI Generic Container and Embedded Controller PNP nodes)
  - Make abbreviated device paths if we can't parse a device's info
  - Don't require NVME to have an EUI


author: Lyude Paul <lyude@redhat.com> - 8.4.0-2.20181118git1830dcb
changelog:
  - Start using proper git version strings for rawhide
  - Enabling building of wayland and freetype demos


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release (#1614972)
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - backends: RISCV and M68K now have backend implementations to
      generate CFI based backtraces.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403
      (#1623754, #1625052, #1625057).


author: Mark Wielaard <mjw@redhat.com> - 0.174-4
changelog:
  - Add elfutils-0.174-size-rec-ar.patch
    CVE-2018-18520 (#1646479)
  - Add elfutils-0.174-ar-sh_entsize-zero.patch
    CVE-2018-18521 (#1646484)


author: Mark Wielaard <mjw@redhat.com> - 0.174-5
changelog:
  - Add elfutils-0.174-x86_64_unwind.patch (#1650114).
  - Add elfutils-0.174-gnu-property-note.patch (#1650120).
  - Add elfutils-0.174-version-note.patch.
  - Add elfutils-0.174-gnu-attribute-note.patch (#1650125).


author: Mark Wielaard <mjw@fedoraproject.org> - 0.176-1
changelog:
  - New upstream release.
    - backends: riscv improved core file and return value location support.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Mark Wielaard <mjw@redhat.com> - 0.178-2
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libcpu: Add RISC-V disassembler.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.
  - Fix libdebuginfod file list for debuginfo-client[-devel].


author: Mark Wielaard <mjw@redhat.com> - 0.178-4
changelog:
  - Add elfutils-debuginfod-client Provides and Requires with depsuffix
    to get multilib dependencies correct. Add %{version}-%{release} to
    keep subpackages in sync.


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch
  - Add an explicit versioned requires from elfutils-debuginfod-client
    on elfutils-libs and elfutils-libelf.
  - Remove brew testsuite workarounds


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Tomáš Mráz <tmraz@redhat.com> - 0.12-0.50.pre6
changelog:
  - drop disablement of TLS1.0 on second attempt to connect,
    it would not work correctly anyway and the code does not build
    with OpenSSL-1.1.0


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.51.pre6
changelog:
  - fix compatibility with OpenSSL 1.1 (#1423519)
  - make configure.ac recognize recent versions of GCC
  - apply patches automatically to ease maintenance


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.55.pre6
changelog:
  - drop support for JS engine that is no longer maintained
  - always build verbosely, drop outdated doc files


author: Jacek Migacz <jmigacz@redhat.com> - 1:26.1-10
changelog:
  - Fix etags local command injection vulnerability (#2175189)
  - Fix htmlfontify.el command injection vulnerability (#2175178)
  - Fix ob-latex.el command injection vulnerability (#2180587)


author: Jacek Migacz <jmigacz@redhat.com> - 1:26.1-12
changelog:
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Disable xwidgets (RHEL-14549)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.6.6-14
changelog:
  - remove old stuff https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/


author: Jan Synáček <jsynacek@redhat.com> - 4.0.0-2
changelog:
  - Fix 4.0.0 BuildRequires and Requires (#1503408)
    + Big thanks to Xavier Delaruelle for a spec patch!
  - Fix installing manpages as alternatives


author: Jan Synáček <jsynacek@redhat.com> - 4.1.1-1
changelog:
  - Update to 4.1.1 (#1546450, #1139165, #1545369)
    + Big thanks to Xavier Delaruelle for a spec patch!


author: Jack Magne <jmagne@redhat.com> - 1.1.2-6
changelog:
  - #Resolve: Bug 1638011 - esc docdir should not be versioned in rhel8.
  - #Resolve: Bug 1596915 - Remove XULRunner from ESC.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-9
changelog:
  - Resolves:  rhbz#1679659 - esc changes blocked until gating tests are added
  - Fixed the gating test string to adhere to format.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-10
changelog:
  - Resolves: rhbz#1679659 - esc changes blocked until gating tests are added.
  - Added notification list in yaml file, so entities are notified of changes.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-11
changelog:
  - Resolves: rhbz#1724787 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations [8.2] 
  - Resolves: rhbz#1734117 - ESC does not detect/recognize both clean and formatted (with phone home) smart cards
  - Resolves: rhbz#1733645 - Gemalto, CAC, SCP01 cards are not detected by HP keyboard KUS1206 with builtin smartcard reader


author: Jack Magne <jmagne@redhat.com> - 1.1.2-12
changelog:
  - Resolves: rhbz#1646486 - alt tokens not detected by ESC
  - Resolves: rhbz#1774750 - ESC's unusual behavior after formatting a blank Gemalto token
  - Resolves: rhbz#1774770 - After formatting a Gemalto/SCP03 token, ESC shows incorrect Issuer, Issued To, Status, and Token ID details


author: Jack Magne <jmagne@redhat.com> - 1.1.2-17
changelog:
  - Resolves: rhbz#1924088- HP Keyboard does not list the certificates on an enrolled smart card.
  - Provide proper tag in build.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-18
changelog:
  - Related: rhbz#1870715 - HP Keyboard does not list the certificates on an enrolled smart card.
  - Re-spin with greater release number, to apease tps tests.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-19
changelog:
  - Resolves: rhbz#1972570 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-20
changelog:
  - Resolves: rhbz#1972570 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], z stream respin.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-22
changelog:
  - Resolves: rhbz#1972570 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], z stream respin.
  - Adjust final pcsc-lite package requirement.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-20
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-21
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-23
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.
  - Adjust final pcsc-lite package requirement.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-24
changelog:
  - Resolves: rhbz#1905691 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.7.0-8
changelog:
  - Split the lib into its own subpackage, it's LGPLv3+
  - remove utouch-evemu Obsoletes line, it's been over 5 years


author: Marek Kasik <mkasik@redhat.com> - 3.28.4-3
changelog:
  - Add requirement on evince-libs for nautilus and browser-plugin
  - subpackages (RPMDiff)
  - Related: #1717353


author: Marek Kasik <mkasik@redhat.com> - 3.28.4-7
changelog:
  - Set "application-id" property for evince's GApplication
  - to "org.gnome.evince.Application" to avoid a critical warning.
  - Resolves: #1842017


author: Milan Crha <mcrha@redhat.com> - 3.28.5-10
changelog:
  - Add patch for RH bug #1764563 (CVE-2018-15587: Reposition signature bar)
  - Add patch for RH bug #1753220 (GalA11yETableItem: Incorrect implementation of AtkObjectClass::ref_child())


author: Milan Crha <mcrha@redhat.com> - 3.28.5-23
changelog:
  - Related: RHEL-12398 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 3.28.5-25
changelog:
  - Resolves: RHEL-29169 (Composer: Cursor jumps to the starting line when "return" key is pressed at the end of the line)
  - Remove dependency on evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.28.5-25
changelog:
  - Resolves: RHEL-29169 (Composer: Cursor jumps to the starting line when "return" key is pressed at the end of the line)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-3
changelog:
  - Add patch for RH bug #1624835 (Quoting of plain text mail into HTML mode mangles deeper levels)
  - Add patch for RH bug #1624867 (Extra new line added in front of long URLs)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-4
changelog:
  - Add patch for RH bug #1653232 ([CalDAV/CardDAV] Can add component to local cache with incomplete info)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-5
changelog:
  - Add patch for RH bug #1654203 (Make tests retry when factory doesn't know about added ESource yet)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-7
changelog:
  - Add patch for RH bug #1654720 (Correct use-after-free in e_vcard_attribute_remove_param_value())
  - Add patch for RH bug #1654783 (test-cal-client-get-revision could fail due to delayed D-Bus property change notification)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-8
changelog:
  - Add patch for RH bug #1655030 (Make EVCardAttribute/EVCardAttributeParam structures ref-counted internally)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-9
changelog:
  - Update patch for RH bug #1654203 (Make tests retry when factory doesn't know about added ESource yet)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-11
changelog:
  - Update patch for RH bug #1713619 (test-cal-client-get-revision could fail due to delayed D-Bus property change notification)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-17
changelog:
  - Resolves: #1972749 (PrintableOptions.cmake: Correct variable name comparison)
  - Resolves: #1971676 (ECalBackendFile: Free interval tree only when being allocated)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-23
changelog:
  - Resolves: RHEL-12398 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.28.5-3
changelog:
  - Add "Enable only Notification reminders in the calendar" upstream fix
  - Add "Treat 'Unknown' ResponseType as Needs-Action" upstream fix
  - Add "I#19 - Country is forgotten along the way to exchange server" upstream fix
  - Add "I#21 - Meeting with attachment cannot be saved in 2010" upstream fix
  - Add "Collection backend schedules two 'populate' requests after going online" upstream fix


author: Milan Crha <mcrha@redhat.com> - 3.28.5-7
changelog:
  - Add patch for RH bug #1764818 (Sync CategoryList with mail Labels)
  - Add patch for RH bug #1765005 (Send meeting change notifications only if being the organizer)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-10
changelog:
  - Resolves: #1886026 (Simplify OAuth2 for outlook.office365.com server)
  - Resolves: #1885229 (Allow change of the Microsoft 365 OAuth2 endpoints)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-14
changelog:
  - Resolves: RHEL-19376 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Owen Taylor <otaylor@redhat.com> - 2.4.2-4
changelog:
  - Make manpage installation agnostic of compression
    https://fedoraproject.org/wiki/Packaging:Guidelines#Manpages


author: Jan Grulich <jgrulich@redhat.com> - 0.26-9
changelog:
  - Security fix for CVE-2017-17723, CVE-2017-17725, CVE-2018-10958, CVE-2018-10998,
    CVE-2018-11531, CVE-2018-12264, CVE-2018-12265, CVE-2018-14046, CVE-2018-5772,
    CVE-2018-8976, CVE-2018-8977, CVE-2018-9144


author: Jan Grulich <jgrulich@redhat.com> - 0.27.2-4
changelog:
  - Drop test for the previous CVE as we test it manually and we don't have POC available
    Resolves: bz#1800472


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-3
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990355


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-4
changelog:
  - CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    Resolves: bz#1953758

  - CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1953772


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018422

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003673


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-5
changelog:
  - Fix multiple CVEs
  - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-23852
  - Resolves: CVE-2021-45960
  - Resolves: CVE-2021-46143
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-6
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-10.1
changelog:
  - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate
  - Resolves: CVE-2022-43680


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-14
changelog:
  - Fix multiple CVEs
  - Fix CVE-2024-45492 integer overflow
  - Fix CVE-2024-45491 Integer Overflow or Wraparound
  - Fix CVE-2024-45490 Negative Length Parsing Vulnerability
  - Resolves: RHEL-57505
  - Resolves: RHEL-57493
  - Resolves: RHEL-56751


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-4.2
changelog:
  - Fix multiple CVEs
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Radovan Sroka <rsroka@redhat.com> - 0.8.8-1
changelog:
  - New upstream release
  - Added new DNF plugin that can update the trust database when rpms are installed
  - Added support for FAN_OPEN_EXEC_PERM


author: Radovan Sroka <rsroka@redhat.com> - 0.8.10-2
changelog:
  - Convert hashes to lowercase like sha256sum outputs
  - Stop littering STDOUT output for dnf plugin in fapolicyd
  Resolves: rhbz#1721496


author: Radovan Sroka <rsroka@redhat.com> - 0.8.10-3.1
changelog:
  RHEL 8.1.Z
  - fixed: fapolicyd blocks dracut from generating initramfs
  - changed default fapolicyd.rules
  Resolves: rhbz#1791856


author: Radovan Sroka <rsroka@redhat.com> - 0.9.1-2
changelog:
  RHEL 8.2 ERRATUM
  - rebase to v0.9.1
  - updated default configuration with new syntax
  - removed daemon mounts configuration
  Resolves: rhbz#1759895
  - default fapolicyd policy prevents Ansible from running
  - added ansible rule to default ruleset
  Resolves: rhbz#1746464
  - suspicious logs on service start
  Resolves: rhbz#1747494
  - fapolicyd blocks dracut from generating initramfs
  - added dracut rule to default configuration
  Resolves: rhbz#1757736
  - fapolicyd fails to identify perl interpreter
  Resolves: rhbz#1765039


author: Radovan Sroka <rsroka@redhat.com> - 0.9.1-3
changelog:
  RHEL 8.2 ERRATUM
  - fixed build time python interpreter detection (spec)
  - added python2-devel as a BuildRequires (spec)
  - allow running bash scripts in home directories
  Resolves: rhbz#1801872


author: Radovan Sroka <rsroka@redhat.com> - 1.0-2
changelog:
  RHEL 8.3 ERRATUM
  - rebase to v1.0
  - installed multiple policies to /usr/share/fapolicyd
    - known-libs (default)
    - restrictive
  - installed fapolicyd.trust file
  - enhanced fapolicyd-cli
  Resolves: rhbz#1817413
  - introduced fapolicyd-selinux that provides SELinux policy module
  Resolves: rhbz#1714529


author: Radovan Sroka <rsroka@redhat.com> - 1.0-3.1
changelog:
  RHEL 8.3.Z ERRATUM
  - allow root everything
  - ensure that root rule is in .rules
  Resolves: rhbz#1895513


author: Radovan Sroka <rsroka@redhat.com> - 1.0-3.4
changelog:
  RHEL 8.3.Z ERRATUM
  - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail [rhel-8.3.0.z]
  - fixed java detection
  Resolves: rhbz#1905895
  - Erratum RHBA-2020:4969 is of no help when upgrading partially RHEL 8.2 systems [rhel-8.3.0.z]
  Resolves: rhbz#1906472


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-3
changelog:
  RHEL 8.4.0 ERRATUM
  - rebase to 1.0.2
  - strong dependency on rpm/rpm-plugin-fapolicyd
  - installed dnf-plugin is dummy and we are not using it anymore
  - enabled integrity setting
  Resolves: rhbz#1887451
  - added make check
  - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
  - fixed java detection
  Resolves: rhbz#1895435
  - dnf update fails when fapolicyd is enabled
  Resolves: rhbz#1876975
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-5
changelog:
  RHEL 8.4.0 ERRATUM
  - fixed multiple problems with unlink()
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-7
changelog:
  - fapolicyd abnormally exits by executing sosreport
  - fixed multiple problems with unlink()
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1943251


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-2
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespace in trust files
  - use full paths in trust files
  Resolves: rhbz#1939379
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#1989272
  - fix fapolicyd-dnf-plugin reporting as '<invalid>'
  Resolves: rhbz#1997414
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014445


author: Radovan Sroka <rsroka@redhat.com> - 1.1-1
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#1939379
  - introduce rules.d feature
  Resolves: rhbz#2054741
  - remove pretrans scriptlet
  Resolves: rhbz#2051485


author: Radovan Sroka <rsroka@redhat.com> - 1.1-6
changelog:
  RHEL 8.6.0 ERRATUM
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
  Resolves: rhbz#2069120


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-8
changelog:
  RHEL 8.7.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100087
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070639
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111243
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111935
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2103914
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2100089
  - compiled.rules file ownership and mode
  Resolves: rhbz#2066653
  - Faulty handling of static applications
  Resolves: rhbz#2084497
  - Introduce ppid rule attribute
  Resolves: rhbz#2102563
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path [rhel-8.7.0]
  Resolves: rhbz#2069121
  - Fapolicyd denies access to /usr/lib64/ld-2.28.so [rhel-8.7.0]
  Resolves: rhbz#2068105


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-12
changelog:
  RHEL 8.8.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2088349
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2103352
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2087040
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: rhbz#2165645


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-1
changelog:
  RHEL 8.9.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-519
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-628
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-629
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-632
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-631
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-630
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-731
  - fapolicyd can create RPM DB files /var/lib/rpm/__db.xxx with bad ownership causing AVCs to occur
  Resolves: RHEL-829
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-820


author: Chris Leech <cleech@redhat.com> - 1.0.32-6
changelog:
  - remove fcoe from SUPPORTED_DRIVERS in /etc/sysconfig/fcoe
  - add qedf to SUPPORTED_DRIVERS in /etc/sysconf/fcoe
  - added upstream fix for large fcoe ctrl numbers


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-94
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2080994


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-96
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072421


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-99
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2092921


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-111
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152105


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-112
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#1787178


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-114
changelog:
  - fence_aws: add --skip-race-check parameter to allow running outside
    of AWS network
    Resolves: rhbz#2183158


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 4.2.1-121.2
changelog:
  - bundled urllib3: fix CVE-2023-43804
    Resolves: RHEL-11988
  - bundled certifi: fix CVE-2023-37920
    Resolves: RHEL-6972


author: Craig Guiller <craig.guiller@oracle.com> - 4.2.1-121.4
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-21719
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-21727
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-22179


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-125
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14031


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-127
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5397
  - fence_zvmip: document required user permissions in metadata/manpage
    Resolves: RHEL-14343


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18132
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20915
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-22174


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129.2
changelog:
  - fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer
    Resolves: RHEL-7734
  - bundled jinja2: fix CVE-2024-34064
    Resolves: RHEL-35655


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129.5
changelog:
  - fence_scsi: preempt clears all devices on the mpath device, so only
    run it for the first device
    Resolves: RHEL-56840


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129.7
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76492


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-11
changelog:
  - fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
    Resolves: rhbz#1654968
  - fence_scsi: add watchdog retry support
    Resolves: rhbz#1654976
  - fence_hpblade: fix log_expect syntax
    Resolves: rhbz#1654616
  - fence_vmware_soap: cleanup when receiving SIGTERM
    Resolves: rhbz#1654973


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-13
changelog:
  - fence-agents-scsi: add missing fence-agents-common dependency
    Resolves: rhbz#1665170
  - fence_azure_arm: add bundled directory to search path
    Resolves: rhbz#1650214


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-17.1
changelog:
  - fence_gce: fix Python 3 encoding issue
    Resolves: rhbz#1710066
  - fence_aliyun: upgrade python-aliyun-sdk-core to fix httplib issue
    Resolves: rhbz#1710056
  - fence_redfish: use ipport parameter
    Resolves: rhbz#1710055


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-23
changelog:
  - fence_rhevm: add RHEV v4 API support and auto-detection
    Resolves: rhbz#1709780
  - fence_rhevm: fix encoding issues
    Resolves: rhbz#1712263


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-25
changelog:
  - fence_redfish: add header for full Redfish spec compliance
    Resolves: rhbz#1704228
  - fence_scsi: fix to match new node ID format
    Resolves: rhbz#1714458


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31
changelog:
  - fence_aliyun: add RAM role support
    Resolves: rhbz#1732766
  - fence_ilo4_ssh/fence_ilo5_ssh: add monitor timeout warning
    Resolves: rhbz#1734811
  - fence_mpath: fix watchdog reboot not triggered when multipath
    disconnected
    Resolves: rhbz#1751704


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34
changelog:
  - fence_compute/fence_evacuate: fix region_name content type and
    project shortopt in usage text and project-domain shortopt
    Resolves: rhbz#1760201
  - fencing: improve stdin quote parsing
    Resolves: rhbz#1769783


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39
changelog:
  - fencing: only use inetX_only parameters for SSH based agents and
    fence_zvmip
    Resolves: rhbz#1771594


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41
changelog:
  - fence_mpath: add plug parameter support to be able to use pcmk_host_map
    Resolves: rhbz#1753228
  - fence_mpath: fix --reserve parameter typo
    Resolves: rhbz#1798641


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1
changelog:
  - fence_lpar: fix issue with long username, hostname, etc not
    working when the command run by the agent exceeds 80 characters

    Resolves: rhbz#1861139


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-42
changelog:
  - fence-agents-lpar: build on non-ppc64le arch's
    Resolves: rhbz#1804907
  - fence_aws: improve parameter logic to allow setting region parameter
    while using credentials from ~/.aws/config
    Resolves: rhbz#1810457


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-47
changelog:
  - fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
    and avoid failing when hitting it during the monitor-action
    Resolves: rhbz#1827652
  - fence_compute/fence_evacuate: fix --insecure parameter
    Resolves: rhbz#1830776
  - fence_scsi: add readonly parameter
    Resolves: rhbz#1750596


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-52
changelog:
  - fence_lpar: fix issue with long username, hostname, etc not
    working when the command run by the agent exceeds 80 characters

    Resolves: rhbz#1860544


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-52
changelog:
  - fence_lpar: fix issue with long username, hostname, etc not
    working when the command run by the agent exceeds 80 characters
    Resolves: rhbz#1860544


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-54
changelog:
  - fence_azure_arm: fix MSI support
    Resolves: rhbz#1818157
  - fence_mpath: allow spaces for comma-separated devices and add
    support for space-separated devices
    Resolves: rhbz#1851115
  - fence_ipmilan: add ability to increase ipmitool verbosity
    Resolves: rhbz#1853973
  - fence_lpar: fix list-status action
    Resolves: rhbz#1861926
  - all agents: make telnet a weak dependency
    Resolves: rhbz#1851232


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-59
changelog:
  - fencing: add disable-timeout parameter and make it true by default
    for Pacemaker 2.0+
    Resolves: rhbz#1470813, rhbz#1436429


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-61
changelog:
  - fence_scsi: dont write key to device if it's already registered,
    and dont write device to file when cluster is started again
    Resolves: rhbz#1841087


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-69
changelog:
  - fencing: add "stonith_status_sleep" parameter to set sleep between
    status calls during STONITH action
    Resolves: rhbz#1780825


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-79
changelog:
  - fence_amt_ws: fix "or" causing dead code
    Resolves: rhbz#2010710
  - fence_gce: add proxy support
    Resolves: rhbz#1969953


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-89.1
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2083254


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-89.3
changelog:
  - fence_ibm_vpc: add proxy support
    Resolves: rhbz#2092460
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2100152


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 0.4.0-6
changelog:
  - Harden with -fPIE and -Wl,-z,now
    Resolves: rhbz#1624110
  - Add CI gating tests
    Resolves: rhbz#1682883


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.0.0-3
changelog:
  - fence_virt: add note that reboot-action doesnt power on nodes that
    are powered off
    Resolves: rhbz#2132010


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.0.0-4
changelog:
  - fence_virtd: add link to uri examples and uri w/socket path
    example for when VMS are run as non-root user to manpage

    Resolves: rhbz#2138825


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-10
changelog:
  - Improve output related to SSLv3 disabling
    Resolves: #1331702
  - Minor fixes in options, usage message and man page


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-17
changelog:
  - Remove unnecessary python-devel dependency
    (disables build of fetchmailconf, but we don't pack it into rpm anyway)
    Resolves: #1591710


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #1999275, #2002698


author: Dan Horák <dan[at]danny.cz> - 3.3.5-3
changelog:
  - Update BRs so nss-myhostname (provided by systemd) is included also
    in mpich-only builds (Related: #1383271)


author: Merlin Mathesius <mmathesi@redhat.com> - 3.3.5-8
changelog:
  - Disable Open MPI's vader byte transfer layer while running tests on 32-bit x86 platforms
    as it is known to be troublesome <https://github.com/open-mpi/ompi/issues/4260>.
    This resolves FTBFS issue (BZ#1518038).


author: Merlin Mathesius <mmathesi@redhat.com> - 3.3.5-11
changelog:
  - Regenerate autoconf files using current tools so proper build flags
    from redhat-rpm-config are used. This resolves BZ#1548473.


author: Kamil Dudka <kdudka@redhat.com> - 5.33-4
changelog:
  - do not classify shared libraries as pie executables (#1581343)
  - seccomp: fix build failure due to missing syscalls


author: Kamil Dudka <kdudka@redhat.com> - 5.33-7
changelog:
  - show details about ppc swap partition (#1224668)
  - support longer version strings for clamav database (#1539107)


author: Kamil Dudka <kdudka@redhat.com> - 5.33-11
changelog:
  - improve documentation of --apple in file(1) man page (#1677442)
  - improve parsing of ppc core files (#1658171)


author: Miro Hrončok <mhroncok@redhat.com> - 5.33-3
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build)


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: EL Errata <el-errata_ww@oracle.com> - 102.10.0-1.0.1
changelog:
  - Updated homepages to use https [Orabug: 34648274]
  - Removed Upstream references
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: EL Errata <el-errata_ww@oracle.com> - 102.3.0-6.0.1
changelog:
  - Removed Upstream references
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: Darren Archibald <darren.archibald@oracle.com> - 115.5.0-1.0.1
changelog:
  - Update to 115.5.0 build1
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 115.6.0-1.0.1
changelog:
  - Update to 115.6.0 build1
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 115.9.1-2.0.1
changelog:
  - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file
  - Updated homepages to use https [Orabug: 34648274]


author: Alan Steinberg <alan.steinberg@oracle.com> - 128.10.0-1.0.1
changelog:
  - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789]
  - Force use of gcc-toolset-13 due to clang dependency


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Fixes: RHEL-64749


author: Jingdong Lu <jingdong.lu@oracle.com> - 60.6.1-1.0.1
changelog:
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
  - Build with ol8 rust/llvm rather than scl


author: Edward Leung <edward.leung@oracle.com> - 68.0.1-3.0.1
changelog:
  - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264]
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: EL Errata <el-errata_ww@oracle.com> - 68.10.0-1.0.1.el8_2
changelog:
  - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264]
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
  - Remove upstream references [Orabug: 30530527]


author: Adam Jackson <ajax@redhat.com> - 0.11.7-2
changelog:
  - Remove Requires: kernel >= 4.0.4-202, which corresponds to rawhide
    somewhere before Fedora 22 which this spec file certainly no longer
    supports.


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Akira TAGOH <tagoh@redhat.com> - 2.13.0-6
changelog:
  - Add Suggests: dejavu-sans-fonts to address pulling the unpredicted
    font package as dependency. (#1321551)


author: Akira TAGOH <tagoh@redhat.com> - 2.13.1-3
changelog:
  - Stop cleaning up .uuid file even when a directory is empty.
    resolves: rhbz#1653171
  - Use Rachana instead of Meera for serif subsitution.
    resolves: rhbz#1650491


author: Parag Nemade <pnemade AT redhat DOT com> - 20161012-6
changelog:
  - Resolves:rh#1429574 - [abrt] fontforge: PyFF_OpenFont(): fontforge killed by signal 6
  - Added patch to fix python module for python3.6


author: José Expósito <jexposit@redhat.com> - 3.0.0-9
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25175
    Resolves: https://issues.redhat.com/browse/RHEL-25177


author: Josef Ridky <jridky@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6 (#1468062)
  - Fix issue with capital letters in commands in manpage (#1468984)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.15-16
changelog:
  - Add make to Requires(post) to fix certificate generation on install.
    Resolves: Bug#1628213 FreeRADIUS fails to start due to default certificate
                          permissions


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.15-18
changelog:
  - Actually apply patches added previously.
    Related: Bug#1612512 Man page scan results for freeradius


author: Alexander Scheel <ascheel@redhat.com> - 3.0.17-1
changelog:
  - Update to FreeRADIUS server version 3.0.17
  - Adds OpenSSL HMAC patches from upstream (unreleased)
  - Adds Python2 shebang patches from upstream (unreleased)


author: Alexander Scheel <ascheel@redhat.com> - 3.0.17-4
changelog:
  - Fixes two EAP-PWD security issues
    Resolves: bz#1699416 authentication bypass with an invalid curve attack


author: Alexander Scheel <ascheel@redhat.com> - 3.0.17-4
changelog:
  - Fixes two EAP-PWD security issues
    Resolves: bz#1699417 authentication bypass with an invalid curve attack
    Resolves: bz#1699421 fake authentication using reflection


author: Antonio Torres <antorres@redhat.com> - 3.0.20-13
changelog:
  - Fix multiple CVEs
  - Add rpminspect configuration
    Resolves: #2151702
    Resolves: #2151704
    Resolves: #2151706


author: Alexander Scheel <ascheel@redhat.com> - 3.0.20-1
changelog:
  - Update to FreeRADIUS server version 3.0.20
  - Introduce Python 3 support; resolves: bz#1623069
  - DoS issues due to multithreaded BN_CTX access; resolves: bz#1818809
  - Create tmp files in /run; resolves: bz#1805975


author: Alexander Scheel <ascheel@redhat.com> - 3.0.20-2
changelog:
  - Fix breakage caused by OpenSSL FIPS regression
    Related: bz#1855822
    Related: bz#1810911
    Resolves: bz#1672285


author: Karsten Hopp <karsten@redhat.com> - 2.0.0-37git}
changelog:
  - use versioned build requirement on pkgconfig(openssl) to prevent using
    compat-openssl10-devel instead of openssl-devel


author: Simone Caronni <negativo17@gmail.com> - 2:2.0.0-39.20180314gitf8baeb7
changelog:
  - Update to latest snapshot.
  - Fixes connection to RDP servers with the latest Microsoft patches:
    https://github.com/FreeRDP/FreeRDP/issues/4449


author: Ondrej Holy <oholy@redhat.com> - 2:2.0.0-46.rc4.1
changelog:
  - CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837632)
  - CVE-2020-11523: Fix integer overflow in region.c (#1837633)
  - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837631)


author: Ondrej Holy <oholy@redhat.com> - 2:2.0.0-47.rc4
changelog:
  - Fix SCARD_INSUFFICIENT_BUFFER error (rhbz#1803054)
  - Do not advertise /usb in help output (rhbz#1761144)


author: Ondrej Holy <oholy@redhat.com> - - 2:2.2.0-9
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136151)
  - CVE-2022-39283: Add missing length check in video channel (#2136153)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145139)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145139)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145139)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145139)
  - CVE-2022-39347: Fix path validation in drive channel (#2145139)
  - CVE-2022-41877: Add missing length check in drive channel (#2145139)


author: Tomas Popela <tpopela@redhat.com> - 1.6.1-7
changelog:
  - Rebuild with newer annobin to fix rpmdiff problems
  - Fix the build with a newer opencv
  - Resolves: rhbz#1703994


author: Akira TAGOH <tagoh@redhat.com> - 1.0.4-9
changelog:
  - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310.
    Resolves: rhbz#2050085, rhbz#2050068, rhbz#2050062
  - Drop --disable-docs from %configure. no such options available.


author: Michal Ruprich <mruprich@redhat.com> - 7.5-5
changelog:
  - Resolves: #1979426 - Unable to configure OSPF in multi-instance mode
  - Resolves: #1917269 - vtysh running-config output not showing bgp ttl-security hops option


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-6
changelog:
  - Resolves: #1939516 - frr service cannot reload itself, due to executing in the wrong SELinux context


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-7
changelog:
  - Resolves: #2128737 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-13
changelog:
  - Resolves: RHEL-2263 - eBGP multihop peer flapping due to delta miscalculation of new configuration


author: Craig Guiller <craig.guiller@oracle.com> - 7.5.1-13.3
changelog:
  - Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgp_flowspec.c
  - Resolves: RHEL-15919 - Out of bounds read in bgpd/bgp_label.c
  - Resolves: RHEL-15869 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15868 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-14
changelog:
  - Resolves: RHEL-6617 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-17
changelog:
  - Resolves: RHEL-6583 - Routes are not refreshed after changing the inbound route rules from deny to permit


author: Craig Guiller <craig.guiller@oracle.com> - 7.5.1-22.0.1
changelog:
  - Fix POSTIN scriptlet [Orabug: 34712485]
  - Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgp_flowspec.c
  - Resolves: RHEL-15919 - Out of bounds read in bgpd/bgp_label.c
  - Resolves: RHEL-15869 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15868 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-1
changelog:
  - Resolves: #2018451 - Rebase of frr to version 7.5.1
  - Resolves: #1975361 - the dynamic routing setup does not work any more


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-2
changelog:
  - Resolves: #1941765 - AVCs while running frr tests on RHEL 8.4.0 Beta-1.2
  - Resolves: #1714984 - SELinux policy (daemons) changes required for package


author: John Mcwalters <john.mcwalters@oracle.com> - 2.9.7-12.0.1
changelog:
  - Import patches from 2.9.4-1.0.7:
    Security Update based on ELSA-2018-3324 fuse: bypass of the "user_allow_other"
    restriction when SELinux is active. [CVE-2018-10906]

    When SELinux is active, fusermount is vulnerable to a restriction bypass. This allows
    non-root users to mount a FUSE file system with the 'allow_other' mount option
    regardless of whether 'user_allow_other' is set in the fuse configuration.

    When checking whether allow_other/allow_root are allowed, fusermount lets users escape
    commas, even when the mount options do not permit backslashes. This allows a malicious
    user to hide options forbidden by fusermount. By using specially crafted values in the
    `context` mount option interpreted by SELinux, it is possible to use a backslash and
    smuggle the `allow_other` mount option.

    added patches:
    fuse-0002-fusermount-refuse-unknown-options.patch


author: Gautham Ananthakrishna <gautham.ananthakrishna@oracle.com> - 2.9.7-12.0.2
changelog:
  - libfuse: refcount fuse_chan objects
  - libfuse: get ref for req
  - libfuse: add clone_fd option
  - libfuse: Convert numa to clone_fd
  - [Orabug: 31436872]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.9.7-15.0.1
changelog:
  - libfuse: refcount fuse_chan objects [Orabug: 31436872]
  - libfuse: get ref for req [Orabug: 31436872]
  - libfuse: add clone_fd option [Orabug: 31436872]
  - libfuse: Convert numa to clone_fd [Orabug: 31436872]
  - libfuse: fix API compatibility [Orabug: 32415707]


author: Pavel Reichl <preichl@redhat.com> - 2.9.7-16
changelog:
  - Back-port max_pages support,
  - caching symlinks in kernel page cache,
  - and in-kernel readdir caching
  - Fixed rhbz#2080000


author: EL Errata <el-errata_ww@oracle.com> - 2.9.7-16.0.1
changelog:
  - Fixing segault in fuse_session_remove_chan function [Orabug: 34051427]
  - libfuse: refcount fuse_chan objects [Orabug: 31436872]
  - libfuse: get ref for req [Orabug: 31436872]
  - libfuse: add clone_fd option [Orabug: 31436872]
  - libfuse: Convert numa to clone_fd [Orabug: 31436872]
  - libfuse: fix API compatibility [Orabug: 32415707]


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-5
changelog:
  - be sure to work properly also with older rhel8 kernels, thanks to Giuseppe Scrivano
  - Resolves: #1803495


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-4
changelog:
  - replace "fuse-overlayfs segfault" patch with improved one
    due to application to a different context
  - Resolves: #1805017


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-4
changelog:
  - replace "fuse-overlayfs segfault" patch with improved one
    due to application to a different context
  - Resolves: #1805015


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-1
changelog:
  - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.0.0
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-3
changelog:
  - fix "error bind mounting /dev from host into mount namespace"
    (the openat2 syscall is not yet supported by the RHEL8 kernel)
  - Resolves: #1867447


author: Jindrich Novy <jnovy@redhat.com> - 1.13-1
changelog:
  - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 1.5.0-2
changelog:
  - be sure to disable openat2 syscall also with 1.5.0 - this is not supported
    in RHEL8 kernel (yet)
  - Related: #1954702


author: Richard Hughes <richard@hughsie.com> 1.1.3-1
changelog:
  - New upstream release
  - Adds support for an upcoming Dell USB-C dock
  - Don't use an obsolete font when building the UEFI images
  - Resolves: #1607842


author: Richard Hughes <richard@hughsie.com> 1.1.4-1
changelog:
  - New upstream release
  - Use HTTPS_PROXY if set
  - Make the dell-dock plugin more robust in several ways
  - Adjust EVB board handling
  - Resolves: #1647557


author: EL Errata <el-errata_ww@oracle.com> - 1.1.4-7.0.1.el8_2
changelog:
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)


author: Richard Hughes <richard@hughsie.com> 1.4.2-1
changelog:
  - New upstream release
  - Backport a patch to fix the synaptics fingerprint reader update.
  - Resolves: #1775277


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - Rebase package to include support for latest OEM hardware and to
    support deploying UEFI SecureBoot dbx updates.
  - Resolves: #1870811


author: Richard Hughes <richard@hughsie.com> 1.5.5-2
changelog:
  - Do not invalidate all remote timestamps during package install to fix rpm -V.
  - Backport some important high priority fixes from upstream.
  - Resolves: #1926382


author: Richard Hughes <richard@hughsie.com> 1.5.9-3
changelog:
  - Rebase to include the SBAT metadata section to allow fixing BootHole
  - Resolves: rhbz#1933012
  - Resolves: rhbz#1932953
  - Resolves: rhbz#1932909
  - Resolves: rhbz#1932882
  - Resolves: rhbz#1932579
  - Resolves: rhbz#1932553
  - Resolves: rhbz#1932423


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport upstream changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1969472
  - Resolves: rhbz#1976408


author: Richard Hughes <richard@hughsie.com> 1.7.1-2
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Resolves: rhbz#2029333


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Resolves: rhbz#2038258
  - Resolves: rhbz#2037294


author: EL Errata <el-errata_ww@oracle.com> - 1.7.4-2.0.1
changelog:
  - Update SBAT data to include Oracle [Oracle: 33072886]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)


author: Alex Burmashev <alexander.burmashev@oracle.com> - 1.7.8-2.0.1
changelog:
  - Modify %prep to correctly apply downstream patches
  - Align sections to 512 bytes [Orabug: 35265981]
  - Use objcopy to build arm/aarch64 binaries if binutils 2.30-113.0.3 or newer [Orabug: 35265981]
  - Enabled signing for aarch64 [Orabug: 35265981]
  - Modify meson.build for fwupd-efi [Orabug: 35265981]
  - Update SBAT data to include Oracle [Oracle: 33072886]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)


author: Peter Jones <pjones@redhat.com> - 10-4
changelog:
  - Roll in some bugfixes that'll be in fwupdate-11 upstream.
    This helps fix a couple of vendors machines.


author: EL Errata <el-errata_ww@oracle.com> - 11-3.0.1
changelog:
  - build with the updated Oracle certificate
  - New secure boot signing key
  - Use redhat as efidir to maintain compatibility with RedHat


author: Charles R. Anderson <cra@wpi.edu> - 2008_10_13-10
changelog:
  - Patch to apply CFLAGS/LDFLAGS to final link so RPM_OPT_FLAGS are picked up (rhbz#1548426)
  - Use CC=gcc explicitly
  - Regenerate fxload-noa3load.patch


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-3
changelog:
  - Use downstream garbd-wrapper and garbd.service to ensure compatibility
  - Add upstream versions of garbd-wrapper (called garbd-systemd) and garbd.service
    in case user want's to use them


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-4
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.1.4-7
changelog:
  - Revert previous change of adding 'awk*' symlinks for info pages (bug #1486924)
  - Added patch to correctly fix the info pages issue (bug #1486924)
  - specfile content refactored for better readability
  - Package now provides its ABI version via gawk(abi)
  - Added test for usage of correct gawk(abi) into %check section


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.2.0-1
changelog:
  - Update to latest stable release from upstream [new API version - 2.0]
  - Added latest relevant patches from upstream's gawk-4.2-stable branch


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.2.0-2
changelog:
  - 'noarch' removed from *-devel subpackage
  - added arch requirement for *-devel subpackage
  - updated the build process to use %make_build macro


author: Rex Dieter <rdieter@fedoraproject.org> - 7.6.2-1
changelog:
  - 7.6.2 (#1531008)
  - libgc soname bump
  - -devel: include all docs here (ie, remove README's from main too)


author: Richard Hughes <richard@hughsie.com> - 1.0-1
changelog:
  - New upstream release
  - This fixes the security bug known as CVE-2018-5345
  - Add new API for fwupd
  - Do not encode timezone in generated files
  - Fix countless memory leaks when parsing corrupt files
  - Fix the calculation of the checksum on big endian machines
  - Switch to the Meson buildsystem


author: Nick Clifton <nickc@redhat.com> - 9.21-1
changelog:
  - Initial check-in for scl-gcc-toolset-10 branch.  (#1817171)
  - Fix stack clash protection problem. (#1803173)


author: Nick Clifton <nickc@redhat.com> - 9.29-1
changelog:
  - Fix AArch64 checks in annobin plugin.  (#1873416)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Do not enable debuginfod support by default.
  - Add run-time dependency on libdebuginfod library when debuginfod support is enabled.


author: Nick Clifton <nickc@redhat.com> - 2.35-5
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Nick Clifton <nickc@redhat.com> - 2.35-9
changelog:
  - Add ability to control the display of unicode characters.  (#2009178)
  - Backport some more speed up patches.  (#1978174)
  - Remove a quadratic performance penalty processing files.  (#1978174)
  - Extend vulnerability fix again.  (#1925779)


author: Nick Clifton <nickc@redhat.com> - 2.32-17
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1779417)
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Nick Clifton <nickc@redhat.com> - 2.32-18
changelog:
  - Fix failures in linker testuite due to compiling test code without -D_FORTIFY_SOURCE specified.  (#1809101)


author: Mark Wielaard <mjw@redhat.com> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.

  - Add scl macros and elfutils-0.173-dts.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403.


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - Update to elfutils-0.176.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Mark Wielaard <mjw@redhat.com> - 0.176-4
changelog:
  - Add elfutils-0.176-gcc-pr88835.patch
  - Add elfutils-0.176-xlate-note.patch
  - Add elfutils-0.176-elf-update.patch


author: Mark Wielaard <mjw@redhat.com> - 0.177-1
changelog:
  - New upstream release.
    - elfclassify: New tool to analyze ELF objects.
    - readelf: Print DW_AT_data_member_location as decimal offset.
               Decode DW_AT_discr_list block attributes.
    - libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
    - libdwelf: Add dwelf_elf_e_machine_string.
                dwelf_elf_begin now only returns NULL when there is an error
                reading or decompressing a file. If the file is not an ELF file
                an ELF handle of type ELF_K_NONE is returned.


author: Mark Wielaard <mjw@redhat.com> - 0.178-1
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.


author: Marek Polacek <polacek@redhat.com> 10.1.1-1.1
changelog:
  - correct instructions for creation of newlib tarball, filter out sun-rpc
    licensed code that is never used during the package build


author: Marek Polacek <polacek@redhat.com> 10.2.1-1
changelog:
  - GCC 10.2 release
  - add symlink to liblto_plugin.so in /usr/lib/bfd-plugins
  - disable -flto in %{optflags}, lto bootstrap will be enabled the GCC way
    later
  - require MPFR Library version 3.1.0 (or later)


author: Marek Polacek <polacek@redhat.com> 10.2.1-1.2
changelog:
  - avoid stack overflow in std::vector (PR libstdc++/94540, #1859670)
  - adjust some libstdc++_nonshared.a symbols
  - apply gcc10-libgfortran-compat-2.patch


author: Marek Polacek <polacek@redhat.com> 10.2.1-2
changelog:
  - update from Fedora gcc 10.2.1-2
  - emit debug info for C/C++ external function declarations used in the TU
    (PR debug/96383)
  - discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
  - strip also -flto=auto from optflags


author: Qing Zhao <qing.zhao@oracle.com> 10.2.1-2.0.1
changelog:
  - Fix Orabug 31197798 (Profile data size way too big)
    same bug as PR gcov-profile/95348:
    gcc11-pr95348.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Jose E. Marchesi <jose.marchesi@oracle.com> 10.2.1-2.0.2
changelog:
  - Make gcc-toolset-10-libasan-devel to depend on libasan6.
  - Redhat bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1939638
  - Reviewed-by: Nick Alcock <nick.alcock@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 10.2.1-2.0.3
changelog:
  - Delete the previous fix to libasan6 issue in 10.2.1-2.0.2.
  - Backport the following two redhat fix from 10.2.1-8.2:
    - actually use libgfortran_nonshared.a (#1929375)
      This is fix Orabug 32509350 - gcc-toolset-10 does not link the correct libgfortran files
    - have libasan-devel require libasan6 (#1939638)
  - Fix Orabug 32423691- gcc10 SEGV for every test in sregress: ORA-7445_ksmplru_add_batchksm
    same bug as PR tree-optimization/100053:
    gcc11-pr100053.patch
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Marek Polacek <polacek@redhat.com> 10.2.1-8
changelog:
  - update from Fedora gcc 10.2.1-8 (#1878887)
  - emit DW_AT_declaration on declaration-only DIEs (#1897272, PR debug/97060)
  - add BuildRequires: make and Requires: make, the latter for -flto reasons


author: Qing Zhao <qing.zhao@oracle.com> 10.2.1-8.2.0.1
changelog:
  - Fix Orabug 32423691- gcc10 SEGV for every test in sregress: ORA-7445_ksmplru_add_batchksm
    same bug as PR tree-optimization/100053:
    gcc11-pr100053.patch
  - Fix Orabug 31197798 (Profile data size way too big)
    same bug as PR gcov-profile/95348:
    gcc11-pr95348.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Marek Polacek <polacek@redhat.com> 10.3.1-1
changelog:
  - update from Fedora gcc 10.3.1-1 (#1929382)
  - drop gcc10-pr97060.patch
  - use --enable-cet
  - ship gcc-accel-nvptx-none-lto-dump
  - backport PR96939 fixes


author: Qing Zhao <qing.zhao@oracle.com> 10.3.1-1.2.0.1
changelog:
  - Fix Orabug 32423691- gcc10 SEGV for every test in sregress: ORA-7445_ksmplru_add_batchksm
    same bug as PR tree-optimization/100053:
    gcc11-pr100053.patch
  - Fix Orabug 31197798 (Profile data size way too big)
    same bug as PR gcov-profile/95348:
    gcc11-pr95348.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  Reviewed by: TBD


author: Sergio Durigan Junior <sergiodj@redhat.com> - 9.1-3
changelog:
  - Fix 'Recursive call to 'missing_rpm_list_print' when pagination is
    on and missing RPM list is big' (RHBZ 1801974, Sergio Durigan
    Junior).


author: Kevin Buettner <kevinb@redhat.com> - 9.1-6
changelog:
  - Fix build breakage of gdb/python/python.c due to use of deprecated
    Python function (RHBZ 1822715, Kevin Buettner)


author: Keith Seitz <keiths@redhat.com> - 9.2-1
changelog:
  - Rebase to FSF GDB 9.2.
  - Add explicit python bytecode compilation.
  - Change included files to patches to quell error from rpminspect.
  - Fix attach-32.exp from gdb-6.3-inferior-notification-20050721.patch.


author: Keith Seitz <keiths@redhat.com> - 9.2-3
changelog:
  - Fix missing debuginfo messages. (Keith Seitz, RH BZ 1894703)
  - Add debuginfod.m4 patch to use pkg-config. 
  - Backport "Corefile memory access problems" patches.
    (Kevin Buettner, RH BZ 1886602)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)


author: Keith Seitz <keiths@redhat.com> - 9.2-4
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905702)


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-3
changelog:
  - Use SPDX abbreviations for licenses.
  - Add library directories to existing LDFLAGS and not override them.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-4
changelog:
  - Pull upstream fix for ioctl evdev bitset decoding, fix the tests (#1747213).
  - Include upstream patches that fix issues reported by covscan (#1747530):
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing",
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register", and
    2b64854e "xlat: use unsgined type for mount_flags fallback values".


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790054):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache",
    35e080ae "syscall: do not capture stack trace while the tracee executes
             strace code", and
    8e515c74 "tests: add strace-k-p test".
  - Properly decode struct sockaddr_hci without hci_channel field.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-6
changelog:
  - Fix expected alignment for IPC tests (#1794490):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Frank Ch. Eigler <fche@redhat.com> - 4.3-7
changelog:
  - Fix rhbz1857749 with rhel8.3 baseos patch
  - Fix rhbz1852021 with more complete rhel8.3 baseos patch


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-3
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-19
changelog:
  - Add valgrind-3.15.0-time64.patch
  - Add valgrind-3.15.0-arm-preadv2-pwritev2.patch
  - Add valgrind-3.15.0-avx_estimate_insn-test.patch
  - Add valgrind-3.15.0-gcc-10-x86-amd64-asm-test.patch


author: Mark Wielaard <mjw@redhat.com> - 3.16.0-4
changelog:
  - Add valgrind-3.16.1-REX-prefix-JMP.patch
  - Add valgrind-3.16.1-epoll.patch
  - Add valgrind-3.16.1-sched_getsetattr.patch
  - Add valgrind-3.16.1-dl_runtime_resolve.patch


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72.  (#1957319)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Split plugins into separate sub-packages
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - NVR bump for another ELN sidetag rebuild.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.


author: Nick Clifton <nickc@redhat.com> - 9.79-1
changelog:
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - Annocheck: Remove limit on number of input files.
  - Annocheck: Conditionalize test of DF_PIE_1 flag.
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)


author: Nick Clifton <nickc@redhat.com> - 9.85-1
changelog:
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
  - Annocheck: Process files in command line order.  (#1988714)
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 10.23-1 (#2020405)
changelog:
  - Annocheck: Add a test for unicode characters in identifiers.
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.
  - Annocheck: Add more glibc function names.
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.
  - Annocheck: Add tests based upon recent bug fixes.
  - Annocheck: Another tweak to glibc detection code.
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.
  - Annocheck: Fix covscan detected flaws.
  - plugins: Add more required build options.
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.
  - Annocheck: Add more cases of glibc startup functions.
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.
  - Annocheck: Ignore gaps containing NOP instructions.
  - GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)
  - Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
  - Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
  - Annocheck: Fix exit code when tests PASS.
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.
  - Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - Annocheck: Fix memory corruption.  (#1996963)
  - Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.    
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
  - Annocheck: Fix memory corruption.  (#1988715)
  - Annocheck: Skip certain tests for kernel modules.


author: Nick Clifton <nickc@redhat.com> - 9.24-1
changelog:
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: David Faust <david.faust@oracle.com> - 2.36.1-1.0.1
changelog:
  - Backport CTF improvements since 2.36.1, upstream commits:
    36f61bf2ad9 PTR_ADD and NPTR_ADD for bfd.h
    c759c777c98 libiberty: add htab_eq_string
    6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
    e695879142a libctf, testsuite: fix various warnings in tests
    b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
    ea9c2009115 libctf: try several possibilities for linker versioning flags
    7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
    174fe10cb68 ubsan: libctf: applying zero offset to null pointer
    4821e618add Use htab_eq_string in libctf
    ae064303efe libctf, ld: fix test results for upstream GCC
    49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
    8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
    15131809c23 libctf: fix memory leak in a test
    0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
    5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
    86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
    485170cdb1b libctf, dump: do not emit size or alignment if it would error
    69a284867c7 libctf: support encodings for enums
    e4c78f303df libctf: a couple of small error-handling fixes
    d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
    08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
    77d724a7ecd libctf: eliminate dtd_u, part 4: enums
    986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
    2a05d50e90c libctf: don't lose track of all valid types upon serialization
    81982d20fac libctf: eliminate dtd_u, part 3: functions
    534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
    7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
    eefe721eadf libctf: fix GNU style for do {} while
    b9a964318a7 libctf: split up ctf_serialize
    01cbfcba4bc libctf: fix comment above ctf_dict_t
    bf4c3185a5a libctf: split serialization and file writeout into its own file
    087945261c7 libctf: fix some tabdamage and move some code around
    211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
    8e7e446446b libctf: free ctf_dynsyms properly
    cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
    4659554b280 libctf: minor error-handling fixes
    f5060e56338 libctf: add a deduplicator-specific type mapping table
    478c04a55ee libctf: remove reference to "unconflicted link mode".
    8915c559d40 libctf, include: remove the nondeduplicating CTF linker
    fd12633780a libctf: fix ChangeLog date
    ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
    eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
    8255cf421c5 libctf regen for NEWS
    93993f67849 libctf AC_CANONICAL_TARGET
    03c653093d7 libctf: add a NEWS
    f4f60336dae libctf, include: find types of symbols by name
    c3bf9dc5aa3 Include ld-lib.exp from ctf-lib.exp
    758f590744b libctf: add missing header in BFD ELF check
    cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
    95148614026 bfd, opcodes, libctf: support --with-included-gettext
    ee87f50b8d2 libctf: always name nameless types "", never NULL
    5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
    caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
    78f28b89e8c libctf: rip out dead code handling typedefs with no name
    35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
    26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
    e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.36.1-1.0.1.1
changelog:
  - Forward port Oracle patches from 2.36.1-1.0.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.36.1-2.0.1
changelog:
  - Correct bug number for unicode character display: (#2009183)
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Alcock <nick.alcock@oracle.com> - 2.36.1-2.0.2
changelog:
  - Backport CTF improvements since 2.36.1-1.0.1, upstream commits:
  260afeca72b Include ld-lib.exp from ctf-lib.exp
  86a9d6d158c libctf, link: fix CU-mapped links with CTF_LINK_EMPTY_CU_MAPPINGS
  6e14fb059db libctf: propagate errors from parents correctly
  1ec7751e61c libctf, tests: do not assume host and target have identical field offsets
  4c4a6fbe5ae libctf: get the offsets of fields of unnamed structs/unions right
  cfd756274e1 libctf: fix a comment typo
  aa5c81ebf64 libctf: work around an uninitialized variable warning
  9be4ba47a22 libctf: fix assertion failure with no system qsort_r
  bb2a0df25cc libctf: unused variable
  f9fa19c0b01 ctf segfaults
  707feb32b47 libctf: ctf-link outdated input check faulty
  71ef4a4312c ctf: fix various dreadful typos in the ctf_archive format comments
  49ab22a159f libctf: avoid potential double free
  a771db551ea Modify ld-ctf test files to suit ARM
  76a9a62d45c libctf: Avoid use of uninitialised variables
  c0046d6fda2 ld: Compile 2 CTF tests with -O2
  0e944eea667 libctf: tests: prune warnings from compiler output
  d7bb0236646 libctf: avoid mingw warning
  ef6f83556c2 libctf: fix linking together multiple objects derived from the same source
  79c0f86f196 libctf: impose an ordering on conflicting types
  c076d790a1c libctf: add a comment explaining how to use ctf_*open
  950c66dbd3a libctf: add LIBCTF_WRITE_FOREIGN_ENDIAN debugging option
  8d7444bc2a0 libctf, ld: diagnose corrupted CTF header cth_strlen
  b9d34471994 include, libctf, ld: extend variable section to contain functions too
  6c7f0d14985 Adjust ld ctf test for 32-bit targets
  2ed74e71d9a libctf, ld: handle nonrepresentable types better
  0671dcc33e5 libctf: dump: do not stop dumping types on error
  646068e870e binutils, ld: make objdump --ctf's parameter optional
  9bc14b61075 binutils: make objdump/readelf --ctf-parent actually useful
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Yara Ahmad <yahmad@redhat.com> - 2.36.1-4
changelog:
  - Fix addr2line from gcc-toolset-11-binutils having errors while compiling code
    using LTO and Dwarf5  (#2153811)


author: Nick Alcock <nick.alcock@oracle.com> - 2.36.1-4.0.2
changelog:
  - Refresh CTF patches from upstream (2.42).
    - Fix more cases where operations on child dicts could leave errors on
      the parent, this time associated with CTF dict creation (upstream PR
      libctf/30985).
    - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
      the last mapping provided for a given translation unit, rather than a
      random mix of first and last
    - Fix a couple of tiny missing bits in bfd/, fixing an unlikely CTF strtab
      corruption
  - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
    the code actually depends on.  (Fixes observed link problems with
    libctf-nobfd.so needing extra libraries on the link line versus upstream:
    libctf.so changes done purely for consistency.)
  Oracle history:
    November-15-2023 David Faust <david.faust@oracle.com> - 2.36.1-4.0.1
    - Forward-port Oracle patches from 2.36.1-2.0.2
    - Reapply binutils-no-builder-comment-in-bfd-stdint.patch after binutils-ctf.patch
      to prevent header differences between multiarch builds (Nick Alcock)
    - Orabug: 35980324
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    September-12-2023 Nick Alcock <nick.alcock@oracle.com> - 2.36.1-2.0.2
    - Backport CTF improvements since 2.36.1-1.0.1, upstream commits:
    260afeca72b Include ld-lib.exp from ctf-lib.exp
    86a9d6d158c libctf, link: fix CU-mapped links with CTF_LINK_EMPTY_CU_MAPPINGS
    6e14fb059db libctf: propagate errors from parents correctly
    1ec7751e61c libctf, tests: do not assume host and target have identical field offsets
    4c4a6fbe5ae libctf: get the offsets of fields of unnamed structs/unions right
    cfd756274e1 libctf: fix a comment typo
    aa5c81ebf64 libctf: work around an uninitialized variable warning
    9be4ba47a22 libctf: fix assertion failure with no system qsort_r
    bb2a0df25cc libctf: unused variable
    f9fa19c0b01 ctf segfaults
    707feb32b47 libctf: ctf-link outdated input check faulty
    71ef4a4312c ctf: fix various dreadful typos in the ctf_archive format comments
    49ab22a159f libctf: avoid potential double free
    a771db551ea Modify ld-ctf test files to suit ARM
    76a9a62d45c libctf: Avoid use of uninitialised variables
    c0046d6fda2 ld: Compile 2 CTF tests with -O2
    0e944eea667 libctf: tests: prune warnings from compiler output
    d7bb0236646 libctf: avoid mingw warning
    ef6f83556c2 libctf: fix linking together multiple objects derived from the same source
    79c0f86f196 libctf: impose an ordering on conflicting types
    c076d790a1c libctf: add a comment explaining how to use ctf_*open
    950c66dbd3a libctf: add LIBCTF_WRITE_FOREIGN_ENDIAN debugging option
    8d7444bc2a0 libctf, ld: diagnose corrupted CTF header cth_strlen
    b9d34471994 include, libctf, ld: extend variable section to contain functions too
    6c7f0d14985 Adjust ld ctf test for 32-bit targets
    2ed74e71d9a libctf, ld: handle nonrepresentable types better
    0671dcc33e5 libctf: dump: do not stop dumping types on error
    646068e870e binutils, ld: make objdump --ctf's parameter optional
    9bc14b61075 binutils: make objdump/readelf --ctf-parent actually useful
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-30-2022 David Faust <david.faust@oracle.com> - 2.36.1-2.0.1
    - Correct bug number for unicode character display: (#2009183)
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 David Faust  <david.faust@oracle.com> - 2.36.1-1.0.1.1
    - Forward port Oracle patches from 2.36.1-1.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-19-2021 David Faust  <david.faust@oracle.com> - 2.36.1-1.0.1
    - Backport CTF improvements since 2.36.1, upstream commits:
      36f61bf2ad9 PTR_ADD and NPTR_ADD for bfd.h
      c759c777c98 libiberty: add htab_eq_string
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      174fe10cb68 ubsan: libctf: applying zero offset to null pointer
      4821e618add Use htab_eq_string in libctf
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      8255cf421c5 libctf regen for NEWS
      93993f67849 libctf AC_CANONICAL_TARGET
      03c653093d7 libctf: add a NEWS
      f4f60336dae libctf, include: find types of symbols by name
      c3bf9dc5aa3 Include ld-lib.exp from ctf-lib.exp
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Marek Polacek <polacek@redhat.com> 11.1.1-2
changelog:
  - update from Fedora gcc 11.1.1-2
  - fix up mausezahn miscompilation (PR tree-optimization/100566)
  - fix build with removed linux/cyclades.h header (PR sanitizer/100379)
  - add a few Provides: bundled (#1859893)


author: Marek Polacek <polacek@redhat.com> 11.1.1-6
changelog:
  - update from Fedora gcc 11.1.1-6 (#1946782)
    - PRs c++/100876, c++/100879, c++/101106, c/100619, c/100783, fortran/95501,
     fortran/95502, fortran/100283, fortran/101123, inline-asm/100785,
     libstdc++/91488, libstdc++/95833, libstdc++/100806, libstdc++/100940,
     middle-end/100250, middle-end/100307, middle-end/100574,
     middle-end/100684, middle-end/100732, middle-end/100876,
     middle-end/101062, middle-end/101167, target/99842, target/99939,
     target/100310, target/100777, target/100856, target/100871,
     target/101016


author: Marek Polacek <polacek@redhat.com> 11.2.1-1
changelog:
  - update from releases/gcc-11-branch (#1986838)
    - GCC 11.2 release
    - PRs middle-end/101586, rtl-optimization/101562


author: Qing Zhao <qing.zhao@oracle.com> 11.2.1-1.1.0.2
changelog:
  - Add -ftrivial-auto-var-init support from GCC12
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> - 11.2.1-1.2.0.1
changelog:
  - Add -ftrivial-auto-var-init support from GCC12
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
  - Add CTF/BTF support
    Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Marek Polacek <polacek@redhat.com> 11.2.1-7
changelog:
  - update from releases/gcc-11-branch (#1996862)
    - PRs ada/100486, c++/70796, c++/92746, c++/93286, c++/94490, c++/102642,
  	c++/102786, debug/101378, debug/103046, debug/103315, fortran/87711,
  	fortran/87851, fortran/97896, fortran/99061, fortran/99348,
  	fortran/102521, fortran/102685, fortran/102715, fortran/102745,
  	fortran/102816, fortran/102817, fortran/102917, fortran/103137,
  	fortran/103138, fortran/103392, gcov-profile/100520, ipa/102714,
  	ipa/102762, ipa/103052, ipa/103246, ipa/103267, libstdc++/96416,
  	libstdc++/98421, libstdc++/100117, libstdc++/100153, libstdc++/100748,
  	libstdc++/101571, libstdc++/101608, libstdc++/102894,
  	libstdc++/103022, libstdc++/103086, libstdc++/103133,
  	libstdc++/103240, libstdc++/103381, middle-end/64888,
  	middle-end/101480, middle-end/102431, middle-end/102518,
  	middle-end/103059, middle-end/103181, middle-end/103248,
  	middle-end/103384, preprocessor/103130, rtl-optimization/102356,
  	rtl-optimization/102842, target/101985, target/102976, target/102991,
  	target/103205, target/103274, target/103275, testsuite/102690,
  	tree-optimization/100393, tree-optimization/102139,
  	tree-optimization/102505, tree-optimization/102572,
  	tree-optimization/102788, tree-optimization/102789,
  	tree-optimization/102798, tree-optimization/102970,
  	tree-optimization/103192, tree-optimization/103204,
  	tree-optimization/103237, tree-optimization/103255,
  	tree-optimization/103435
  - fix up #__VA_OPT__ handling (PR preprocessor/103415)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Qing Zhao <qing.zhao@oracle.com> 11.2.1-9.1.0.1
changelog:
  - Merge oracle patches for OL 8.6 beta:
    Add -ftrivial-auto-var-init support from GCC12
    Add CTF/BTF support
    Reviewed-by: David Faust <david.faust@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 11.2.1-9.1.0.2
changelog:
  - Add support for -mharden-sls on X86 from GCC11
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Indu Bhagat <indu.bhagat@oracle.com> 11.2.1-9.1.0.3
changelog:
  - Fix Orabug 35137274 - Backport fix for upstream PR debug/105089 to OL8
    gcc-toolset-11-gcc
    - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
      using the following upstream commits:
      613a6fca75156aadc2e79d78a23e547d39762c1e,
      d0b00e74bf59c73b79471bbe9de19373b8661e20, and
      d634c5d7c78c6ec0fa39d96984460475564519c8
    Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - Fix Orabug ENH 35135692 - Add support for ampere1 and ampere1a processors
    from GCC11
    - Add support for ampere1 and ampere1a processors from GCC11 (Qing Zhao)
      cb7b6c721e319e562480c2ee9fa04fc4b1c25a2d
      f6daf95983de84132302e0b6182633e135b14b67
      531731c449d175c19a5c5a6e264a1bfe36f6c57e
      a692e3837ab4fb800f1b41b3a7e1f407689eeb7e (aarch64: Define __ARM_FEATURE_RCPC)
    Reviewed-by: Indu Bhagat <indu.bhagat@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 11.2.1-9.1.0.6
changelog:
  - CVE-2023-4039 GCC mitigation.
    Orabug 35751885.
  - CVE-2022-40982 "Intel Downfall" mitigation.
    Orabug 35751901.
    Add two patches originally from GCC upstream releases/gcc-11 branch.
    gcc11-downfall-disable-gather-in-vec.patch
    gcc11-downfall-support-mno-gather.patch
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - fix wstring conversions in filesystem::path (PR libstdc++/95048, #2220896)
  - mark non-exported function always_inline (PR libstdc++/105671, #2221740)


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Weimin Pan <weimin.pan@oracle.com> - 10.2-5.0.1
changelog:
  - Take out fix for (RHBZ 1935517) which disables libctf on RHEL.
  - Backport CTF patches.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-4
changelog:
  - Work around unknown msgctl/semctl/shmctl cmd check issue in tests-m32
    and tests-mx32 as well (#1997082).


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-4
changelog:
  - Update to upstream 3.17.0 final.
  - Add valgrind-3.17.0-ppc64-isa-3.1{,tests}.patch
  - Add valgrind-3.17.0-s390_insn_as_string.patch
  - Add valgrind-3.17.0-debuginfod.patch
  - Add valgrind-3.17.0-clone-parent-res.patch


author: Nick Clifton <nickc@redhat.com> - 10.71-1
changelog:
  - Initial import of annobin sources for GTS12 / RHEL8.  (#2077447)
  - gcc-plugin: Fix typo in configure.ac.


author: Nick Clifton <nickc@redhat.com> - 10.73-1
changelog:
  - Rebuild with scl macros in place.  (#2091570)
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.74-1
changelog:
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Florian Weimer <fweimer@redhat.com> - 10.94-1
changelog:
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.com> - 10.98-1
changelog:
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)


author: Nick Clifton <nickc@redhat.com> - 11.05-1
changelog:
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158182)
  - Annocheck: Add more special glibc filenames.  (#2158100)


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160701)
  - Spec file: Enable annotated building.


author: Nick Clifton <nickc@redhat.comn> - 2.38-6
changelog:
  - Simplify the assembler's evaluation of chained .loc view expressions.  [Second attempt]  (#2059646)


author: Nick Clifton <nickc@redhat.comn> - 2.38-15
changelog:
  - Adjust Provides and Requires fields of the sub-packages.
  - Use GTS-12 gcc to build static libraries.


author: Marek Polacek <polacek@redhat.com> 12.1.1-3
changelog:
  - update from releases/gcc-12 branch
    - PRs c++/49387, c++/102307, c++/102651, c++/104470, c++/105491, c++/105589,
  	c++/105623, c++/105652, c++/105655, c++/105725, c++/105734,
  	c++/105756, c++/105761, c++/105779, c++/105795, c++/105852,
  	c++/105871, c++/105885, c++/105908, c++/105925, c++/105931,
  	c++/105964, c++/106001, c/105635, d/105544, fortran/105230,
  	gcov-profile/105535, ipa/100413, ipa/105600, ipa/105639, ipa/105739,
  	libgomp/105745, libgomp/106045, libstdc++/104731, libstdc++/105284,
  	libstdc++/105671, libstdc++/105681, middle-end/105537,
  	middle-end/105604, middle-end/105711, middle-end/105951,
  	middle-end/105998, middle-end/106030, other/105527,
  	preprocessor/105732, rtl-optimization/105455, rtl-optimization/105559,
  	rtl-optimization/105577, sanitizer/105714, sanitizer/105729,
  	target/101891, target/104871, target/105162, target/105209,
  	target/105292, target/105472, target/105556, target/105599,
  	target/105854, target/105879, target/105953, target/105960,
  	target/105970, target/105981, target/106096, tree-optimization/103116,
  	tree-optimization/105431, tree-optimization/105458,
  	tree-optimization/105528, tree-optimization/105562,
  	tree-optimization/105618, tree-optimization/105726,
  	tree-optimization/105736, tree-optimization/105786,
  	tree-optimization/105940
  - enable tsan and lsan on s390x (#2101610)
  - fix up libtsan on s390x
  - fix nvptx build (PRs bootstrap/105551, target/105938)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110582)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.2
changelog:
  - CVE-2023-4039 GCC mitigation.
    Orabug 35751931.
  - CVE-2022-40982 "Intel Downfall" mitigation.
    Orabug 35751938.
    Add two patches originally from GCC upstream releases/gcc-11 branch.
    gcc12-downfall-disable-gather-in-vec.patch
    gcc12-downfall-support-mno-gather.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Jose E. Marchesi <jose.marchesi@oracle.com> 12.2.1-7.4.0.4
changelog:
  - Add support for -mpreserve-args in aarch64.
    Orabug 36399592.
    Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    Oracle history:
    January-23-2024 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 2023 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.2
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751931.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751938.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      gcc12-downfall-disable-gather-in-vec.patch
      gcc12-downfall-support-mno-gather.patch
    - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-29952)


author: Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.6.0.1
changelog:
  - Merge oracle patches to 12.2.1-7.6.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    February-7-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 12.2.1-7.4.0.4
    - Add support for -mpreserve-args in aarch64.
      Orabug 36399592.
    - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    January-23-2024 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 2023 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.2
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751931.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751938.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      gcc12-downfall-disable-gather-in-vec.patch
      gcc12-downfall-support-mno-gather.patch
    - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.8.0.1
changelog:
  - Merge oracle patches to 12.2.1-7.8.
    Oracle history:
    May-24-2024 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.6.0.1
    - Merge oracle patches to 12.2.1-7.6.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-7-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 12.2.1-7.4.0.4
    - Add support for -mpreserve-args in aarch64.
      Orabug 36399592.
    - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    January-23-2024 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 2023 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.2
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751931.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751938.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      gcc12-downfall-disable-gather-in-vec.patch
      gcc12-downfall-support-mno-gather.patch
    - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Nick Clifton <nickc@redhat.com> - 12.07-1
changelog:
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217812)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
  - Annocheck: Remove dependency upon libiberty.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53572)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79974)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217911)
  - Spec File: Build static libraries with -fno-lto.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22817)
  - [2.40-18: was a failed attempt to fix RHEL-22817]


author: Marek Polacek <polacek@redhat.com> 13.1.1-1
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - GCC 13.1 release
    - PRs c/107041, target/109566
  - remove libcc1


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/91618, c++/96604, c++/109506, c++/109640, c++/109642, c++/109666,
  	c++/109671, c++/109756, c/107682, c/109409, c/109412, debug/109676,
  	fortran/109622, libffi/109447, libgomp/108098, libstdc++/40380,
  	libstdc++/109694, libstdc++/109703, rtl-optimization/109585,
  	target/108758, target/109069, target/109535, target/109661,
  	target/109762, tree-optimization/109573, tree-optimization/109609,
  	tree-optimization/109724, tree-optimization/109778


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-3
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/80488, c++/83258, c++/97700, c++/103807, c++/109651, c++/109745,
  	c++/109761, c++/109774, c++/109868, c++/109884, fortran/109641,
  	fortran/109846, libstdc++/109816, libstdc++/109883, target/104338,
  	target/109697


author: Marek Polacek <polacek@redhat.com> 13.1.1-4
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - PRs bootstrap/110085, c++/109871, fortran/100607, libgcc/109670,
  	libgcc/109685, libstdc++/108178, libstdc++/109261, libstdc++/109758,
  	libstdc++/109822, libstdc++/109949, libstdc++/110139,
  	middle-end/110200, target/82931, target/92729, target/104327,
  	target/105753, target/106907, target/109547, target/109650,
  	target/109800, target/109939, target/109954, target/110036,
  	target/110044, target/110088, target/110108, target/110227,
  	tree-optimization/109505, tree-optimization/110165,
  	tree-optimization/110166


author: Jose E. Marchesi <jose.marchesi@oracle.com> 13.1.1-4.3.0.1
changelog:
  - gfortran needs install-info at installation time.
    Orabug: 36472775
  - Add missing .3 in DEV-PHASE.
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Marek Polacek <polacek@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-16940)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-39736)


author: Jose E. Marchesi <jose.marchesi@oracle.com> 13.3.1-2.1.0.1
changelog:
  - gfortran needs install-info at installation time.
     Orabug: 36472775
  - Add missing .3 in DEV-PHASE.
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 13.3.1-2.2.0.1
changelog:
  - Merge Oracle patches to 13.3.1-2.2.
    gfortran needs install-info at installation time.
    Orabug: 36472775


author: Kevin Buettner <kevinb@redhat.com> - 12.1-13
changelog:
  - Backport fix for problems associated with GCC 13's self-move warning.
    (Jan-Benedict Glaw)
  - Tweak gdb-6.6-buildid-locate-rpm.patch so that running GDB's configure
    script will not error out due to GCC 13's warnings.


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153227)


author: Keith Seitz <keiths@redhat.com> - 12.1-4.el8
changelog:
  - Backport "Add a recursion limit to the demangle_const function
    in the Rust demangler."
    (Nick Clifton, RHEL-4237)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53210)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53210)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76929)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74062)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73476)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74058)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-76087)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Remove gdb-6.5-BEA-testsuite.patch, as it was upstreamed and
    will make its way back with the next rebase.


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Nick Clifton <nickc@redhat.com> - 9.07-1
changelog:
  - Rebase to 9.07 release:
  - Annobin: Add checks of the exact location of the examined switches.
  - Annobin: Note when stack clash notes are generated.
  - Annocheck: Handle multiple builder IDs in the .comment section.
  - Add configure option to suppress building annocheck.
  - Fix debuginfod test.
  - Correct the build requirement for building with debuginfod support.
  - Add debuginfod support.
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Rebuild againt latest gcc-10.
  - Add clang plugin (experimental).
  - Have annocheck ignore notes with an end address of 0.
  - Improve checking of gcc versions.
  - Do not skip positive results.
  - Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
  - Replace address checks with dladdr1.
  - Use libabigail like checking to ensure variable address consistency.
  - Skip generation of global notes for hot/cold sections.
  - Generate FAIL results if -Wall or -Wformat-security are missing.
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.
  - Allow compiler used to run tests to be specified on the command line.  (#1723401)


author: Nick Clifton <nickc@redhat.com> - 2.32-7
changelog:
  - Stop gold from aborting when it encounters input sections with the same name and different flags.  (#1722715)


author: Nick Clifton <nickc@redhat.com> - 2.32-15.1
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1783958)
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-11
changelog:
  - Add explict libstdc++-devel BuildRequires for demangle support.
  - Add elfutils-0.170-unwind.patch. (#1555726)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Marek Polacek <polacek@redhat.com> 9.1.1-2
changelog:
  - update from Fedora 9.1.1-2 (#1728745)
  - apply Fortran patches (#1722881)
  - do not include libasan5 and libubsan1 on RHEL 8 and use the system
    version (#1722892)


author: Marek Polacek <polacek@redhat.com> 9.2.1-2
changelog:
  - update from Fedora gcc-9.2.1-2 (#1747158)
  - fix ABI change in deque iterators (PR libstdc++/92267)
  - fix up sink select_best_block (PR tree-optimization/91355)
  - revert PR tree-optimization/91790 fix
  - allow MODE_PARTIAL_INT modes for integer constant input operands
    (PR other/92090)
  - fix adjust_unroll_factor (PR middle-end/90796)
  - fixes for SVE Vector PCS on AArch64: emit .variant_pcs for
    aarch64_vector_pcs symbol references (#1726641)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190304-19
changelog:
  - Rebase to FSF GDB 8.2.90.20190301 (8.3pre).
  - Rewrite gdb-6.6-buildid-locate.patch.
  - Add (temporarily) gdb-fix-aarch64-enable-unittests.patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190320-21
changelog:
  - Rebase to FSF GDB 8.2.90.20190320 (8.3pre).
  - Fix 'New gdb terminal colors are unreadable on GNOME Terminal "dark"
    theme.' (Tom Tromey, RH BZ 1688372).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-1
changelog:
  - Release GDB 8.3.
  - Fix 'gcore does not support COREFILTER_ELF_HEADERS' (Sergio Durigan
    Junior, RH BZ 1371380).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-2
changelog:
  - "Fix" segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-3
changelog:
  - Complement previous fix of a segfault that happens on
    parse_macro_definition (RHBZ 1715008, Sergio Durigan Junior).


author: Keith Seitz <keiths@redhat.com> - gcc-toolset-9 8.3-1
changelog:
  - Add Buildrequire for boost-devel.
  - Include guile support for RHEL.
  - Add gating for gcc-toolset-9.
  - Define global __python to workaround scl python issue.


author: DJ Delorie <dj@redhat.com> - 0.7.91-27
changelog:
  - Fix aarch64 long parameters (via $r8) support.
  - Make system_call_params test compare more exactly.


author: Patsy Griffin Franklin <pfrankli@redhat.com> 1:4.2.1-9
changelog:
  - Fix build failure caused by automake versioning differences related
    to the glob changes.
  - Fix testing failure due to Perl changes related to expanding paths.


author: Frank Ch. Eigler <fche@redhat.com> - 4.1-2
changelog:
  - Disable various host-service-related options.
  - Correct GNU_parameter_ref dwarf feature typo.
  - Upstream release.


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-8
changelog:
  - Update valgrind-3.14.0-jm-vmx-constraints.patch for ppc64. (#1658680)
  - Show all diff files in check, not just the main/default one.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-5
changelog:
  - Add valgrind-3.15.0-exp-sgcheck-no-aarch64.patch
  - Add valgrind-3.15.0-scalar-arm64.patch
  - Add valgrind-3.15.0-scalar-x86.patch


author: Mark Wielaard <mjw@redhat.com> - 3.15.0-6
changelog:
  - Update valgrind-3.15.0-copy_file_range.patch.
  - Update valgrind-3.15.0-some-stack-protector.patch to include getoff.
  - Add valgrind-3.15.0-some-Wl-z-now.patch
  - Add valgrind-3.15.0-s390x-wrap-drd.patch


author: Kalev Lember <klember@redhat.com> - 3.27.92-1
changelog:
  - Update to 3.27.92
  - Use valgrind_arches macro instead of hardcoding valgrind arch list
  - Drop group tags
  - Drop ldconfig scriptlets
  - Move desktop file validation to check section
  - Drop ancient conflicts


author: Remi Collet <remi@fedoraproject.org> - 2.2.5-1
changelog:
  - Update to 2.2.5
  - fix double-free in gdImagePngPtr(). CVE-2017-6362
  - fix buffer over-read into uninitialized memory. CVE-2017-7890


author: mskalick@redhat.com - 2.2.5-6
changelog:
  - Check return value in gdImageBmpPtr to avoid double free (CVE-2018-1000222)
    Resolves: RHBZ#1621956


author: fjanus@redhat.com - 2.2.5-7
changelog:
  - Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone
    Resolves: RHBZ#1811788
  - Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch()
    Resolves: RHBZ#1678104 (CVE-2019-6977)
  - Fixed potential double-free in gdImage*Ptr()
    Resolves: RHBZ#1679002 (CVE-2019-6978)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-2.fc29
changelog:
  - Backport "Use pulongest in aarch64-linux-tdep.c" (Tom Tromey),
    needed to unbreak the compilation on 32-bit architectures.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 8.2-3.fc29
changelog:
  - Fix annobin complaints (RH BZ 1630564):
    --without-stage1-ldflags: Disable static libstdc++ and libgcc linking.
    --disable-libmcheck: That is a distro-level decision, not package decision.


author: Keith Seitz <keiths@redhat.com> - 8.2-4.el8
changelog:
  - Update gdb.spec for RHEL supported architectures and multilibs.
  - Merge from Fedora 29:
     gdb-rhbz1639242-fix-dwarf2_find_containing_comp_unit-binary-search.patch
     [RHEL RHBZ#1660220]
     gdb-rhbz1653410-avoid-crash-when-calling-warning-too-early.patch
     [RHEL RHBZ#1660221]


author: Keith Seitz <keiths@redhat.com> - 8.2-5.el8
changelog:
  - Merge from Fedora 29:
    gdb-rhbz1560010-fix-assertion-symbol-language-dict-language-?of5.patch
    (Keith Seitz, RHBZ 1664456).


author: Keith Seitz <keiths@redhat.com> 8.2-6.el8
changelog:
  - Fix yum vs dnf messaging for RHEL8 (RH BZ 1666249):
    Add gdb-rhbz1666249-suggest-yum-instead-of-dnf.pattch
    Do not define DNF_DEBUGINFO_INSTALL for RHEL.
  - Backport "Remove support for old mangling schemes"
    (Simon Marchi, RH BZ 1668635)
  - Backport "Add checks for the NT_ARM_SVE section in a core file."
    (Alan Hayward, RH BZ 1669953)
  - Backport more Power8 support (IBM, RH BZ 1187581)


author: Keith Seitz <keiths@redhat.com> - 8.2-7.el8
changelog:
  - Fix segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Weimin Pan <weimin.pan@oracle.com> - 8.2-8.0.1
changelog:
  - Forward-port patches from ol8-u1:
    gdb-ctf.patch
    gdb-ctf-upstream1.patch
    gdb-ctf-prfunc.patch
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Weimin Pan <weimin.pan@oracle.com> - 8.2-8.0.2
changelog:
  - Forward-port patches from ol8-u1:
    gdb-ctf-forward-type.patch
    gdb-ctf-func-args.patch
    gdb-ctf-optout-var.patch
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-10.el8
changelog:
  - Do not build i686 RPMs.  Make the x86_64 RPMs Obsoletes/Provides
    previous i686 RPMs (RH BZ 1786466).


author: Weimin Pan <weimin.pan@oracle.com> - 8.2-12.0.1
changelog:
  - Forward-port patches from ol8-u2:
    gdb-ctf-forward-type.patch
    gdb-ctf-func-args.patch
    gdb-ctf-optout-var.patch
    gdb-ctf.patch
    gdb-ctf-upstream1.patch
    gdb-ctf-prfunc.patch


author: Weimin Pan <weimin.pan@oracle.com> - 8.2-15.0.1
changelog:
  - Apply the following rhel8-u4 branch patches:
    gdb-rhbz1659535-z15-record-replay.patch
    gdb-rhbz1842691-corefile-mem-access-10of15.patch
    gdb-rhbz1842691-corefile-mem-access-11of15.patch
    gdb-rhbz1842691-corefile-mem-access-12of15.patch
    gdb-rhbz1842691-corefile-mem-access-13of15.patch
    gdb-rhbz1842691-corefile-mem-access-14of15.patch
    gdb-rhbz1842691-corefile-mem-access-15of15.patch
    gdb-rhbz1842691-corefile-mem-access-1of15.patch
    gdb-rhbz1842691-corefile-mem-access-2of15.patch
    gdb-rhbz1842691-corefile-mem-access-3of15.patch
    gdb-rhbz1842691-corefile-mem-access-4of15.patch
    gdb-rhbz1842691-corefile-mem-access-5of15.patch
    gdb-rhbz1842691-corefile-mem-access-6of15.patch
    gdb-rhbz1842691-corefile-mem-access-7of15.patch
    gdb-rhbz1842691-corefile-mem-access-8of15.patch
    gdb-rhbz1842691-corefile-mem-access-9of15.patch
    gdb-rhbz1852580-terminal-woes.patch
    gdb-rhbz1878810-bfd-suppress-loadable-section-outside-ELF-sections.patch
    gdb-rhbz1903374-s390x-store-on-condition.patch
    gdb-rhbz1905701-DWARF-data_location.patch


author: Keith Seitz <keiths@redhat.com> - 8.2-13.el8
changelog:
  - Backport "Fix terminal problems when error() is called."
    (Alan Hayward RH BZ 1852580)
  - Backport "core file memory access problem."
    (Kevin Buettner, RH BZ 1785126)
  - Backport "Stop the BFD library from issuing a warning message..."
    (Nick Clifton, RH BZ 1878810)


author: Keith Seitz <keiths@redhat.com> - 8.2-14.el8
changelog:
  - Obsolete earlier versions on x86_64 and conflict with 64-bit
    glibc on ix86. (Keith Seitz, RH BZ 1853140)
  - Really fix 1878810 (Keith Seitz, RH BZ 1878810)


author: Keith Seitz <keiths@redhat.com> - 8.2-15.el8
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903374)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905701)


author: Keith Seitz <keiths@redhat.com> - 8.2-16.el8
changelog:
  - Backport "Fix segfault with nameless fortran modules."
    (Bernhard Heckel, RH BZ 1934673)
  - Backport "PowerPC remove 512 bytes region limit if 2nd DAWR is available"
    and related patches.
    (Rogerio Alves et al RH BZ 1854784)


author: Weimin Pan <weimin.pan@oracle.com> - 8.2-16.0.1
changelog:
  - Forward-port CTF patches:
    gdb-ctf.patch
    gdb-ctf-forward-type.patch
    gdb-ctf-func-args.patch
    gdb-ctf-optout-var.patch
    gdb-ctf-prfunc.patch
    gdb-ctf-upstream1.patch
    Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Weimin Pan <weimin.pan@oracle.com> - 8.2-18.0.1
changelog:
  - Forward-port "Fix avx512 -m32 support in gdbserver"
  - (Tom de Vries, RH BZ 2011520)
  - Forward-port IBM arch14 updates.
    (Andreas Krebbel, RHBZ 2012818)
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Alcock <nick.alcock@oracle.com> 8.2-18.0.2
changelog:
  - Add missing upstream CTF patches present in OL8 binutils backport;
    re-merge into one patch for simplicity


author: Keith Seitz <keiths@redhat.com> - 8.2-19.el8
changelog:
  - Backport "Fix restoring of inferior terminal settings"
  - Backport "Avoid GDB SIGTTOU on catch exec + set follow-exec-mode
    new (PR 23368)"
    (Simon Marchi, RH BZ 2015131)


author: Keith Seitz <keiths@redhat.com> - 8.2-20.el8
changelog:
  - Backport portion of "Fix crash in new DWARF indexer".
    (Tom Tromey, RH BZ 2150363)
  - Backport "Fix assertion failure in copy_type" and
    "Fix PR20630 regression test in gdb.base/printcmds.exp".
    (Tom Tromey and Tom de Vries, RH BZ 2156888)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 8.2-20.0.2
changelog:
  - OraBug 36055910 Support RDTSCP in RECORD/REPLAY in interpreter mode (record full)
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-1.fc29
changelog:
  - Rebase to FSF GDB 8.2.
  - Backport "Indicate batch mode failures by exiting with nonzero status"
    (Gary Benson, RH BZ 1491128).


author: Nick Alcock <nick.alcock@oracle.com> - 8.2-6.0.1
changelog:
  - CTF support.
  - Backport of fix for upstream bug 23919
    [Orabug: 30102958] [Orabug: 30102964]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Keith Seitz <keiths@redhat.com> - 8.2-6.el8
changelog:
  - Backport "Fix 'gdb fails to read zN registers from corefile with aarc64 SVE'"
    (Alan Hayward, RH BZ 1699376)


author: <fjanus@redhat.com> - 1.18-2
changelog:
  - Add backward compatibility patch
  - Resolves: #2097704
  - Backport from upstream commit: 00ba17479ff31c6825f0e6f28b965f11525e83f6


author: Tomas Popela <tpopela@redhat.com> - 2.36.12-6
changelog:
  - Backport fixes for CVE-2022-48622
  - Apply patches with git to enable binary patching
  - Resolves: RHEL-30478


author: Ray Strode <rstrode@redhat.com> - 3.28.3-20
changelog:
  - Disable wayland on hybrid gpu machines, and server machines
    again
    Related: #1662087
    Related: #1591250 1670273


author: Ray Strode <rstrode@redhat.com> - 3.28.3-22
changelog:
  - Ensure user session is killed with its worker and that all
    user sessions are cleaned up on shutdown
    Resolves: #1690714


author: Ray Strode <rstrode@redhat.com> - 3.28.3-25
changelog:
  - Reenable wayland on hybrid setups (except virt pass through)
    Resolves: #1749960
  - Reenable wayland on qxl
    Resolves: #1744452


author: Ray Strode <rstrode@redhat.com> - 3.28.3-26
changelog:
  - Forward port RHEL 7 patch to allow multiple logins for the
    same user with XDMCP connections.
    Resolves: #1710882


author: Ray Strode <rstrode@redhat.com> - 3.28.3-28
changelog:
  - Correct wayland session detection logic when deciding
    whether or not to run Xsession script
    Resolves: #1728330


author: Ray Strode <rstrode@redhat.com> - 3.28.3-39
changelog:
  - Ensure login screen display server is is killed at log in
  - Pull in fixes for two security issues
    Resolves: #1918391


author: Ray Strode <rstrode@redhat.com> - 40.0-10
changelog:
  - Let customers using vendor nvidia driver choose wayland sessions
    Resolves: #1962211
  - Drop unused patches


author: Ray Strode <rstrode@redhat.com> - 40.0-11
changelog:
  - Read session settings from users even if they've never saved
    before. Needed to support accountsservice templated user
    defaults.
    Related: #1812788


author: Ray Strode <rstrode@redhat.com> - 40.0-19
changelog:
  - Synchronize permission and group ownership for log dir between
    rpm file manifest and daemon expectations.
    Resolves: #1878119


author: Ray Strode <rstrode@redhat.com> - 40.0-23.1
changelog:
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2085391


author: Ray Strode <rstrode@redhat.com> - 40.0-24
changelog:
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2034092


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.2.0-30
changelog:
  - Fixed building with libopenraw-0.1
  - Added rubygems to BuildRequires to fix build error
  - Modernised the .spec file a bit
  - Disabled silent build


author: Paul Howarth <paul@city-fan.org> - 2.2.2-1
changelog:
  - Update to 2.2.2
    - geoipupdate now calls fsync on the database directory after a rename to
      make it durable in the event of a crash
  - Update autotools patch


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Pavel Raiskup <praiskup@redhat.com> - 0.19.8.1-7
changelog:
  - really remove Requires: git from gettext-devel (rhbz#1161284)
  - make the BuildRequires unconditional (rhbz#1416691)


author: Andrew Price <anprice@redhat.com> - 3.2.0-2
changelog:
  - fsck.gfs2: Don't check fs formats we don't recognise
  - libgfs2: Fix pointer cast byte order issue
    Resolves: rhbz#1622050


author: Andrew Price <anprice@redhat.com> - 3.2.0-9
changelog:
  - gfs2_jadd: Handle out-of-space issues
  - gfs2_jadd: error handling overhaul
    Resolves: rhbz#1833141
  - gfs2.5: Update some mentions of gfs2_tool
    Resolves: rhbz#1818983


author: Andrew Price <anprice@redhat.com> - 3.2.0-11
changelog:
  - gfs2_jadd: Use fallocate to preallocate journals
  - gfs2_jadd: Don't fsync after each block written
    Resolves: rhbz#1942434


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-1
changelog:
  - rebase to latest upstream version, which contains important CVE fixes
  - additional ZER0-DAY fixes added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.25-1
changelog:
  - rebase to latest upstream version to fix issues discovered in previous CVE fixes (bug #1631701 and #1626997)


author: Martin Osvald <mosvald@redhat.com> - 9.25-2
changelog:
  - Resolves: #1652937 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c
  - Resolves: #1642586 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1642580 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1642941 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1656336 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)
  - Resolves: #1660571 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660830 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661280 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)
  - Resolves: #1668891 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators (700317)


author: Martin Osvald <mosvald@redhat.com> - 9.25-2.1
changelog:
  - Resolves: #1692798 - CVE-2019-3839 ghostscript: missing attack vector
    protections for CVE-2019-6116
  - Resolves: #1678170 - CVE-2019-3835 ghostscript: superexec operator
    is available (700585)
  - Resolves: #1691414 - CVE-2019-3838 ghostscript: forceput in DefineResource
    is still accessible (700576)
  - fix included for ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata
  - fix for pdf2dsc regression added to allow fix for CVE-2019-3839


author: Martin Osvald <mosvald@redhat.com> - 9.25-2.3
changelog:
  - Resolves: #1744010 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744014 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744005 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744230 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: Martin Osvald <mosvald@redhat.com> - 9.25-5
changelog:
  - Resolves: #1744011 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744015 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744006 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744231 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: Richard Lescak <rlescak@redhat.com> - 9.27-3
changelog:
  - fixed drifting text to the right when printing
  - added Requirement for jbig2dec
  - added patch for CVE-2020-16301
  - Resolves: rhbz#2097515, rhbz#2097448


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.27-16
changelog:
  - RHEL-18396 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67046 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-15067 CVE-2020-27792 ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c
  - RHEL-67051 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67051 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67051 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Josef Ridky <jridky@redhat.com> - 2:2.8.22-7
changelog:
  - add missing dependency for automake and libtool
  - explicitly use python2 as default python interpreter


author: Masahiro Matsuya <mmatsuya@redhat.com> - 2:2.8.22-25
changelog:
  - fix CVE-2023-44442
  - fix CVE-2023-44444
  - disable gimp-2.8.22-python-path.patch required for flatpak
  - partially cherry-pick from upstream commit 2987f012 to fix fclose leak
    Resolves: RHEL-17048 RHEL-17060


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-4
changelog:
  - Fix %{perllibdir} path
  - %{perllibdir} now points to where perl-git modules are installed.
    This was introduced in fedora commit:
    f3c13faa206935a844e09c7dc9d78d6325100ced.


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-5
changelog:
  - Add %{?scl_prefix} macros for services + desktop files.
  - Add tests, checking hardcoded content of dist git sources,
  written by pstodulk.
  - Make git-gui.desktop, git@.service and gitweb-httpd.conf content
  point to the correct scl paths.
  - Move instaweb to separate subpackage
  - Switch instaweb default HTTP daemon to httpd
  - Use the correct apache module directory in instaweb.
  - Build docs with TZ=UTC to make results deterministic.
    Inspired by https://wiki.debian.org/ReproducibleBuilds/TimestampsInDocumentationGeneratedByAsciidoc


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-2
changelog:
  - Fix build when apr-util does not pull in apr-util-bdb, adapt the existing Fedora condition.
    Problem caused by changes in #1633973 and #1491151.
  - Fix builds without docs and without cvs and/or p4 (from skisela)
  - Fix smart-http test due to changes in cookie sort order in curl-7.61.1


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-3
changelog:
  - apply upstream run-command PATH fix (CVE-2018-19486)
  - config: document value 2 for protocol.version (upstream patch)


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.2-1
changelog:
  - Update to release 2.18.2
  - Remote code execution in recursive clones with nested submodules
    Resolves: CVE-2019-1387
  - Fixes CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351,
    CVE-2019-1352, CVE-2019-1353, CVE-2019-1354


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.2-1
changelog:
  - Update to release 2.18.2
  - Remote code execution in recursive clones with nested submodules
    Resolves: CVE-2019-1387
  - Fixes CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351,	
    CVE-2019-1352, CVE-2019-1353, CVE-2019-1354


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.31.1-3
changelog:
  - Fixes CVE-2022-23521 and CVE-2022-41903
  - Tests: try harder to find open ports for apache, git, and svn
  - Resolves: #2162063


author: Karsten Hopp <karsten@redhat.com> - 3.20.0-6
changelog:
  - apply upstream patch from Jonh Wendell to fix g_ptr_array_find types and make it
    build with latest glib2


author: Ray Strode <rstrode@redhat.com> - 2.56.1-4
changelog:
  - Ensure shared-mime-info is installed during testing
  - Ensure test suite runs as unprivileged user
  - Ensure test suite works when debugging is enabled
  - Ensure echo-script from spawn test is marked executable
    Related: #1625683


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.4-9
changelog:
  - Update GHmac patch to implement g_hmac_copy()
    Resolves: #1786538
  - Update keyfile settings backend
    Resolves: #1728896
  - Fix CVE-2019-13012
    Resolves: #1728632


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.4-10
changelog:
  - Fix various problems in GMainContext
    Resolves: #1953553
  - Fix CVE-2021-27219
    Resolves: #1960600


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.4-10
changelog:
  - Fix CVE-2021-27218
    Resolves: #1939072
  - Fix CVE-2021-27219
    Resolves: #1939108
  - Fix CVE-2021-28153
    Resolves: #1939118


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.4-13
changelog:
  - Rename and consolidate existing patches for better maintainability
  - Refresh CVE-2021-27219 patcheset, using better-targeted fixes
    Resolves: #1939108


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.4-163
changelog:
  - Backport GUnixMountMonitor port to libmnt_monitor
  - Make GUnixMountMonitor thread-safe
  - Resolves: RHEL-23636


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.4-164
changelog:
  - Revert GUnixMountMonitor changes (it depends on functionality not in RHEL 8)
  - Resolves: RHEL-23636


author: Carlos O'Donell <carlos@redhat.com> - 2.28-209
changelog:
  - Improve dynamic loader auditing interface (LD_AUDIT) (#2047981)
  - Add dlinfo() API support for RTLD_DI_PHDR (#2097898)


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
changelog:
  - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
  - These changes enable reading the realtime clock without a kernel syscall.
    OraBug: 30478315
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Florian Weimer <fweimer@redhat.com> - 2.28-211
changelog:
  - Preserve GLRO (dl_naudit) internal ABI (#2119304)
  - Avoid s390x ABI change due to z16 recognition on s390x (#2119304)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
changelog:
  - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
changelog:
  - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
  - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
    can be used for stack allocation.
  - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
    0, glibc will madvise the kernel not to use allow hugepages for stack
    allocations.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.4
changelog:
  - CVE-2023-4911: tunables: Terminate immediately if end of input is reached
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.4.6
changelog:
  - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode.
  - CVE-2203-4806: potential use-after-free in getaddrinfo.
  - CVE-2023-4813: potential use-after-free in gaih_inet (RHEL-2435).
  - CVE-2023-4813: work around RHEL-8 limitation in test (RHEL-2435).
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
changelog:
  - Forward port of Oracle patches.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.13
changelog:
  - Forward port of Oracle patches.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2
changelog:
  - Forward port of Oracle patches for ol8-u10
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.1
    - Forward port of Oracle patches for ol8-u10-beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.1
changelog:
  - Forward port of Oracle patches over 2.28-251.1
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    May-22-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2
    - Forward port of Oracle patches for ol8-u10
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.1
    - Forward port of Oracle patches for ol8-u10-beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.4
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.5
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.11
changelog:
  - Forward port of Oracle patches
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    September-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.5
    - Forward port of Oracle patches over 2.28-251.5
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.28-251.0.2.4
    - Forward port of Oracle patches over 2.28-251.4
      Reviewed-by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.2
    - Forward port of Oracle patches over 2.28-251.2
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-23-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.1
    - Forward port of Oracle patches over 2.28-251.1
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-22-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2
    - Forward port of Oracle patches for ol8-u10
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.1
    - Forward port of Oracle patches for ol8-u10-beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.13
changelog:
  - Forward port of Oracle patches
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    January-28-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.11
    - Forward port of Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.5
    - Forward port of Oracle patches over 2.28-251.5
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.28-251.0.2.4
    - Forward port of Oracle patches over 2.28-251.4
      Reviewed-by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.2
    - Forward port of Oracle patches over 2.28-251.2
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-23-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.1
    - Forward port of Oracle patches over 2.28-251.1
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-22-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2
    - Forward port of Oracle patches for ol8-u10
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.1
    - Forward port of Oracle patches for ol8-u10-beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.14
changelog:
  - Forward port of Oracle patches
    Reviewed-by: David Faust <david.faust@oracle.com>
    Oracle history:
    February-19-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.13
    - Forward port of Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-28-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.11
    - Forward port of Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.5
    - Forward port of Oracle patches over 2.28-251.5
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.28-251.0.2.4
    - Forward port of Oracle patches over 2.28-251.4
      Reviewed-by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.2
    - Forward port of Oracle patches over 2.28-251.2
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-23-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.1
    - Forward port of Oracle patches over 2.28-251.1
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-22-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2
    - Forward port of Oracle patches for ol8-u10
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.1
    - Forward port of Oracle patches for ol8-u10-beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Florian Weimer <fweimer@redhat.com> - 2.28-251.2
changelog:
  - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264)
  - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267)
  - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271)
  - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.2
changelog:
  - Forward port of Oracle patches over 2.28-251.2
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    May-23-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.1
    - Forward port of Oracle patches over 2.28-251.1
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-22-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2
    - Forward port of Oracle patches for ol8-u10
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.1
    - Forward port of Oracle patches for ol8-u10-beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.4
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994)

  +* Mon Aug  5 2024 Patsy Griffin <patsy@redhat.com> - 2.28-251.3
  +- Update i386 libm-test-ulps (RHEL-52428)


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.28-251.0.2.4
changelog:
  Oracle history:
    - Forward port of Oracle patches over 2.28-251.4
      Reviewed-by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.2
    - Forward port of Oracle patches over 2.28-251.2
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-23-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.1
    - Forward port of Oracle patches over 2.28-251.1
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-22-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2
    - Forward port of Oracle patches for ol8-u10
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.1
    - Forward port of Oracle patches for ol8-u10-beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.5
changelog:
  - Forward port of Oracle patches over 2.28-251.4
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.28-251.0.2.4
    - Forward port of Oracle patches over 2.28-251.4
      Reviewed-by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.2
    - Forward port of Oracle patches over 2.28-251.2
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-23-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.1
    - Forward port of Oracle patches over 2.28-251.1
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-22-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2
    - Forward port of Oracle patches for ol8-u10
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.1
    - Forward port of Oracle patches for ol8-u10-beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.3.16
changelog:
  - Forward port of Oracle patches
    Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    Oracle history:
    March-26-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.3.14
    - OraBug: 36625686 Add MTE support on string functions
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-17-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.14
    - Forward port of Oracle patches
      Reviewed-by: David Faust <david.faust@oracle.com>
    February-19-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.13
    - Forward port of Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-28-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.11
    - Forward port of Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.5
    - Forward port of Oracle patches over 2.28-251.5
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.28-251.0.2.4
    - Forward port of Oracle patches over 2.28-251.4
      Reviewed-by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.2
    - Forward port of Oracle patches over 2.28-251.2
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-23-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.1
    - Forward port of Oracle patches over 2.28-251.1
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-22-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2
    - Forward port of Oracle patches for ol8-u10
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.1
    - Forward port of Oracle patches for ol8-u10-beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.19
changelog:
  - libio: Fix a deadlock after fork in popen
  - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.3.22
changelog:
  - Forward port of Oracle patches
    Reviewed-by: David Faust <david.faust@oracle.com>
    Oracle history:
    April-14-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.3.16
    - Forward port of Oracle patches
      Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    March-26-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.3.14
    - OraBug: 36625686 Add MTE support on string functions
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-17-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.14
    - Forward port of Oracle patches
      Reviewed-by: David Faust <david.faust@oracle.com>
    February-19-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.13
    - Forward port of Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-28-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.11
    - Forward port of Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.5
    - Forward port of Oracle patches over 2.28-251.5
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.28-251.0.2.4
    - Forward port of Oracle patches over 2.28-251.4
      Reviewed-by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.2
    - Forward port of Oracle patches over 2.28-251.2
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-23-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.1
    - Forward port of Oracle patches over 2.28-251.1
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-22-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2
    - Forward port of Oracle patches for ol8-u10
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.1
    - Forward port of Oracle patches for ol8-u10-beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-188
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045063).


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.0.1
changelog:
  - Merge of patches for OL 8.6 beta
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  - Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.0.2
changelog:
  - Adding back two Oracle patches.
  - Update siginfo constants from linux kernel
  OraBug: 33734528
  - Remove limit on MALLOC_MMAP_THRESHOLD tunable
  Orabug: 29630826
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.1.0.1
changelog:
  - Merging patch to protect against errno changes in function lookup
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-100.0.1
changelog:
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-127.0.2
changelog:
  - revert setting of x86 non-temporal threshold to 3/4 of thread shared cache
  Orabug: 31831625.
  Reviewed-by: Jose Marchesi <jose.marchesi@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-127.0.3
changelog:
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-127.0.4
changelog:
  - merge RH el8 u3 errata patches with Oracle patches
  Review-exception: Simple merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Carlos O'Donell <carlos@redhat.com> - 2.28-153
changelog:
  - Support SEM_STAT_ANY via semctl. Return EINVAL for unknown commands to semctl,
    msgctl, and shmctl. (#1912670)


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-151.0.1.el8_4
changelog:
  - merge RH patches for ol8-u4 release
  Review-exception: Patch merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.1
changelog:
  - Merge of RH patches for ol8-u5 beta release
  Review-exception: Routine merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.2
changelog:
  - Remove limit on MALLOC_MMAP_THRESHOLD tunable
  Orabug: 29630826
  Reviewed-by: DJ Delorie <dj@redhat.com> (upstream)


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.3
changelog:
  - Update siginfo constants from linux kernel
  - Backport of upstream commit
    89983cb37c9319806a551e8fe9f3a11ff8f973e1
  OraBug: 33734528
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
  - Remove limit on MALLOC_MMAP_THRESHOLD tunable
  Orabug: 29630826
  Reviewed-by: DJ Delorie <dj@redhat.com> (upstream)
  - Merge of RH patches for ol8-u5 beta release
  Review-exception: Routine merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.4
changelog:
  - Add perf improvements for exp, log, log2, pow (64-bit)
  Orabug: 33107603
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
  - Update siginfo constants from linux kernel
  - Backport of upstream commit
    89983cb37c9319806a551e8fe9f3a11ff8f973e1
  OraBug: 33734528
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
  - Remove limit on MALLOC_MMAP_THRESHOLD tunable
  Orabug: 29630826
  Reviewed-by: DJ Delorie <dj@redhat.com> (upstream)
  - Merge of RH patches for ol8-u5 beta release
  Review-exception: Routine merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.1
changelog:
  - Merge of patches for ol8-u5 beta release
  Review-exception: Routine merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.3
changelog:
  - Update siginfo constants from linux kernel
  - Backport of upstream commit
    89983cb37c9319806a551e8fe9f3a11ff8f973e1
  OraBug: 33734528
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.4
changelog:
  - Add perf improvements for exp, log, log2, pow (64-bit)
  Orabug: 33107603
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.5
changelog:
  - Reverted perf improvements for exp, log, log2, pow (64-bit)
  - due to library ABI mismatch issues
  Orabug: 33107603
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.2
changelog:
  - Remove limit on MALLOC_MMAP_THRESHOLD tunable
  Orabug: 29630826
  Review-exception: Simple change

  Tue Oct 5 2021 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.1
  - Merge of patches for ol8-u5 beta release
  Review-exception: Routine merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.5.3
changelog:
  - Merge external errata patches.
  -  Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-164.3
  -  CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak
     (#2032280)
  -  Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-164.2
  -  CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
     for "unix" and svcunix_create (#2045062).
  -  Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-164.1
  -  CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1 (#2032280)
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.3.14
changelog:
  - OraBug: 36625686 Add MTE support on string functions
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    March-17-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.14
    - Forward port of Oracle patches
      Reviewed-by: David Faust <david.faust@oracle.com>
    February-19-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.13
    - Forward port of Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-28-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.11
    - Forward port of Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.5
    - Forward port of Oracle patches over 2.28-251.5
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.28-251.0.2.4
    - Forward port of Oracle patches over 2.28-251.4
      Reviewed-by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.2
    - Forward port of Oracle patches over 2.28-251.2
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-23-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.1
    - Forward port of Oracle patches over 2.28-251.1
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-22-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2
    - Forward port of Oracle patches for ol8-u10
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.1
    - Forward port of Oracle patches for ol8-u10-beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-42.0.1
changelog:
  - add Ampere emag  to tunable cpu list
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.


author: Jingdong Lu <jingdong.lu@oracle.com> - 2.28-42.0.1
changelog:
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.


author: Florian Weimer <fweimer@redhat.com> - 2.28-65
changelog:
  - glibc-all-langpacks: Do not delete locale archive during update (#1717347)
  - Do not mark /usr/lib/locale/locale-archive as a configuration file
    because it is always automatically overwritten by build-locale-archive.


author: Björn Esser <fedora@besser82.io> - 0.3.3-12
changelog:
  - Rebuilt for /lib64/libglog.so: undefined reference to
    'gflags::FlagRegisterer::FlagRegisterer'-madness


author: Jiri Kucera <jkucera@redhat.com> - 0.3.5-6
changelog:
  - Rebuild to correct the binary content
    (rhel8 and c8s binary RPMs differs in libgflags SONAME)
    Related: #2035143


author: Milind Changire <mchangir@redhat.com> - 3.12.2-33
changelog:
  - fixes bugs bz#1350745 bz#1362129 bz#1541568 bz#1597252 bz#1599220 
    bz#1633177 bz#1637564 bz#1639476 bz#1639568 bz#1643370 bz#1645480 bz#1648296 
    bz#1648893 bz#1651040 bz#1651460 bz#1652466 bz#1652537 bz#1653224 bz#1653613 
    bz#1654103 bz#1654161 bz#1655385 bz#1655578 bz#1656357 bz#1659439


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-6
changelog:
  - fixes bugs bz#1668001 bz#1708043 bz#1708183 bz#1710701 
    bz#1719640 bz#1720079 bz#1720248 bz#1720318 bz#1720461


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-7
changelog:
  - fixes bugs bz#1573077 bz#1600918 bz#1703423 bz#1704207 bz#1708064
    bz#1709301 bz#1713664 bz#1716760 bz#1717784 bz#1720163 bz#1720192
    bz#1720551 bz#1721351 bz#1721357 bz#1721477 bz#1722131 bz#1722331
    bz#1722509 bz#1722801 bz#1720248


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-8
changelog:
  - fixes bugs bz#1698435 bz#1712591 bz#1715447 bz#1720488 bz#1722209
    bz#1722512 bz#1724089 bz#1726991 bz#1727785 bz#1729108


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-12
changelog:
  - fixes bugs bz#1730914 bz#1731448 bz#1732770 bz#1732792 bz#1733531 
    bz#1734305 bz#1734534 bz#1734734 bz#1735514 bz#1737705 bz#1732774
    bz#1732793


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-14
changelog:
  - fixes bugs bz#1719171 bz#1728673 bz#1731896 bz#1732443 bz#1733970 
    bz#1745107 bz#1746027 bz#1748688 bz#1750241 bz#1572163


author: Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-37.1
changelog:
  - fixes bugs bz#1848890 bz#1848891 bz#1848893 bz#1848894 bz#1848895 
    bz#1848896 bz#1848899 bz#1849533


author: Neal Gompa <ngompa13@gmail.com> - 1.8.0-3
changelog:
  - Add patch to fix gmock segfaults (rhbz#1513522)
  - Add patch to properly version the libraries
  - Move the documentation to the right place
  - Drop unneeded ldconfig scriptlets:
      https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets
  - Some clean up


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.1.2-3
changelog:
  - Build process updated to correctly build .debug_info for i386
    and to correctly use hardening flags


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.1.2-8
changelog:
  - Missing fipschecks added into build process (bug #1553679)
  - --enable-fat option added to %configure (bug #1493218)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.1.2-9
changelog:
  - Add support for intel CET and -fcf-protection
  - Add missing compiler/linker flags
  Related: #1630567


author: Rafal Luzynski <digitalfreak@lingonborough.com> 1.2.5-4
changelog:
  - New translations: Friulian, Kazakh, Norwegian Nynorsk
  - Translation updates: Dutch, Finnish, Marathi


author: Julius Milan <jmilan@redhat.com> 1.2.6-1
changelog:
  - Translation updates
  - Satisfy pylint v1.7.1 warnings
  - pylintrc: disable pylint no-else-return warnings
  - Add fur, kk, nn languages into LINGUAS


author: Matej Habrnal <mhabrnal@redhat.com> - 1.2.6-5
changelog:
  - pylint(R0205): Remove explicit object inheritance
  - Fix incorrect parsing of reported_to file
  - Apply the new packaging guidelines
  - Mark the `--help' command line descriptions for translation
  - Remove Expert mode and the remaining Analyze code


author: Benjamin Berg <bberg@redhat.com> - 3.28.2-29
changelog:
  - Backport SAE/WPA3/OWE support
    Resolves: #1915411
    Resolves: #2023156
  - Add patch to fix wifi performance issue
    Resolves: #1938323


author: Benjamin Berg <bberg@redhat.com> - 3.28.2-30
changelog:
  - Fix connection list AP selection and SSID display for OWE
    Resolves: #2023156
  - Fix saving passwords for non-wifi connections
    Resolves: #1938944


author: Darren Archibald <darren.archibald@oracle.com> - 3.32.2-1.2
changelog:
  - Add back dropped function from previous commit to maintain ABI
    Related: #2076472
  - Backport GnomeRR fix for detecting built in panels
    Resolves: #2076472


author: Adam Williamson <awilliam@redhat.com> - 3.28.0-7
changelog:
  - Drop unnecessary pkgconfig(NetworkManager) BuildRequire
  - Run autoreconf to avoid automake version mismatch


author: Kalev Lember <klember@redhat.com> - 3.27.92-1
changelog:
  - Update to 3.27.92
  - Don't set group tags
  - Remove ancient obsoletes
  - Remove gsettings schema scriptlets


author: Milan Crha <mcrha@redhat.com> - 3.28.2-5
changelog:
  - Resolves: RHEL-10493 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.28.2-6
changelog:
  - Resolves: RHEL-10493 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.0-3
changelog:
  - Drop the run-time requirement on ImageMagick
  - Enable Python 2 during the build for itstool
  Resolves: #1564997


author: Jonas Ådahl <jadahl@redhat.com> - 0.1.2-1
changelog:
  - Update to 0.1.2
  - Changed tabs to spaces
  - Added systemd user macros
  - Install to correct systemd user unit directory
  - Compile gsettings schemas after install and uninstall


author: Ray Strode <rstrode@redhat.com> - 3.28.1-9
changelog:
  - Add kiosk-session subpackage to help users set up RHEL for
    kiosk/point-of-sale use.
    Resolves: #1739556


author: Ray Strode <rstrode@redhat.com> - 3.28.1-10.1
changelog:
  - Exclude kiosk-session from xsession subpackage
  - Disable VT switching when kiosk-session is installed
    Related: #1959505


author: Ray Strode <rstrode@redhat.com> - 3.28.1-11
changelog:
  - Exclude kiosk-session from xsession subpackage
  - Disable VT switching when kiosk-session is installed
    Related: #1955754


author: Ray Strode <rstrode@redhat.com> - 3.28.1-12
changelog:
  - Introduce gnome-wayland session to allow users that use
    Xorg on the login screen to try wayland for the user session.
    Related: #1962211


author: Ray Strode <rstrode@redhat.com> - 3.28.1-13
changelog:
  - Add patch to tell grub boot was successful when user is
    able to explicitly request shutdown/reboot.
    Resolves: #1914925


author: Ray Strode <rstrode@redhat.com> - 3.28.1-17
changelog:
  - Don't force kiosk profile for user in non-kiosk sessions
    after the user has been used for a kiosk session once
    Related: #2070976


author: Bastien Nocera <bnocera@redhat.com> - 3.27.90-3
changelog:
  + gnome-settings-daemon-3.27.90-3
  - Really fix gsd-* helper linkage
  - Build fix for highly parallel builds


author: Marek Kasik <mkasik@redhat.com> - 3.32.0-6
changelog:
  - Initialize a variable from previous commit.
  - Previous commit made it possible to use uninitialized variable.
  - Detected by Coverity.
  - Related: #1742710


author: Florian Müllner <fmuellner@redhat.com> - 3.28.3-9
changelog:
  - Fix JS "invalid access" warnings (#1642482, #1637622)
  - Fix new input sources only working after re-login (#1628154)
  - Backport IM support fixes (#1668979)


author: Carlos Garnacho <cgarnach@redhat.com> - 3.32.2-12
changelog:
  - Fix window dragging with tablets in the overview
    Resolves: #1716767
  - Fix high-contrast/symbolic race
    Resolves: #1730612
  - Make perf-tool usable on wayland
    Resolves: #1652178


author: Florian Müllner <fmuellner@redhat.com> - 3.32.2-17
changelog:
  - Really allow using perf-tool on wayland
    Resolves: #1652178
  - Fix timed login without user list
    Resolves: #1668895
  - Fix HighContrast/symbolic icon mixup
    Resolves: #1794045
  - Backport introspect API changes
    Resolves: #1837413


author: Florian Müllner <fmuellner@redhat.com> - 3.32.2-22
changelog:
  - Wake up lock screen when deactivated programmatically
    Resolves: #1854290
  - Backport better caps-lock warning
    Resolves: #1861357
  - Fix more (harmless) JS warnings
    Resolves: #1881312


author: Ray Strode <rstrode@redhat.com> - 3.32.2-36
changelog:
  - Add ability to lock down password showing
    Resolves: #1770302
  - Add requires on newer mutter version
    Related: #1937866


author: Florian Müllner <fmuellner@redhat.com> - 3.32.2-45
changelog:
  - Fix lock up when previous focus actor is destroyed during modal
    Resolves: #2075231
  - Defend against corrupt notifications file
    Resolves: #2078564


author: Florian Müllner <fmuellner@redhat.com> - 3.32.2-50
changelog:
  - Fix struts on login screen
    Resolves: #2138941
  - Fix launching network device settings
    Resolves: #1879405


author: Kalev Lember <klember@redhat.com> - 3.36.1-3
changelog:
  - Upload correct 3.36.1 tarball
  - Fix hardcoded desktop and appdata names to match what's in RHEL 8.3
  - Add back shell extensions support
  - Resolves: #1839774


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.3-3
changelog:
  - Support using the '0', '+' and '-' keys from the numeric keypad as
    accelerators
  - Resolves: #837035


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-1
changelog:
  - Rebase to upstream release 5.2.4
  - Add workaround for broken info generation (upstream bug
    https://sourceforge.net/p/gnuplot/bugs/1963/) from Debian
  - Use explicit path for texdir
  - Correct the description of command line options in manpage, bz#1612690
  - Install gnuplot-qt and gnuplot-wx manpage links, bz#1612690


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-2
changelog:
  - Add --with-bitmap-terminals to configure flags, among others this enables
    the pbm terminal, bz#2122652


author: Daiki Ueno <dueno@redhat.com> - 3.6.14-7
changelog:
  - Increase DH key bits to >= 2048 in self-tests (#1879506)
  - Implement self-tests for KDF and CMAC (#1890870)
  - Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)


author: Daiki Ueno <dueno@redhat.com> - 3.6.16-1
changelog:
  - Update to upstream 3.6.16 release (#1956783)
  - Fix potential use-after-free in key_share handling (#1927597)
  - Fix potential use-after-free in pre_shared_key handling (#1927593)
  - Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
  - Fix cert expiration issue in tests (#1908110)


author: Zoltan Fridrich <zfridric@redhat.com> - 3.6.16-6
changelog:
  - Fix x86_64 CPU feature detection when AVX is not available (#2131152)
  - Fix timing side-channel in TLS RSA key exchange (#2162598)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 3.6.16-8.3_fips
changelog:
  - Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
    as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
  - Allow bigger known RSA modulus sizes when calling
    rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
  - Change Epoch from 1 to 10


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.3-4
changelog:
  - Fixed support for ECDSA public keys (backported from Fedora)
  - Ensure that we do not cause issues with version rollback detection
    and TLS1.3.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.4-5
changelog:
  - Fix issue with GOST ciphers (#1644193)
  - Made gnutls-serv use the default priorities if none is specified (#1644243)


author: Anderson Sasaki <ansasaki@redhat.com> - 3.6.5-1
changelog:
  - Update to upstream 3.6.5 release
  - Fixes CVE-2018-16868 (#1655395)
  - Removed ldconfig scriptlet
  - Added explicit Requires for nettle >= 3.4.1


author: Daiki Ueno <dueno@redhat.com> - 3.6.8-6
changelog:
  - Treat login error more gracefully when enumerating PKCS#11 tokens (#1705478)
  - Use deterministic ECDSA/DSA in FIPS selftests (#1716560)
  - Add gnutls_aead_cipher_{encrypt,decrypt}v2 functions (#1684461)


author: Daiki Ueno <dueno@redhat.com> - 3.6.8-9
changelog:
  - Fix CFB8 decryption when repeatedly called (#1757848)
  - Fix gnutls_aead_cipher_{en,de}cryptv2 with input not multiple of block size (#1757856)


author: Anderson Sasaki <ansasaki@redhat.com> - 3.6.5-3
changelog:
  - Fixed CVE-2019-3829 (#1693285)
  - Fixed CVE-2019-3836 (#1693288)
  - Added explicit BuildRequires for nettle-devel >= 3.4.1


author: Kalev Lember <klember@redhat.com> - 1.55.2-1
changelog:
  - Update to 1.55.2
  - Drop /usr/bin/env shebang patch as the brp scripts now handle this correctly
  - Remove ldconfig scriptlets


author:
  Petr Benes <petr.benes@oracle.com> - 1.10.0-6.0.1 - cherrypick fix for failing tests from upstream [Orabug: 29551272]

changelog:
  * Mon Nov 12 2018 Jiri Kucera <jkucera@redhat.com> - 1.10.0-6
  - Fix important static scanner issues
    Resolves: #1602526


author: Jiri Kucera <jkucera@redhat.com> - 1.13.1-8
changelog:
  - Add LICENSES file into the tarball, update License field
    Add pkgconfig files to gpgme-devel
    Resolves: #1882423, #1953905


author: Jiri Kucera <jkucera@redhat.com> - 1.13.1-2
changelog:
  - Remove *.pc files due to 'nothing provides pkgconfig(gpg-error)'
    and 'nothing provides pkgconfig(libassuan)' dnf errors
    Related: #1829822


author: Mark Goodwin <mgoodwin@redhat.com> 6.0.2-1
changelog:
  - bump to latest upstream stable release 6.0.2-1
  - unbundle almost all remaining vendor code, see linked blockers in BZ#1670656


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.3-1
changelog:
  - update to latest upstream stable release 6.1.3, see CHANGELOG
  - unbundle all vendor sources, replace with BuildRequires, see
    the long list of blocker BZs linked to BZ#1670656
  - BuildRequires go-plugin >= v1.0.0 for grpc_broker (thanks eclipseo)
  - tweak make_webpack to no longer use grunt, switch to prod build
  - add ExclusiveArch lua script (thanks quantum.analyst)
  - move db directory and plugins to /var/lib/grafana
  - split out into 6 patches, ready for upstream PRs
  - add check to run go tests for gating checks


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.4-1
changelog:
  - update to latest upstream stable release 6.1.4, see CHANGELOG
  - use gobuild and gochecks macros, eliminate arch symlinks
  - re-enable grafana-debugsource package
  - fix GRAFANA_GROUP typo
  - fix more modes for brp-mangle-shebangs
  - vendor source unbundling now done in prep after patches
  - remove all rhel and fedora conditional guff


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.6-1
changelog:
  - update to latest upstream stable release 6.1.6, see CHANGELOG
  - includes jQuery 3.4.0 security update


author: Mark Goodwin <mgoodwin@redhat.com> 6.2.2-1
changelog:
  - split out some datasource plugins to sub-packages
  - update to latest upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.3.4-1
changelog:
  - include fix for CVE-2019-15043
  - add patch for uaparser on 32bit systems
  - update to latest upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.3.5-1
changelog:
  - drop uaparser patch now it's upstream
  - add xerrors patch, see https://github.com/golang/go/issues/32246
  - use vendor sources on rawhide until modules are fully supported
  - update to latest upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.3.6-1
changelog:
  - add weak depenency on grafana-pcp
  - add patch to mute shellcheck SC1090 for grafana-cli
  - update to 6.3.6 upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.6.2-1
changelog:
  - added patch0 to set the version string correctly
  - removed patch 004-xerrors.patch, it's now upstream
  - added several patches for golang vendored vrs build dep differences
  - added patch to move grafana-cli binary to libexec dir
  - update to 6.6.2 tagged upstream community sources, see CHANGELOG


author: Andreas Gerstmayr <agerstmayr@redhat.com> 6.7.3-1
changelog:
  - update to 6.7.3 tagged upstream community sources, see CHANGELOG
  - add scripts to list Go dependencies and bundled npmjs dependencies
  - set Grafana version in Grafana UI and grafana-cli --version
  - declare README.md as documentation of datasource plugins
  - create grafana.db on first installation (fixes RH BZ #1805472)
  - change permissions of /var/lib/grafana to 750 (CVE-2020-12458)
  - change permissions of /var/lib/grafana/grafana.db to 640 and
    user/group grafana:grafana (CVE-2020-12458)
  - change permissions of grafana.ini and ldap.toml to 640 (CVE-2020-12459)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 6.7.4-1
changelog:
  - update to 6.7.4 tagged upstream community sources, see CHANGELOG
  - security fix for CVE-2020-13379


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.4-1
changelog:
  - update to 7.3.4 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies
  - optionally bundle node.js dependencies and build and test frontend as part of the specfile
  - merge all datasources into main grafana package
  - change default provisioning path to /etc/grafana/provisioning
  - resolve https://bugzilla.redhat.com/show_bug.cgi?id=1843170


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.6-1
changelog:
  - update to 7.3.6 tagged upstream community sources, see CHANGELOG
  - remove dependency on SAML (not supported in the open source version of Grafana)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.6-2
changelog:
  - change working dir to $GRAFANA_HOME in grafana-cli wrapper (fixes Red Hat BZ #1916083)
  - add pcp-redis-datasource to allow_loading_unsigned_plugins config option


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.7-2
changelog:
  - remove unused cryptographic implementations
  - use cryptographic functions from OpenSSL if FIPS mode is enabled


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.8-1
changelog:
  - update to 7.5.8 tagged upstream community sources, see CHANGELOG
  - remove unused dependencies selfsigned, http-signature and gofpdf


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-2
changelog:
  - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
  - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-1
changelog:
  - update to 7.5.15 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources
  - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling
  - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation
  - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure
  - resolve CVE-2021-23648 sanitize-url: XSS
  - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
  - declare Node.js dependencies of subpackages
  - make vendor and webpack tarballs reproducible


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-3
changelog:
  - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode
  - resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip
  - resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-4
changelog:
  - resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY
  - resolve CVE-2022-41715 golang: regexp/syntax: limit memory used by parsing regexps
  - resolve CVE-2022-2880 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters
  - run integration tests in check phase
  - update FIPS patch with latest changes in Go packaging


author: Darren Archibald <darren.archibald@oracle.com> 7.5.15-5
changelog:
  - Resolve CVE-2023-44487 Rapid Reset Attack
  - Resolve CVE-2023-39325 rapid stream resets can cause excessive work


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-12
changelog:
  - Resolves RHEL-7503
  - Adds a selinux policy for grafana
  - Resolves RHEL-12650
  - fix CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-14
changelog:
  - Resolves RHEL-19596
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory
  - Fixes postgresql AVC denial


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-15
changelog:
  - Resolves RHEL-23466
  - Resolves RHEL-21027
  - Allows for gid to be 0
  - Allows for postgreSQL datasource in selinux policy


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-7
changelog:
  - resolve RHEL-12649
  - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work
  - testing is turned off due to test failures caused by testing date mismatch


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.5-1
changelog:
  - upgrade to upstream 1.0.5
  - flame graphs: clean flame graph stacks every 5s (reduces CPU load)
  - general: implement PCP version checks
  - redis: set default sample interval to 60s (fixes empty graph borders)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 2.0.2-2
changelog:
  - vector: do not show all cgroups in the container overview dashboard in case no containers are present on the system


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.0.0-1
changelog:
  - update to 3.0.0 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies and (optionally) node.js dependencies


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.40.1-43
changelog:
  - Fixed races during pdf documentation build which should build docs correctly
    Related: CVE-2020-18032


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-99
changelog:
  - Fix bug of grub2-install not checking for the SBAT option
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: EL Errata <el-errata_ww@oracle.com> - 2.02-106.0.1
changelog:
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> 2.02-106.0.2
changelog:
  - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]


author: Robbie Harwood <rharwood@redhat.com> - 2.06-123.el8_6.8
changelog:
  - CVE fixes for 2022-06-07
  - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
  - CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
  - Resolves: #2031899


author: EL Errata <el-errata_ww@oracle.com> - 2.02-123.0.4.el8_6.8
changelog:
  - enable multiboot2 [Orabug: 34285558]
  - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: <mridula.c.shastry@oracle.com> - 2.02-123.0.8.el8_6.8
changelog:
  - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]


author: <alexander.burmashev@oracle.com> - 2.02-123.0.10.el8_6.8
changelog:
  - Drop kernel allocation patch efi: make the default arena most of ram [Orabug: 34685258]
  - Drop kernel allocation patch efi: allocate the initrd within the bounds expressed by the kernel [Orabug: 34685258]


author: EL Errata <el-errata_ww@oracle.com> - 2.02-123.0.1
changelog:
  - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-123.0.2
changelog:
  - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697,
         CVE-2022-28733, CVE-2022-28734, CVE-2022-28735 [JIRA: OLDIS-16371]
  - Various coverity fixes [JIRA: OLDIS-16371]
  - bump SBAT generation


author: Robbie Harwood <rharwood@redhat.com> - 2.02-127
changelog:
  - ppc64le: CAS improvements, prefix detection, and vTPM support
  - Resolves: #2076795
  - Resolves: #2026568
  - Resolves: #2051331


author: Robbie Harwood <rharwood@redhat.com> - 2.02-137
changelog:
  - CVE fixes for 2022-06-07
  - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
  - CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
  - Resolves: #2070687


author: EL Errata <el-errata_ww@oracle.com> - 2.02-142.0.3.el8_7.1
changelog:
  - Fix CVE-2022-3775, CVE-2022-2601 [Orabug: 34867710]
  - Bump SBAT metadata for grub to 3 [Orabug: 34871758]
  - Enable signing on aarch64
  - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
  - Enable back btrfs module by default [Orabug: 34377188]
  - Backport upstream SNP protocol fixes [Orabug: 34195100]
  - Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
  - enable multiboot2 [Orabug: 34285558]
  - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Robbie Harwood <rharwood@redhat.com> - 2.02-143
changelog:
  - x86-efi: Fix an incorrect array size in kernel allocation
  - Also merge with 8.7
  - Resolves: #2031288


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-148.0.1
changelog:
  - Fix CVE-2022-3775 [Orabug: 34867710]
  - Bump SBAT metadata for grub to 3 [Orabug: 34871758]
  - Enable signing on aarch64
  - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
  - Enable back btrfs module by default [Orabug: 34377188]
  - Backport upstream SNP protocol fixes [Orabug: 34195100]
  - Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
  - enable multiboot2 [Orabug: 34285558]
  - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 2.02-148.0.3.el8_8.1
changelog:
  - kern/ieee1275/init: sync vec5 patchset with upstream (#2172111)
  - efi/http: change uint32_t to uintn_t for grub_efi_http_message_t (#2178388)


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-156.0.1
changelog:
  - Restore correct SBAT entries
  - Replaced bugzilla.oracle.com references [Orabug: 35475894]
  - efinet: Close and reopen card on failure [Orabug: 35126950]
  - Fix CVE-2022-3775 [Orabug: 34867710]
  - Bump SBAT metadata for grub to 3 [Orabug: 34871758]
  - Enable signing on aarch64
  - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
  - Enable back btrfs module by default [Orabug: 34377188]
  - Backport upstream SNP protocol fixes [Orabug: 34195100]
  - Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
  - enable multiboot2 [Orabug: 34285558]
  - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-158.0.1
changelog:
  - Backport the support for setting custom kernels as default kernels [Orabug: 36690061]
  - Restore correct SBAT entries
  - Replaced bugzilla.oracle.com references [Orabug: 35475894]
  - efinet: Close and reopen card on failure [Orabug: 35126950]
  - Fix CVE-2022-3775 [Orabug: 34867710]
  - Bump SBAT metadata for grub to 3 [Orabug: 34871758]
  - Enable signing on aarch64
  - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
  - Enable back btrfs module by default [Orabug: 34377188]
  - Backport upstream SNP protocol fixes [Orabug: 34195100]
  - Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
  - enable multiboot2 [Orabug: 34285558]
  - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: EL Errata <el-errata_ww@oracle.com> - 2.02-160.0.1
changelog:
  - Use correct os_name on OL
  - Backport the support for setting custom kernels as default kernels [Orabug: 36690061]
  - Restore correct SBAT entries
  - Replaced bugzilla.oracle.com references [Orabug: 35475894]
  - efinet: Close and reopen card on failure [Orabug: 35126950]
  - Fix CVE-2022-3775 [Orabug: 34867710]
  - Bump SBAT metadata for grub to 3 [Orabug: 34871758]
  - Enable signing on aarch64
  - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
  - Enable back btrfs module by default [Orabug: 34377188]
  - Backport upstream SNP protocol fixes [Orabug: 34195100]
  - Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
  - enable multiboot2 [Orabug: 34285558]
  - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Leo Sandoval <lsandova@redhat.com> - 2.02-161
changelog:
  - Add Several CVE fixes
  - Resolves CVE-2024-45775 CVE-2025-0624
  - Resolves: #RHEL-75735
  - Resolves: #RHEL-79837


author: Nicolas Frayer <nfrayer@redhat.com> - 2.02-162
changelog:
  - ieee1275/ofnet: Fix grub_malloc() removed after added safe
  - Remove 'fs/ntfs: Implement attribute verification' patch
  - Related: #RHEL-79837


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-162.0.1
changelog:
  - net/dns: Fix removal of DNS server [Orabug: 37539625]
  - net/dns: Simplify error handling of recv_hook() function [Orabug: 37539625]
  - net/dns: Add debugging messages in recv_hook() function [Orabug: 37539625]
  - net/dns: Fix lookup error when no IPv6 is returned [Orabug: 37539625]
  - Use correct os_name on OL
  - Backport the support for setting custom kernels as default kernels [Orabug: 36690061]
  - Restore correct SBAT entries
  - Replaced bugzilla.oracle.com references [Orabug: 35475894]
  - efinet: Close and reopen card on failure [Orabug: 35126950]
  - Fix CVE-2022-3775 [Orabug: 34867710]
  - Bump SBAT metadata for grub to 3 [Orabug: 34871758]
  - Enable signing on aarch64
  - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
  - Enable back btrfs module by default [Orabug: 34377188]
  - Backport upstream SNP protocol fixes [Orabug: 34195100]
  - Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
  - enable multiboot2 [Orabug: 34285558]
  - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-162.0.2
changelog:
  - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761]
  - Fix typo in SBAT metadata [Orabug: 37693946]
  - Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 37693946]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-164.0.1
changelog:
  - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761]
  - Fix typo in SBAT metadata [Orabug: 37693946]
  - Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 37693946]
  - net/dns: Fix removal of DNS server [Orabug: 37539625]
  - net/dns: Simplify error handling of recv_hook() function [Orabug: 37539625]
  - net/dns: Add debugging messages in recv_hook() function [Orabug: 37539625]
  - net/dns: Fix lookup error when no IPv6 is returned [Orabug: 37539625]
  - Use correct os_name on OL
  - Backport the support for setting custom kernels as default kernels [Orabug: 36690061]
  - Restore correct SBAT entries
  - Replaced bugzilla.oracle.com references [Orabug: 35475894]
  - efinet: Close and reopen card on failure [Orabug: 35126950]
  - Fix CVE-2022-3775 [Orabug: 34867710]
  - Bump SBAT metadata for grub to 3 [Orabug: 34871758]
  - Enable signing on aarch64
  - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
  - Enable back btrfs module by default [Orabug: 34377188]
  - Backport upstream SNP protocol fixes [Orabug: 34195100]
  - Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
  - enable multiboot2 [Orabug: 34285558]
  - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-61
changelog:
  - Drop buggy downstream patch "efinet: retransmit if our device is busy"
    Resolves: rhbz#1649048
  - Make the menu entry users option argument to be optional
    Related: rhbz#1652434
  - 10_linux_bls: add missing menu entries options
    Resolves: rhbz#1652434


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-62
changelog:
  - Drop "Be more aggro about actually using the *configured* network device."
    Resolves: rhbz#1654388
  - Fix menu entry selection based on title
    Resolves: rhbz#1654936


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-63
changelog:
  - BLS files should only be copied by grub-switch-to-blscfg if BLS isn't set
    Related: rhbz#1638117
  - Fix get_entry_number() wrongly dereferencing the tail pointer
    Resolves: rhbz#1654936


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-64
changelog:
  - Make grub2-mkconfig to honour GRUB_CMDLINE_LINUX in /etc/default/grub
    Resolves: rhbz#1637875
  - docs: Stop using polkit / pkexec for grub-boot-success.timer / service
    Resolves: rhbz#1655687


author: Peter Jones <pjones@redhat.com> - 2.02-65
changelog:
  - Don't build the grub2-efi-ia32-* packages on i686; it causes multilib
    errors and we don't ship the result anyway.
    Related: rhbz#1637875


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-66.0.1
changelog:
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - update Oracle Linux certificates (Alexey Petrenko)
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-60
changelog:
  - Remove quotes when reading ID value from /etc/os-release
    Related: rhbz#1650706
  - blscfg: expand grub_users before passing to grub_normal_add_menu_entry()
    Resolves: rhbz#1650706


author: Jingdong Lu <jingdong.lu@oracle.com> - 2.02-66.0.4.el8_0.1
changelog:
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597] (Alex Burmashev)
  - Update upstream references [Orabug: 26388226]
  - Copy symvers.gz to /boot during kernel install [Orabug: 29773086] (Alex Burmashev)
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - update Oracle Linux certificates (Alexey Petrenko)
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Peter Jones <pjones@redhat.com> - 2.02-70
changelog:
  - Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
    builds, because rpmdiff doesn't like the current way failing.
    Related: rhbz#1653961


author: Peter Jones <pjones@redhat.com> - 2.02-71
changelog:
  - Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
    Related: rhbz#1653961


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-78.0.1
changelog:
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Copy symvers.gz to /boot during kernel install [Orabug: 29773086]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - update Oracle Linux certificates (Alexey Petrenko)
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: EL Errata <el-errata_ww@oracle.com> - 2.02-78.0.3.el8_1.1
changelog:
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497] 
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Copy symvers.gz to /boot during kernel install [Orabug: 29773086]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - update Oracle Linux certificates (Alexey Petrenko)
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-80
changelog:
  - Fix PRIxGRUB_EFI_STATUS definition
    Related: rhbz#1761811
  - TPM: Print messages if measuraments fail as debug instead of error
    Resolves: rhbz#1761811
  - unix/platform: Initialize variable to fix grub-install on UEFI system
    Resolves: rhbz#1768689
  - blscfg: add a space char when appending fields for variable expansion
    Resolves: rhbz#1669252


author: EL Errata <el-errata_ww@oracle.com> - 2.02-81.0.1.el8
changelog:
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Copy symvers.gz to /boot during kernel install [Orabug: 29773086]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - update Oracle Linux certificates (Alexey Petrenko)
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-82.0.2.el8_2.1
changelog:
  - Fix CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310, CVE-2020-14311,
    CVE-2020-15705, CVE-2020-15706, CVE-2020-15707 [Orabug: 31225072]
  - Update signing certificate for efi binaries


author: Peter Jones <pjones@redhat.com> - 2.02-87
changelog:
  - Fix several CVEs
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-87.0.1
changelog:
  - Fix tftp code, that was broken after disabling priority queue [Orabug: 31832896]
  - Add CVE-2020-15705, CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - Update signing certificate for efi binaries
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Copy symvers.gz to /boot during kernel install [Orabug: 29773086]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-82
changelog:
  - Drop "Disable multiboot, multiboot2, and linux16 modules on EFI builds"
    Resolves: rhbz#1779480
  - efi/http: Export {fw,http}_path variables to make them global
    Resolves: rhbz#1811561
  - efi/http: Enclose literal IPv6 addresses in square brackets
  - efi/net: Allow to specify a port number in addresses
  - efi/ip4_config: Improve check to detect literal IPv6 addresses
  - efi/net: Print a debug message if parsing the address fails
    Resolves: rhbz#1811560
  - Set image base address before jumping to the PE/COFF entry point
    Resolves: rhbz#1819624


author: Peter Jones <pjones@redhat.com> - 2.02-86
changelog:
  - Couple more late fixes.
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-90.0.1
changelog:
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - Update signing certificate for efi binaries
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Copy symvers.gz to /boot during kernel install [Orabug: 29773086]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-90.0.2
changelog:
  - Fix CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749
    CVE-2020-27779 CVE-2021-20225 CVE-2021-20233 [Orabug: 32530657]
  - Fix various coverity issues [Orabug: 32530657]
  - Disable os-prober by default [Orabug: 32530657]
  - Add SBAT metadata to grubx64.efi [Orabug: 32530657]


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-90.el8_3.1
changelog:
  - Fix another batch of CVEs
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: EL Errata <el-errata_ww@oracle.com> - 2.02-90.0.2.el8_3.1
changelog:
  - Fix various coverity issues [Orabug: 32530657]
  - Add SBAT metadata to grubx64.efi [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - Update signing certificate for efi binaries
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Copy symvers.gz to /boot during kernel install [Orabug: 29773086]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-90.0.3.el8_3.1
changelog:
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]


author: Jan Hlavac <jhlavac@redhat.com> - 2.02-92
changelog:
  - grub2-install: disable support for EFI platforms
    Resolves: rhbz#1737444
  - Include a few more modules to EFI build needed for LUKS support (javierm)
    Related: rhbz#1873725


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-93
changelog:
  - add keylayouts and at_keyboard modules to UEFI Grub2 (rmetrich)
    Related: rhbz#1897587
  - at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
    Resolves: rhbz#1897587
  - add GRUB enhanced debugging features (rmetrich)
    Resolves: rhbz#1776249
  - ieee1275: Avoiding many unecessary open/close (diegodo)
    Resolves: rhbz#1862632
  - ieee1275: device mapper and fibre channel discovery support (diegodo)
    Resolves: rhbz#1873724


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-96
changelog:
  - Fix "Add 'at_keyboard_fallback_set' var to force the set manually"
    Related: rhbz#1897587
  - Fix a boot failure due patch "ieee1275: claim up to 256MB memory"
    Resolves: rhbz#1929111


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-99.0.1
changelog:
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Copy symvers.gz to /boot during kernel install [Orabug: 29773086]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: EL Errata <el-errata_ww@oracle.com> - 2.02-99.0.2
changelog:
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Copy symvers.gz to /boot during kernel install [Orabug: 29773086]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.06-142.0.1
changelog:
  - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
  - Enable back btrfs module by default [Orabug: 34377188]
  - Backport upstream SNP protocol fixes [Orabug: 34195100]
  - Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
  - enable multiboot2 [Orabug: 34285558]
  - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: EL Errata <el-errata_ww@oracle.com> - 2.02-150.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 35475894]
  - efinet: Close and reopen card on failure [Orabug: 35126950]
  - Fix CVE-2022-3775 [Orabug: 34867710]
  - Bump SBAT metadata for grub to 3 [Orabug: 34871758]
  - Enable signing on aarch64
  - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
  - Enable back btrfs module by default [Orabug: 34377188]
  - Backport upstream SNP protocol fixes [Orabug: 34195100]
  - Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
  - enable multiboot2 [Orabug: 34285558]
  - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Leo Sandoval <lsandova@redhat.com> - 2.02-167
changelog:
  - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present
  - Resolves: #RHEL-80168


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-29
changelog:
  - grubby-bls: print the absolute kernel and initramfs images paths
    Resolves: rhbz#1649778
  - grubby-bls: make info print the root parameter if is present in cmdline
    Resolves: rhbz#1649791


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-31
changelog:
  - grubby-bls: allow to specify the same kernel param multiple times
    Resolves: rhbz#1652486
  - grubby-bls: expand kernel options if these are environment variables
    Resolves: rhbz#1649785
  - grubby-bls: always generate the BLS snippets when adding new entries
    Resolves: rhbz#1653365
  - Improve man page for --info option (jstodola)
    Resolves: rhbz#1651672


author: Livy Ge <livy.ge@oracle.com> - 8.40-34.0.1
changelog:
  - Do not strip /boot if it is not a mount point [Orabug: 29596113]
  - Handle cleanup of modules.* for RHCK and UEK [Orabug: 18493431]
  - Pick a suitable default kernel to boot if the current option is removed [Orabug: 22738301]
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [Orabug: 18504756] (Kevin Lyons)


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-37
changelog:
  - grubby-bls: unset default entry if is the one being removed
    Resolves: rhbz#1668329
  - grubby-bls: error if args or remove-args is used without update-kernel
    Related: rhbz#1690765
  - grubby-bls: make --update-kernel ALL to update kernelopts var in grubenv
    Resolves: rhbz#1690765
  - grubby-bls: fix --add-kernel not working when using the --args option
    Related: rhbz#1690765


author: Edward Leung <edward.leung@oracle.com> - 8.40-37.0.1
changelog:
  - Handle cleanup of modules.* for RHCK and UEK [Orabug: 18493431]
  - Pick a suitable default kernel to boot if the current option is removed [Orabug: 22738301]
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [Orabug: 18504756] (Kevin Lyons)


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-38
changelog:
  - grubby-bls: don't print rpm-sort error messages
    Resolves: rhbz#1731924
  - grubby-bls: remove -o option and support -c for ppc64le grub config
    Resolves: rhbz#1758598
  - grubby-bls: fix logic to check if the kernelopts var is defined in a BLS
    Resolves: rhbz#1726514
  - grubby-bls: don't update grubenv when generating grub.cfg for ppc64le
    Related: rhbz#1726514


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-39
changelog:
  - grubby-bls: strip only /boot from paths
    Resolves: rhbz#1738238
  - Make grubby to also update GRUB_CMDLINE_LINUX in /etc/default/grub
    Resolves: rhbz#1152027
  - grubby-bls: fix corner case when a kernel param value contains a '='
    Resolves: rhbz#1787584
  - grubby-bls: update man page to match options in current wrapper script
    Resolves: rhbz#1812065
  - grubby-bls: always escape the delimiter character used in sed commands
    Related: rhbz#1787584
  - grubby-bls: add a --no-etc-grub-update option
    Related: rhbz#1152027


author: EL Errata <el-errata_ww@oracle.com> - 8.40-47.0.1
changelog:
  - Do not add /boot twice for btrfs subvolumes [Orabug: 34380710]
  - Fix update of kernel options using add or remove args [Orabug: 34748051]
  - Also support "ueknano" as a possible kernel flavour [Orabug: 34420465]
  - Handle cleanup of modules.* for RHCK and UEK [Orabug: 18493431]
  - Pick a suitable default kernel to boot if the current option is removed [Orabug: 22738301]
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [Orabug: 18504756] (Kevin Lyons)


author: Dominik Mierzejewski <rpm[AT]greysector.net> 1.0.17-1
changelog:
  - update to 1.0.17 (#1465878)
  - ease future updates by better macro use
  - drop obsolete patch hunks
  - fix missing prototype for fchown warning


author: Dominik Mierzejewski <rpm[AT]greysector.net> 1.0.17-5
changelog:
  - ensure binaries are linked with Fedora LDFLAGS (#1548532)
  - use ldconfig_scriptlets macro
  - add proper man links for tcat and untoast


author: Yanko Kaneti <yaneti@declera.com> - 1.0.0-2
changelog:
  - Initial spec for review - 0.98.0-0.1.a648648
  - Additional patch + references + using %autopatch - 0.98.0-0.2.a648648
  - Update to 1.0.0. drop upstreamed paches - 1.0.0-1
  - Own some more directories as per review (#1167482) - 1.0.0-2


author: Kalev Lember <klember@redhat.com> - 1.0.0-1
changelog:
  - Update to 1.0.0
  - Don't set group tags
  - Rely on pkgconfig depgen instead of manually specifying -devel requires
  - Tighten subpackage deps with the _isa macro
  - Use make_install macro


author: Simo Sorce <simo@samba.org> - 0.6.0-1
changelog:
  - New verion with fixes for 32 bit arches
  - drop patches, they are included in he new upstream release


author: Julien Rische <jrische@redhat.com> - 1.2.0-1
changelog:
  - New release 1.2.0
  - Fix CVE-2023-25563: multiple out-of-bounds read when decoding NTLM fields
  - Fix CVE-2023-25564: memory corruption when decoding UTF16 strings
  - Fix CVE-2023-25565: incorrect free when decoding target information
  - Fix CVE-2023-25566: memory leak when parsing usernames
  - Fix CVE-2023-25567: out-of-bounds read when decoding target information
  - Resolves: rhbz#2181313


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-3
changelog:
  - %build: --disable-fatal-warnings --disable-silent-rules
  - fix rpath harder
  - use %ldconfig_scriptlets, %make_build, %make_install
  - -devel: tighten deps with %{_isa}


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-1
changelog:
  - 1.13.1
  - use %ldconfig_scriptlets %make_build %make_install
  - fix rpath in gst-p-bad-cleanup.sh
  - tighten subpkg deps with %{?_isa}
  - -gtk subpkg now empty.  FIXME


author: Wim Taymans <wtaymans@redhat.com> - 1.14.0-3
changelog:
  - Remove obsolete liboil BR (#1588303)
  - Only build extras on Fedora
  - bluez is not in extras
  - vdpau is in extras


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-1
changelog:
  - Update to 1.16.1
  - Remove upstreamed patches
  - Remove dependency on removed package
  - Add sctp and closedcaption plugins
  - The vcdsrc plugin was removed
  - Resolves: rhbz#1756299


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-4
changelog:
  - Patch CVE-2023-40474: Integer overflow
  - Patch CVE-2023-40475: Integer overflow
  - Patch CVE-2023-40476: Integer overflow in H.265 video parser
  - Resolves: RHEL-19500, RHEL-19504, RHEL-19507


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-2
changelog:
  - tigten subpkg deps
  - fix rpaths
  - update %files
  - use %ldconfig_scriptlets %make_build %make_install
  - %build: --disable-fatal-warnings --disable-silent-rules
  - Conflicts: gstreamer1-plugins-bad-free < 1.13


author: Tomas Popela <tpopela@redhat.com> - 1.14.0-2
changelog:
  - Enable Wayland support (previously disabled due to missing wayland-devel
    as a BR - before it was probably brought in by something else).


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-5
changelog:
  - Fixes for CVE-2024-47538, CVE-2024-47607, CVE-2024-47615
    Resolves: RHEL-70974, RHEL-71010, RHEL-70986


author: Wim Taymans <wtaymans@redhat.com> - 1.13.1-2
changelog:
  - The gtk plugin was moved from -bad, make a new subpackage for it.
  - the mp3 plugins were moved from -ugly, add BuildRequires.
  - build requires GL now for gtkglsink


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-3
changelog:
  - -gtk: Obsoletes/Provides: gstreamer1-plugins-bad-free-gtk
  - Obsoletes/Provides: gstreamer1-plugin-mpg123


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-4
changelog:
  - CVE-2023-37327: integer overflow leading to heap overwrite in
    FLAC image tag handling
  - Resolves: RHEL-19469


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-5
changelog:
  - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606,
    CVE-2024-47613
    Resolves: RHEL-70949, RHEL-70962, RHEL-70936, RHEL-71022
    Resolves: RHEL-70998


author: Matthias Clasen <mclasen@redhat.com> - 3.22.30-7
changelog:
  - Only mention Emoji in context menus when requested (rhbz#1893196)
  - Fix warnings from non-overlay scrollbars (rhbz#1873488)


author: David King <dking@redhat.com> - 3.22.30-9
changelog:
  - Fix treeview a11y refcounting (#2032438)
  - Be quiet on exit under X11 (#1887266)
  - Avoid cellarea resize crash (#2032437)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.1-4
changelog:
  - Python 2 binary package renamed to python2-gtk-vnc
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Daniel P. Berrangé <berrange@redhat.com> - 0.9.0-1
changelog:
  - Update to 0.9.0 release
  - Use gcrypt for DES impl instead of local DES impl (rhbz #1618426)
  - Fix crash if connection fails early (rhbz #1622189)


author: Daniel P. Berrangé <berrange@redhat.com> - 0.9.0-2
changelog:
  - Fix crash when TLS handshake fails (rhbz #1665837)
  - Ensure auth failure signal is emitted when SASL fails (rhbz #1688275)


author: Kalev Lember <klember@redhat.com> - 2.24.5-1
changelog:
  - Update to 2.24.5
  - Use license macro for COPYING
  - Don't set group tags
  - Tighten -devel requires with the _isa macro


author: Rex Dieter <rdieter@fedoraproject.org> - 5:2.0.14-7
changelog:
  - avoid linking all guile-devel consumers to libgc
  - BR: gcc
  - use %{make_build},%{make_install}
  - %check: make non-fatal


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 5:2.0.14-7.0.1
changelog:
  - backported from https://git.sv.gnu.org/git/guile.git,
  -    upstream commit: c2a654b7d29f5e2f32fd1313cc80162fd0c8f992
  -    Fix locales (ja_JP.sjis) causing SIGSEGV:
  -       - Orabug: 32742751
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.8-1
changelog:
  - 0.12.8 release
  - http://ftp.gnome.org/pub/GNOME/sources/gupnp-av/0.12/gupnp-av-0.12.8.news
  - Use %license


author: Kalev Lember <klember@redhat.com> - 0.12.9-1
changelog:
  - Update to 0.12.9
  - Don't set group tags
  - Tighten subpackage deps with the _isa macro
  - Use make_install macro


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.4-6
changelog:
  - Python 2 binary package renamed to python2-gupnp-igd
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kalev Lember <klember@redhat.com> - 0.2.5-1
changelog:
  - Update to 0.2.5
  - Update inter-package dependencies after python2-gupnp-igd rename
  - Tighten deps with the _isa macro
  - Update source URLs
  - Use license macro for COPYING


author: Bastien Nocera <bnocera@redhat.com> - 0.2.5-3
changelog:
  + gupnp-igd-0.2.5-3
  - Remove python2-gupnp-igd sub-package, nothing uses it in Fedora
    and gobject-introspection supports both Python2 and Python3


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-1
changelog:
  - Update to 1.36.2
  - Remove mount-archive.desktop helper
  - Remove obsolete gvfs utils
  - Disable nfs support


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-6
changelog:
  - Prevent spawning new daemons if outgoing operation exists (#1739117)
  - Force NT1 protocol version for workgroup support (#1739116)


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-7
changelog:
  - Remove libbluray support (#1747972)
  - CVE-2019-12448: Add query_info_on_read/write functionality (rhbz#1754506)
  - CVE-2019-12447: Use fsuid to ensure correct file ownership (rhbz#1752926)
  - CVE-2019-12449: Ensure correct ownership when moving to file:// uri (rhbz#1753972)


author: Jakub Martisko <jamartis@redhat.com> - 1.9-5
changelog:
  - Fix wrong skip size in gzexe
  - Add new test dealing with the ^^ (needs autoreconf)
  - Enable make check (needs less)
    Resolves: 1705413

   * Tue Aug 07 2018 Jakub Martisko <jamartis@redhat.com> - 1.9-4
   - Fix FTBFS bug (gnulib problems)
   - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
     Resolves 1611722


author: Petr Stodulka <pstodulk@redhat.com> - 1.7-1
changelog:
  - rebase to new upstream version 1.7
  - dropped all patches (almost all issues are fixed in new upstream version,
    sometimes in different way)
    - only patch gzip-1.3.12-openbsd-owl-tmp.patch is untested - code is changed
      significantly and patch is undocumented from archaic time, so I drop it too
    Resolves: #1321560


author: Jakub Martisko <jamartis@redhat.com> - 1.9-4
changelog:
  - Fix FTBFS bug (gnulib problems)
   - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
     Resolves 1611722


author: Ryan O'Hara <rohara@redhat.com> - 1.8.15-1
changelog:
  - Update to 1.8.15 (#1631815)
  - Resolve CVE-2018-20102 (#1659017)
  - Resolve CVE-2018-20103 (#1659019)


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 1:1.3-1
changelog:
  - Patch by Todd Lewis that adds option -x to exclude files with pcre lib 
  - This patch solves RH Bugzilla ID's 955246 1322198


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:1.3-4
changelog:
  - remove manually added pcre2 requires (this is autogenerated)
  - removed BuildRoot, %defattr() and Group (new Fedora Packaging Guildline)
  - do not use straight gcc and add use %{__global_ldflags}
  - use %_licensedir is no longer needed
  - minor cleanups:
  -- reformat %description to 80 col
  -- added full URLs in Source fields
  -- more macros
  -- a bit simpler %prep


author: Michal Grzedzicki <mge@fb.com> - 9.54-4
changelog:
  - backport fix for --dco-identify real max sectors calculation from upstream version 9.62 (#1959918)


author: Debarshi Ray <rishi@fedoraproject.org> 2.14.1-2
changelog:
  - Always use lua over luajit, just more common
  - Remove no longer needed snippets
  - Add enchant/enchant2 to requires


author: Danilo de Paula <ddepaula@redhat.com> - 1.3.15-7
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1696354
    (Ensure modular RPM upgrade path [ZStream Clone] [rhel-8.0.0.z])


author: Danilo de Paula <ddepaula@redhat.com> - 1.3.15-7
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Davide Caratti <dcaratti@redhat.com> - 2.9-16
changelog:
  - disable 'badfuncs' rpminspect test
  - change default value of CONFIG_TLS_DEFAULT_CIPHERS to allow using OpenSSL
    to compute 3DES


author: Jakub Hrozek <jhrozek@redhat.com> - 2.8.0-2
changelog:
  - Resolves: #rhbz1654223: CVE-2018-7159 http-parser: nodejs: HTTP parser
                            allowed for spaces inside Content-Length header
                            values [rhel-8]


author: Sergio Correia <scorreia@redhat.com> - 2.8.0-4
changelog:
  - Resolves: rhbz#1666382: CVE-2018-12121 http-parser: nodejs: Denial of
                            Service with large HTTP headers [rhel-8]


author: Sergio Correia <scorreia@redhat.com> - 2.8.0-5.1
changelog:
  - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
                              smuggling using malformed Transfer-Encoding header


author: Sergio Corrreia <scorreia@redhat.com> - 2.8.0-7
changelog:
  - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
                             smuggling using malformed Transfer-Encoding header


author: Joe Orton <jorton@redhat.com> - 2.4.37-7
changelog:
  - add DefaultStateDir/ap_state_dir_relative() (#1653009)
  - mod_dav_fs: use state dir for default DAVLockDB
  - mod_md: use state dir for default MDStoreDir


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-11
changelog:
  - Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation
    from modules scripts
  - Resolves: #1696090 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
    bypass when using per-location client certification authentication


author: EL Errata <el-errata_ww@oracle.com> - 2.4.37-11.0.1
changelog:
  - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262]
  - Replace index.html with Oracle's index page oracle_index.html


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-12
changelog:
  - Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745084 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
    headers leads to denial of service
  - Resolves: #1745152 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request
    for large response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-11
changelog:
  - Resolves: #1695432 - CVE-2019-0211 httpd: privilege escalation
    from modules scripts
  - Resolves: #1696091 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
    bypass when using per-location client certification authentication


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-14
changelog:
  - Resolves: #1724549 - httpd response contains garbage in Content-Type header
  - Resolves: #1696142 - CVE-2019-0217 httpd:2.4/httpd: mod_auth_digest: access
    control bypass due to race condition
  - Resolves: #1696097 - CVE-2019-0220 httpd:2.4/httpd: URL normalization
    inconsistency
  - Resolves: #1669221 - `ExtendedStatus Off` directive when using mod_systemd
    causes systemctl to hang
  - Resolves: #1673022 - httpd can not be started with mod_md enabled


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-16
changelog:
  - Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
    headers leads to denial of service
  - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
    large response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-13
changelog:
  - Resolves: #1696142 - CVE-2019-0217 httpd:2.4/httpd: mod_auth_digest: access
    control bypass due to race condition
  - Resolves: #1696097 - CVE-2019-0220 httpd:2.4/httpd: URL normalization
    inconsistency
  - Resolves: #1669221 - `ExtendedStatus Off` directive when using mod_systemd
    causes systemctl to hang
  - Resolves: #1673022 - httpd can not be started with mod_md enabled


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-18
changelog:
  - Resolves: #1744121 - Unexpected OCSP in proxy SSL connection
  - Resolves: #1725031 - htpasswd: support SHA-x passwords for FIPS compatibility
  - Resolves: #1633224 - mod_cgid logging issues


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-21
changelog:
  - Resolves: #1775158 - POST request with TLS 1.3 PHA client auth fails:
    Re-negotiation handshake failed: Client certificate missing


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-27
changelog:
  - Resolves: #1823259 - CVE-2020-1927 httpd:2.4/httpd: mod_rewrite configurations
    vulnerable to open redirect
  - Resolves: #1747284 - CVE-2019-10098 httpd:2.4/httpd: mod_rewrite potential
    open redirect
  - Resolves: #1747281 - CVE-2019-10092 httpd:2.4/httpd: limited cross-site 
    scripting in mod_proxy error page
  - Resolves: #1747291 - CVE-2019-10097 httpd:2.4/httpd: null-pointer dereference
    in mod_remoteip
  - Resolves: #1771847 - BalancerMember ping parameter for mod_proxy_http
    doesn't work
  - Resolves: #1794728 - Backport of SessionExpiryUpdateInterval directive


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-29
changelog:
  - Resolves: #1823263 (CVE-2020-1934) - CVE-2020-1934 httpd: mod_proxy_ftp use of
    uninitialized value


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-31
changelog:
  - Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
    not respect expiry time
  - Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
    overflow
  - Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
  - Resolves: #1869576 - httpd : mod_proxy should allow to specify
    Proxy-Authorization in ProxyRemote directive
  - Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
  - Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
    a balancer


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-33
changelog:
  - Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
    concurrency issues
  - Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
    a client cert to backend server
  - Resolves: #1680118 - unorderly connection close when client attempts
    renegotiation


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-36
changelog:
  - Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
    mod_proxy_wstunnel
  - Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-37
changelog:
  - Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
    to be able to handle certs without matching private key


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-39.1
changelog:
  - Resolves: #2007234 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path
  - Resolves: #2007646 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
    mod_session


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-40
changelog:
  - Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
  - Resolves: #1937334 - SSLProtocol with based virtual hosts


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-41
changelog:
  - Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
  - Resolves: #1905613 - mod_ssl does not like valid certificate chain
  - Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
    usertrack
  - Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
  - Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
    dereference in parser
  - Resolves: #1934741 - Apache trademark update - new logo


author: EL Errata <el-errata_ww@oracle.com> - 2.4.37-41.0.1
changelog:
  - Add checks on the configured UDS path [Orabug: 33412270][CVE-2021-40438]
  - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262]
  - Replace index.html with Oracle's index page oracle_index.html


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-42
changelog:
  - Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path
  - Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
    mod_session


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43
changelog:
  - Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43.1
changelog:
  - Resolves: #2035062 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
    overflow when parsing multipart content


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43.2
changelog:
  - Resolves: #2059256 - CVE-2021-34798 httpd:2.4/httpd: NULL pointer dereference
    via malformed requests
  - Resolves: #2059257 - CVE-2021-39275 httpd:2.4/httpd: out-of-bounds write in
    ap_escape_quotes() via malicious input


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43.3
changelog:
  - Resolves: #2065247 - CVE-2022-22720 httpd:2.4/httpd: HTTP request smuggling
    vulnerability in Apache HTTP Server 2.4.52 and earlier


author: Sushmita Bhattacharya <sushmita.bhattacharya@oracle.com> - 2.4.37-43.0.3.3
changelog:
  - Resolves: CVE-2021-33193 a crafted method sent through HTTP/2 will 
    bypass validation [Orabug: 33942809]


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-42
changelog:
  - Resolves: #2007236 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path
  - Resolves: #1969229 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
    mod_session


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43
changelog:
  - Related: #2007236 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-44
changelog:
  - Resolves: #1968278 - CVE-2020-35452 httpd:2.4/httpd: Single zero byte stack
    overflow in mod_auth_digest
  - Resolves: #2001046 - Apache httpd OOME with mod_dav in RHEL 8
  - Resolves: #2005128 (CVE-2021-34798) - CVE-2021-34798 httpd: NULL pointer
    dereference via malformed requests
  - Resolves: #1984828 - mod_proxy_hcheck piles up health checks leading to high
    memory consumption
  - Resolves: #2005119 - CVE-2021-39275 httpd: out-of-bounds write in
    ap_escape_quotes() via malicious input


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-45
changelog:
  - Resolves: #2007199 - CVE-2021-36160 httpd:2.4/httpd: mod_proxy_uwsgi:
    out-of-bounds read via a crafted request uri-path
  - Resolves: #1972491 - CVE-2021-33193 httpd:2.4/mod_http2: Request splitting via
    HTTP/2 method injection and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-46
changelog:
  - Resolves: #2035063 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
    overflow when parsing multipart content


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-47
changelog:
  - Resolves: #2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference
    or SSRF in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-47.1
changelog:
  - Resolves: #2065248 - CVE-2022-22720 httpd:2.4/httpd: HTTP request smuggling
    vulnerability in Apache HTTP Server 2.4.52 and earlier


author: Kaylin Devchand <kaylin.devchand@oracle.com> - 2.4.37-47.0.2.2
changelog:
  - mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and
    fixup last [CVE-2022-31813][Orabug: 34381946]


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-48
changelog:
  - Resolves: #2065249 - CVE-2022-22720 httpd:2.4/httpd: HTTP request smuggling
    vulnerability in Apache HTTP Server 2.4.52 and earlier


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-50
changelog:
  - Resolves: #2065237 - CVE-2022-22719 httpd:2.4/httpd: mod_lua: Use of
    uninitialized value of in r:parsebody
  - Resolves: #2065267 - CVE-2022-22721 httpd:2.4/httpd: core: Possible buffer
    overflow with very large or unlimited LimitXMLRequestBody
  - Resolves: #2065324 - CVE-2022-23943 httpd:2.4/httpd: mod_sed: Read/write
    beyond bounds


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-51
changelog:
  - Resolves: #2097015 - CVE-2022-28614 httpd:2.4/httpd: out-of-bounds read via
    ap_rwrite()
  - Resolves: #2097031 - CVE-2022-28615 httpd:2.4/httpd: out-of-bounds read in
    ap_strcmp_match()
  - Resolves: #2097458 - CVE-2022-30522 httpd:2.4/httpd: mod_sed: DoS
    vulnerability
  - Resolves: #2097480 - CVE-2022-30556 httpd:2.4/httpd: mod_lua: Information
    disclosure with websockets
  - Resolves: #2098247 - CVE-2022-31813 httpd:2.4/httpd: mod_proxy:
    X-Forwarded-For dropped by hop-by-hop mechanism
  - Resolves: #2097451 - CVE-2022-29404 httpd:2.4/httpd: mod_lua: DoS in
    r:parsebody
  - Resolves: #2096997 - CVE-2022-26377 httpd:2.4/httpd: mod_proxy_ajp: Possible
    request smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-56.4
changelog:
  - Resolves: #2177748 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting
    with mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-62
changelog:
  - Resolves: #2221083 - Apache Bug 57087: mod_proxy_fcgi doesn't send cgi
    CONTENT_LENGTH variable when the client request used Transfer-Encoding:chunked


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-62
changelog:
  - Resolves: #2221083 - Apache Bug 57087: mod_proxy_fcgi doesn't send cgi 
    CONTENT_LENGTH variable when the client request used Transfer-Encoding:chunked


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.1
changelog:
  - Resolves: RHEL-45812 - httpd:2.4/httpd: Substitution encoding issue
    in mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-45785 - httpd:2.4/httpd: Encoding problem in
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45777 - httpd:2.4/httpd: Improper escaping of output
    in mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45758 - httpd:2.4/httpd: null pointer dereference
    in mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45743 - httpd:2.4/httpd: Potential SSRF
    in mod_rewrite (CVE-2024-39573)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.2
changelog:
  - Resolves: RHEL-46040 - httpd:2.4/httpd: Security issues via backend
    applications whose response headers are malicious or exploitable (CVE-2024-38476)
  - Resolves: RHEL-53022 - Regression introduced by CVE-2024-38474 fix


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.3
changelog:
  - Resolves: RHEL-56068 - Apache HTTPD no longer parse PHP files with
    unicode characters in the name


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.8-3
changelog:
  - BuildRequire rdma-core-devel on s390(x).
  - Install the hwloc-dump-hwdata.service systemd service on x86/x86_64.


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.9-1
changelog:
  - Update to 1.11.9.
  - BuildRequire gcc, gcc-c++. Drop Group tags.
  - BuildRequire numactl-devel on s390x too.


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.28.20180415git.el8
changelog:
  - hpvd-Set-IgnoreOnIsolate-1-in-systemd-units.patch [bz#1769920]
  - Resolves: bz#1769920
    ([Hyper-V][RHEL8] Running 'systemctl isolate' on any target stops hyperv-daemon services)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.29.20180415git.el8
changelog:
  - hvd-Update-C-files-and-scripts-to-kernel-version-5.7-rc1.patch [bz#1816750]
  - hvd-Add-vmbus_testing-tool-build-files.patch [bz#1816750]
  - Resolves: bz#1816750
    ([Hyper-V][RHEL8.3] Update Hyper-V tools)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.30.20180415git.el8
changelog:
  - hvd-tools-hv-change-http-to-https-in-hv_kvp_daemon.c.patch [bz#1886104]
  - Resolves: bz#1886104
    ([Hyper-V][RHEL8.4] Update Hyper-V-Daemons)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.31.20180415git.el8
changelog:
  - hpvd-Enable-build-on-aarch64.patch [bz#2020141]
  - Resolves: bz#2020141
    ([Hyper-V][RHEL8.6][ARM64] No hyperv-daemons package built for aarch64 platform)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.32.20180415git.el8
changelog:
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [bz#2056566]
  - hpvd-Use-filename-for-connection-profile.patch [bz#2056566]
  - Resolves: bz#2056566
    ([RHEL8.6][Hyper-V]The /usr/libexec/hypervkvpd/hv_set_ifconfig need update since the ifdown/ifup was not supported on RHEL8)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.32.20180415git.el8
changelog:
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [bz#2065202]
  - hpvd-Use-filename-for-connection-profile.patch [bz#2065202]
  - Resolves: bz#2065202
    ([RHEL8.6][Hyper-V]The /usr/libexec/hypervkvpd/hv_set_ifconfig need update since the ifdown/ifup was not supported on RHEL8 [rhel-8.7.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.33.20180415git
changelog:
  - hpvd-hypervkvpd.service-ordering-fixes.patch [bz#2115761]
  - hpvd-redhat-Add-ConditionalVirtualization-to-the-rest-of-.patch [bz#2115761]
  - Resolves: bz#2115761
    ([Hyper-V][RHEL-8] hypervkvpd.service service ordering)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.34.20180415git
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2142028]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [bz#2139456]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [bz#2139456]
  - Resolves: bz#2142028
    ([Hyper-V][RHEL-8] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0)
  - Resolves: bz#2139456
    ([Hyper-V][RHEL8.8] Update Hyper-V-Daemons)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.34.20180415git.el8_7
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2150255]
  - Resolves: bz#2150255
    ([Hyper-V][RHEL-8] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0 [rhel-8.7.0.z])


author: Jarod Wilson <jarod@redhat.com> 18.1-2
changelog:
  - Disable nes, mthca and ipath libibverbs providers, this
    old hardware is no longer supported, and fix disabling
    of cxgb3 and ocrdma


author: Jarod Wilson <jarod@redhat.com> - 19.1-1
changelog:
  - Update to v19.1 stable branch release
  - Fix SRQ support in libi40iw
  - Backport libqedr support for SRQ
  - Resolves: rhbz#1639692
  - Switch rxe_cfg from ifconfig to iproute2
  - Resolves: rhbz#1640637


author: Jarod Wilson <jarod@redhat.com> - 22-1
changelog:
  - Update to upstream v22 release for features and fixes
  - Include legacy ibdev2netdev helper script
  - Resolves: rhbz#1643904


author: Jarod Wilson <jarod@redhat.com> - 22.3-1
changelog:
  - Update to upstream v22.3 stable release for fixes
  - Enable support for Broadcom 57500 hardware
  - Enable support for Mellanox ConnectX-6 DX hardware
  - Resolves: rhbz#1678276
  - Resolves: rhbz#1687435


author: Jarod Wilson <jarod@redhat.com> - 26.0-2
changelog:
  - Add Obsoletes/Provides pair for infiniband-diags-devel
  - Pull in upstream stable-v26 branch patches
  - Fix %postun scriptlet failures by removing superfluous -p options
  - Add new BuildRequires: on pandoc
  - Related: rhbz#1722257


author: Honggang Li <honli@redhat.com> - 29.0-2
changelog:
  - Suppress ibdev2netdev warning messgae
  - Unversioned documentation directory
  - Resolves: bz1794904, bz1824853


author: Honggang Li <honli@redhat.com> - 32.0-1
changelog:
  - Update to upstream v32 release for features and fixes
  - Support Amazon Elastic Fabric Adapter
  - Enable pyverbs
  - Add a check for udevadm in the specfile
  - Resolves: bz1851721, bz1856076, bz1887396, bz1868804


author: Honggang Li <honli@redhat.com> - 32.0-4
changelog:
  - Update to upstream stable release v32.1
  - Fix mlx5 pyverbs CQ test
  - Resolves: bz1915745, bz1907377


author: Honggang Li <honli@redhat.com> - 37.1-1
changelog:
  - Update to upstream v37.1 release for features and fixes
  - Resolves: bz1982200, bz1990120, bz1982131


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517


author: Mark Haywood <mark.haywood@oracle.com> - 5:53.0-1.0.1
changelog:
  - oracle: Package for Oracle (Mark Haywood) [Orabug: 36996172]
  - oracle: /sys/class/infiniband_verbs/uverbs0 is a directory (Mark Haywood) [Orabug: 37005921]
  - oracle: start rdma-load-modules@.service in initrd (Mark Haywood) [Orabug: 37005973]
  - oracle/spec: Make NAME_KERNEL interface naming mode (Aron Silverton) [Orabug: 29508529]
  - oracle/spec: Disable LTO (Aron Silverton) [Orabug: 32351282]
  - oracle/spec: Generate binaries with debug symbols (Aron Silverton) [Orabug: 29839092]
  - oracle: Add support for named PKEY devices (Aron Silverton) [Orabug: 29636104]
  - oracle/spec: Load RDS kernel modules using hot-plug (Aron Silverton) [Orabug: 28667038]
  - oracle/spec: Load sysctl settings for RDS (Aron Silverton) [Orabug: 28667038]
  - oracle: Disable loading ib_iser (Aron Silverton) [Orabug: 28188517]
  - oracle: Disable loading NFS over RDMA (Aron Silverton) [Orabug: 28667412]
  - oracle: Load RDMAIP kernel module using hot-plug (Aron Silverton) [Orabug: 28782057]
  - oracle: Add buildrpm and link spec file (Aron Silverton) [Orabug: 26829960]
  - rdma-core: Move ibdev2netdev from oracle-rdma-tools to rdma-core (Mark Haywood) [Orabug: 32373791]
  - rdma-core: Move show_gids from oracle-rdma-tools to rdma-core (Mark Haywood) [Orabug: 32373797]
  - oracle/spec: Create packaging for Oracle unsupported ibverbs providers (Mark Haywood) [Orabug: 36441183]
  - oracle/spec: Create packaging for hnsdv unsupported ibverbs provider (Mark Haywood) [Orabug: 37005881]
  - oracle: Set initial release number for Oracle (Mark Haywood) [Orabug: 36996172]


author: Mark Haywood <mark.haywood@oracle.com> - 5:53.0-1.0.2
changelog:
  - libibmad: dont set errno for MAD "no records" err - app binary compatibility (Mark Haywood) [Orabug: 33479089]
  - oracle: Provide a service to set static GUIDs for mlx4 IOV devices (Mark Haywood) [Orabug: 33761402]
  - oracle: Do not load the RDMAIP kernel module in UEK7 and beyond (Mark Haywood) [Orabug 33679923]
  - libmlx5: Improve the test for Sandy Bridge processor (Mark Haywood) [Orabug: 34382145]
  - libibverbs(verbs,libmlx4,libmlx5, librxe): Add Shared PD (Mark Haywood) [Orabug: 21525110, 28036829, 31086119]
  - libibverbs(verbs,libmlx4,libmlx5), librdmacm: Add XRC Compatibility Layer (Mark Haywood) [Orabug: 21616281, 28037506]
  - libibverbs(verbs,libmlx4,libmlx5): Add Userlevel FMR (Mark Haywood) [Orabug: 21525110, 26547698]
  - libibverbs: Detect uek_abi_version and UEK4 compatibility in libibverbs (Gerd Rausch) [Orabug: 28035740]
  - libibverbs(libmlx4): Conditionally disable blueflame (Mark Haywood) [Orabug: 25894415]


author: Mark Haywood <mark.haywood@oracle.com> - 5:53.0-1.0.4
changelog:
  - Remove "perl" metadata RPM dependency in infiniband-diags and infiniband-diags-guest (Mark Haywood) [Orabug: 37979342]


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-3
changelog:
  - Fix Bug SEGV Choose an emoji by mouse from the emoji category list
  - Fix Bug 1618682 - SEGV with ASCII on emojier in Wayland
  - Support Shift-Space on emojier preedit
  - Do not move Emojier popup with the active candidate in Xorg
  - Do not clear Unicode data when emoji annotation lang is changed


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-5
changelog:
  - Resolves: #1713606 - Fix hangul preedit commit with mouse click
  - Resolves: #1682157 - Integrate ibus-desktop-testing and test cases


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-13
changelog:
  - Resolves: #1897548 - Rebuild IBus emoji with unicode-emoji-13.0-4 and cldr-emoji-annotation-39-2
  - Rebuild ibusemojigen.h and ibusunicodegen.h
  - Add ibus-1897548-emoji-unicode.patch to lookup Unicode names
  - Add U+32FF to IBusUnicodeData
  - Add ibus-po-1.5.19-20210706.tar.gz


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-9
changelog:
  - Do not use combined characters on preedit for compose keys
  - Fixed an infinite loop of extension preedit with xterm


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-14
changelog:
  - Fixed Man page scan results for ibus
  - Added IBUS_DISCARD_PASSWORD env variable for password dialog in firefox
  - Added history annotation for previous emojis


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-17
changelog:
  - Add ibus-m17n-content-type.patch
  - Fix bug 1024071 - ibus-m17n is enabled in the password entry field
    of the lock screen


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.2-3
changelog:
  - Add a series of upstream patches to enable compiler warnings and
    fix multiple issues.
  - Revert one of the checks which breaks processing of PE binaries.
  - Removed the 'Group' line, not needed with modern Fedora/RPM.


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - New upstream version 0.31.3.
  - This includes all the previous upstream patches, and reverts the
    check which broke processing of PE binaries.


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-1
changelog:
  - Updated to version 0.32.3.
  - Dropped patch to fix https://savannah.nongnu.org/bugs/?52319 (applied upstream)


author: Mike FABIAN <mfabian@redhat.com> - 60.2-4
changelog:
  - Add negative-daylight-savings.patch from upstream.
    (see http://bugs.icu-project.org/trac/ticket/13566 and
    http://bugs.icu-project.org/trac/changeset/40954)


author: Parag Nemade <pnemade AT redhat DOT com> - 60.2-7
changelog:
  - Resolves:rh#1602551 - Fix specfile by adding compile options
  - also add BuildRequires for gcc and gcc-c++
  - Correct the upstream URL


author: Mike FABIAN <mfabian@redhat.com> - 60.3-1
changelog:
  - Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
  - Resolves: rhbz#1677093


author: Mike FABIAN <mfabian@redhat.com> - 60.3-2
changelog:
  - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
  - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
  - Resolves: rhbz#1808238


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.3-1
changelog:
  - Rebase to JSS 4.9.3
  - Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM [rhel-8]


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.4-1
changelog:
  - Rebase to JSS 4.9.4
  - Bug 2013674 - JSS cannot be properly initialized after using another NSS-backed security provider


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.12.0-0.1
changelog:
  - Rebase to PKI 10.12.0
  - Bug 1904112 - pki fails to start if empty dir /var/lib/pki/pki-tomcat/kra exists
  - Bug 1984455 - [RFE] Date Format on the TPS Agent Page
  - Bug 1980378 - 'keyctl_search: Required key not available' message when running 'ipa-healthcheck'
  - Bug 2004084 - Reinstall of the same ipa-replica fails with 'RuntimeError: CA configuration failed.'
  - Bug 2006070 - Upgrades incorrectly add secret attribute to connectors


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.12.0-4
changelog:
  - Bug 2107334 - CVE-2022-2414 access to external entities when parsing XML can lead to XXE
  - Rename packages to idm-pki


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.14.3-1
changelog:
  - Rebase to PKI 10.14.3
  - Bug 1959057 - An error has ocorred (IPA Error 4301:CertificateOperationError)
  - Bug 2016164 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug 2022561 - ipa-healthcheck CADogtagCertsConfigCheck fail to process the scenario of renewed IPA CA certificates ( ipa get_cert_from_db() )


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-1
changelog:
  - New upstream release
  - Add OpenSSL 1.0 compatibility package, due to issues with OpenSSL 1.1
  - Remove libtool files
  - Run ldconfig after un/installation to update *.so files
  - Add -devel subpackage to handle include files and examples


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-2
changelog:
  - Adjusted docbook xsl path to match the correct stylesheet
  - Remove only *.la files, considering there aren't any *.a files


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-3
changelog:
  - Add OpenSSL 1.1 API support for the package, avoiding the need of
    compat-openssl10-devel package


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Support for OpenSSL 1.1 was added directly to the source code in upstream,
    thus removing specific patch for it
  - Docbook xsl stylesheet updated to a local path


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.1-2
changelog:
  - Remove libtool files
  - Run ldconfig scriptlets after un/installing
  - Add -devel subpackage to handle include files and examples
  - Disable any static file in the package


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 1.1-3
changelog:
  - Solve memory leaks pointed by covscan tool
  - Add optimization flag O2 during compilation to satisfy annocheck tool


author: Honggang Li <honli@redhat.com> - 1.6.7-5
changelog:
  - Update source URL
  - Disable support for ARM32
  - Disable support for s390 as rdma-core is unavailable for s390
  - Remove rdma-ndd as it had been merged into rdma-core
  - Resolves: bz1484155


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4-2
changelog:
  - Fix broken reference following when the reference is split to
    more than one line
  - Fix possible incorrect selection of already loaded file when
    following cross reference
    Resolves: #1383057


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.78-1
changelog:
  - specfile: drop dependancy on /etc/system-release
  - ifup-post: always update nameserver & search entries in /etc/resolv.conf
  - network-scripts: forward DBus calls to /dev/null
  - Spelling fixes
  - Tell git to ignore *.o
  - Use grep -E instead of deprecated egrep
  - Avoid some unnecessary stat calls
  - systemd/system: symlinks for fedora-* services removed
  - network-scripts: firewall-cmd replaced with DBus calls
  - 'debugmode' subpackage dropped completely
  - sysconfig/init* files dropped
  - sysctl.conf.s390 dropped
  - usleep: change the error message to print the full replacement commandline


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.79-1
changelog:
  - ifdown-post: fix logical error in commit 5d61564
  - network: add knob to optionally keep interfaces up during shutdown
  - network-functions: use POSIX forwarding instead of bash-ism


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.80-1
changelog:
  - sysconfig/readonly-root: Clarify the usage of readonly-root
  - use proper shebang where appropriate
  - specfile: remove the systemctl call in the %postun phase
  - network-functions: use tr to upper case strings rather than awk
  - network-functions: add error messages for bonding installation
  - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed
  - netconsole: LSB header added
  - po/xgettext_sh*: converted to use to python3
  - network.service: 'reload' removed
  - ifup-tunnel: Support 'external' tunnels
  - spec: add gcc to BuildRequires
  - init.d/functions: fix sourcing for ksh


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.81-1
changelog:
  - src/consoletype.c: deprecation warning added
  - src/genhostid.c: deprecation warning added
  - src/genhostid.c: fixed to not override /etc/hostid if it already exists
  - src/usleep.c: GCC warnings fixed
  - nis-domainname.service removed
  - fedora-* services renamed to more general names
  - specfile: missing fedora-domainname.service returned in systemd macros
  - COPYING updated to latest GNU version (GPLv2+)
  - network-scripts: control 'network' service with alternatives as well
  - netreport functionality dropped
  - networks moved into 'setup' package
  - lang.{sh,csh} moved into setup package
  - lang.{sh,csh} cleanup before moving to 'setup' package
  - src/sushell moved into 'policycoreutils' package
  - src/shvar.* removed
  - po/xgettext_sh removed
  - sys-unconfig removed
  - Outdated files from doc/ folder removed
  - make archive: ChangeLog generating removed
  - network-scripts: ifup & ifdown -- use alternatives system
  - adjtime moved into 'util-linux' package
  - specfile: simplified & updated to new repository layout
  - .gitignore files updated to new repository layout
  - Makefile simplified & updated to new repository layout
  - po/Makefile simplified & updated to new repository layout
  - src/Makefile simplified & updated to new repository layout
  - Repository scheme updated to new layout
  - fedora-readonly: command substitution warning fixed (null-byte input)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.82-1
changelog:
  - Makefile: make the creation of symlinks relative to path again
  - specfile: trailing file of netreport removed


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.83-1
changelog:
  - network-scripts: Add previously dropped error checking
  - network-scripts: Replace brctl with ip-link
  - Makefile: new release-commit rule added
  - src/rename_device.c: GCC warnings about unused return value suppressed
  - src/usernetctl.c: GCC warnings about unused return value suppressed
  - Makefile: allow sub-makefiles to run in parallel
  - specfile: netconsole service moved to /usr/libexec
  - specfile: services from /usr/lib/systemd moved to /usr/libexec
  - specfile: summary & description updated
  - specfile: no longer needed conflicts dropped
  - specfile: requirements cleanup
  - specfile: obsoletes on previous version of initscripts package added
  - specfile: network-scripts subpackage created
  - specfile: readonly-root subpackage created
  - specfile: netconsole-service subpackage created
  - README.md: Travis CI build icon added
  - .travis.yml: check the 'make install' proceeds as well
  - .travis.yml: initial commit
  - README.md: bug reporting described
  - README.dm: future of initscripts described
  - README.md: description added
  - README.md: references to old git branches added
  - README.md: initial commit
  - network-scripts: setting of firewall ZONE fixed
  - ifdown-post: artifact whitespace removed from the DBus call
  - l10n: drop .tx directory
  - l10n: add zanata.xml


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 10.00-1
changelog:
  - Move the /etc/rwtab.d & /etc/statetab.d folders to 'filesystem'
  - specfile: fix failing build because of incorrect use of (aarch-64)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 10.00.1-1
changelog:
  - consoletype/genhostid/usleep: allow disabling of deprecation warnings
  - network/ifup/ifdown: allow disabling of deprecation warnings
  - network/ifup/ifdown: deprecation warnings for 'network-scripts' added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 10.00-1
changelog:
  - Move the /etc/rwtab.d & /etc/statetab.d folders to 'filesystem'
  - specfile: fix failing build because of incorrect use of (x86-32)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 10.00-1
changelog:
  - Move the /etc/rwtab.d & /etc/statetab.d folders to 'filesystem'
  - specfile: fix failing build because of incorrect use of (x86-64)


author: Jan Macku <jamacku@redhat.com> - 10.00.7-1
changelog:
  - Wait for scope link addresses as well as for scope global addresses
  - Remove deprecated option -m of pidof


author: Jan Macku <jamacku@redhat.com> - 10.00.8-1
changelog:
  - rwtab: Add support for chrony
  - ifup-eth: Switch to bc utility, which supports floating point computations.
  - Replace grep -EL with subshell since -L changed behaviour


author: Jan Macku <jamacku@redhat.com> - 10.00.10-1
changelog:
  - Allow updating rfkill switch status while in readonly root mode
  - service: Prevent variables from globbing
  - Allow updating mlocate.db while in readonly root mode


author: Jan Macku <jamacku@redhat.com> - 10.00.16-1
changelog:
  - rename_device: also support dracut-style kernel cmdline configuration
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race


author: Jan Macku <jamacku@redhat.com> - 10.00.17-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ci: introduce GA ci from master to rhel8-branch
  - ci: Setup packit for RHEL8 branch
  - ci: Get rid of old ci files (travis and zanata)


author: Jan Macku <jamacku@redhat.com> - 10.00.3-1
changelog:
  - rc.d/functions: fix escape sequence being output under systemd service units
  - Replace not working awk command with sed


author: Jan Macku <jamacku@redhat.com> - 10.00.5-1
changelog:
  - network-function: bridges are created by ifup-eth
  - network: don't fail with IFDOWN_ON_SHUTDOWN
  - Add ip6gre tunnel option
  - ifup-eth: Check that device name is set
  - Initscripts no longer care about rc.local


author: Jan Horak <jhorak@redhat.com> - 0.92.3-2
changelog:
  - Bundle ImageMagick into the package
  - Removed gnome-vfs2-devel requirement
  - Make uniconvertor weak dependency


author: Jan Horak <jhorak@redhat.com> - 0.92.3-3
changelog:
  - Use python2 for the extensions explicitly
  - Exluding s390x, build problems, making no sense to build Inkscape for
    mainframe hardware


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-1
changelog:
  - Bring Inkscape 1.0.1 into RHEL 8.8 and obsolete the previous 0.92.3 modular
    package. See https://issues.redhat.com/browse/RHELPLAN-121672
  - Resolves: rhbz#1891732


author: Thomas Woerner <twoerner@redhat.com> - 4.7.1-3.el8
changelog:
  - New command automember-find-orphans to find and remove orphan automemeber
    rules has been added
    Resolves: RHBZ#1638373
  - Moved ipa/idm logos and background to redhat-logos-ipa-80.4:
    header-logo.png, login-screen-background.jpg, login-screen-logo.png,
    product-name.png
    New requirement to redhat-logos-ipa >= 80.4 in ipa-server-common
    Resolves: RHBZ#1626507


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.1-4.el8
changelog:
  - Fix mapping of BUILTIN\Guests to 'nobody' group during upgrade
    to not use generated Samba config at this point
  - Related: rhbz#1623895


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.1-5.el8
changelog:
  - Fixed: rhbz#1643445 - External CA step 2 fails with pki_client_database_dir is missing
  - Fixed: rhbz#1642834 - Smart card advise script uses hard-coded Python interpreter


author: Thomas Woerner <twoerner@redhat.com> - 4.7.1-7.el8
changelog:
  - Fix misleading errors during client install rollback
    Resolves: RHBZ#1658283
  - ipa-advise: update url of cacerdir_rehash tool
    Resolves: RHBZ#1658287
  - Handle NTP configuration in a replica server installation
    Resolves: RHBZ#1651679
  - Fix defects found by static analysis
    Resolves: RHBZ#1658182
  - ipa-replica-install --setup-adtrust: check for package ipa-server-trust-ad
    Resolves: RHBZ#1658294
  - ipaldap: invalid modlist when attribute encoding can vary
    Resolves: RHBZ#1658302
  - Allow ipaapi and Apache user to access SSSD IFP
    Resolves: RHBZ#1639910
  - Add sysadm_r to default SELinux user map order
    Resolves: RHBZ#1658303
  - certdb: ensure non-empty Subject Key Identifier and validate server cert sig
    Resolves: RHBZ#1641988
  - ipa-replica-install: password and admin-password options mutually exclusive
    Resolves: RHBZ#1658309
  - ipa upgrade: handle double-encoded certificates
    Resolves: RHBZ#1658310
  - PKINIT: fix ipa-pkinit-manage enable|disable
    Resolves: RHBZ#1658313
  - Enable LDAP debug output in client to display TLS errors in join
    Resolves: RHBZ#1658316
  - rpc: always read response
    Resolves: RHBZ#1639890
  - ipa vault-retrieve: fix internal error
    Resolves: RHBZ#1658485
  - Move ipa's systemd tmpfiles from /var/run to /run
    Resolves: RHBZ#1658487
  - Fix authselect invocations to work with 1.0.2
    Resolves: RHBZ#1654291
  - ipa-client-automount and NFS unit name changes
    Resolves: RHBZ#1645501
  - Fix compile issue with new 389-ds
    Resolves: RHBZ#1659448


author: Christian Heimes <cheimes@redhat.com> - 4.7.1-8
changelog:
  - Create systemd-user HBAC service and rule
    Resolves: RHBZ#1664974
  - ipaserver/dcerpc: fix exclusion entry with a forest trust domain info returned
    Resolves: RHBZ#1664023


author: Rob Crittenden <rcritten@redhat.com> - 4.7.1-11
changelog:
  - Handle NFS configuration file changes. nfs-utils moved the
    configuration file from /etc/sysconfig/nfs to /etc/nfs.conf.
    Resolves: RHBZ#1676981


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.8.0-3
changelog:
  - Make sure ipa-server depends on krb5-kdb-version to pick up
    right MIT Kerberos KDB ABI
    Related: RHBZ#1700121
  - User field separator uses '$$' within ipaSELInuxUserMapOrder
    Fixes: RHBZ#1729099


author: Thomas Woerner <twoerner@redhat.com> - 4.8.0-5
changelog:
  - Remove posixAccount from service_find search filter
    Resolves: RHBZ#1731437
  - Fix repeated uninstallation of ipa-client-samba crashes
    Resolves: RHBZ#1732529
  - WebUI: Add PKINIT status field to 'Configuration' page
    Resolves: RHBZ#1518153


author: Thomas Woerner <twoerner@redhat.com> - 4.8.0-11
changelog:
  - Adtrust: avoid using timestamp in klist output
    Resolves: RHBZ#1750242
  - Add default access control configuration to trusted domain objects
    Resolves: RHBZ#1751707


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.8.0-13
changelog:
  - CVE-2019-14867: Denial of service in IPA server due to wrong use of ber_scanf()
    Resolves: RHBZ#1767303
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
    Resolves: RHBZ#1728125


author: Thomas Woerner <twoerner@redhat.com> - 4.8.3-2
changelog:
  - Use default crypto policy for TLS and enable TLS 1.3 support
    Resolves: RHBZ#1777809
  - Covscan fixes
    Resolves: RHBZ#1777920
  - Change pki_version to 10.8.0
    Related: RHBZ#1748987


author: Thomas Woerner <twoerner@redhat.com> - 4.8.4-1
changelog:
  - Rebase to upstream release 4.8.4
    - Removed upstream patches 0001 to 0008 that are part of version 4.8.3-3
    Resolves: RHBZ#1782658
    Resolves: RHBZ#1782169
    Resolves: RHBZ#1783046
    Related: RHBZ#1748987


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.8.4-3
changelog:
  - Depend on krb5-kdb-version-devel for BuildRequires
  - Update nss dependency to 3.44.0-4
  - Reset per-indicator Kebreros policy
    Resolves: RHBZ#1784761


author: Thomas Woerner <twoerner@redhat.com> - 4.8.4-5
changelog:
  - Fixed weekday in 4.8.4-2 changelog date
    Related: RHBZ#1784003
  - adtrust: print DNS records for external DNS case after role is enabled
    Resolves: RHBZ#1665051
  - AD user without override receive InternalServerError with API
    Resolves: RHBZ#1782572
  - ipa-client-automount fails after repeated installation/uninstallation
    Resolves: RHBZ#1790886
  - install/updates: move external members past schema compat update
    Resolves: RHBZ#1803165
  - kdb: make sure audit_as_req callback signature change is preserved
    Resolves: RHBZ#1803786


author: Thomas Woerner <twoerner@redhat.com> - 4.8.7-6
changelog:
  - selinux don't audit rules deny fetching trust topology
    Resolves: RHBZ#1845596
  - fix iPAddress cert issuance for >1 host/service
    Resolves: RHBZ#1846352
  - Specify cert_paths when calling PKIConnection
    Resolves: RHBZ#1849155
  - Update crypto policy to allow AD-SUPPORT when installing IPA
    Resolves: RHBZ#1851139
  - Add version to ipa-idoverride-memberof obsoletes
    Related: RHBZ#1846434


author: Thomas Woerner <twoerner@redhat.com> - 4.8.7-8
changelog:
  - [WebUI] IPA Error 3007: RequirmentError" while adding members in
    "User ID overrides" tab (updated)
    Resolves: RHBZ#1757045
  - ipa-client-install: use the authselect backup during uninstall
    Resolves: RHBZ#1810179
  - Replace SSLCertVerificationError with CertificateError for py36
    Resolves: RHBZ#1858318
  - Fix AVC denial during ipa-adtrust-install --add-agents
    Resolves: RHBZ#1859213


author: Thomas Woerner <twoerner@redhat.com> - 4.8.7-9
changelog:
  - CAless installation: set the perms on KDC cert file
    Resolves: RHBZ#1863616
  - EPN: handle empty attributes
    Resolves: RHBZ#1866938
  - IPA-EPN: enhance input validation
    Resolves: RHBZ#1866291
  - EPN: enhance input validation
    Resolves: RHBZ#1863079
  - Require new samba build 4.12.3-52
    Related: RHBZ#1868558
  - Require new selinux-policy build 3.14.3-52
    Related: RHBZ#1869311


author: Thomas Woerner <twoerner@redhat.com> - 4.8.7-12
changelog:
  - Require selinux sub package in the proper version
    Related: RHBZ#1868432
  - SELinux: do not double-define node_t and pki_tomcat_cert_t
    Related: RHBZ#1868432
  - SELinux: add dedicated policy for ipa-pki-retrieve-key + ipatests
    Related: RHBZ#1868432
  - dogtaginstance.py: add --debug to pkispawn
    Resolves: RHBZ#1879604


