# changelog

author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-2
changelog:
  - Add support for the new, more correct, variant of dracut's default
    $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20231009-1
changelog:
  - Update Intel CPU microcode to microcode-20231009 release, addresses
    CVE-2023-23583:
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240531-1
changelog:
  - Update Intel CPU microcode to microcode-20240531 release, addresses
    CVE-2023-22655, CVE-2023-23583. CVE-2023-28746, CVE-2023-38575,
    CVE-2023-39368, CVE-2023-42667, CVE-2023-43490, CVE-2023-45733,
    CVE-2023-46103, CVE-2023-49141 (RHEL-30859, RHEL-30862, RHEL-30865,
    RHEL-30868, RHEL-30871, RHEL-41093, RHEL-41108):
    - Addition of 06-aa-04/0xe6 (MTL-H/U C0) microcode at revision 0x1c;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) at
      revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) at
      revision 0x4121;
    - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode at revision 0x4121;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode at revision
      0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) at revision 0x21000230;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) at revision 0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode at revision
      0x21000230;
    - Removal of 06-8f-04/0x10 microcode at revision 0x2c000290;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b0004d0;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000290;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb4 up to 0xb6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf8 up to 0xfa;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf4 up
      to 0xf8;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfa up
      to 0xfc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000181
      up to 0x1000191;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003604
      up to 0x4003605;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003604 up to 0x5003605;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002703
      up to 0x7002802;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000014 up to 0xe000015;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x38 up
      to 0x3e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003b9
      up to 0xd0003d1;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000268
      up to 0x1000290;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3e up
      to 0x42;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x22 up
      to 0x24;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc2
      up to 0xc4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x4e up
      to 0x50;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000290 up to
      0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x17 up
      to 0x19;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x32
      up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x430 up to 0x433;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x430
      up to 0x433;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x5 up
      to 0x7;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000024
      up to 0x24000026;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf8 up
      to 0xfa;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5d up
      to 0x5e;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x11d up
      to 0x123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x411c up to 0x4121;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x411c
      up to 0x4121;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x12 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
    CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-59081):
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb6 up to 0xb8;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfa up to 0xfc;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfc up
      to 0x100;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Dave Jones <davej@redhat.com>
changelog:
  - Only enable microcode_ctl service if the CPU is capable.
  - Prevent microcode_ctl getting restarted multiple times on initlevel change (#141581)
  - Make restart/reload work properly
  - Do nothing if not started by root.


author: Dave Jones <davej@redhat.com>
changelog:
  - Create/remove the /dev/cpu/microcode dev node as needed.
  - Use correct path again for the microcode.dat.
  - Remove some no longer needed tests in the init script.


author: Dave Jones <davej@redhat.com>
changelog:
  - Drop the node creation/deletion change from previous release.
    It'll cause grief with selinux, and was a hack to get around
    a udev shortcoming that should be fixed properly.


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Spec cleanup and macro standardization.
  - Update license
  - Update microcode data file to 20080131 revision.


author: Dave Jones <davej@redhat.com>
changelog:
  - Shorten sleep time during init.
    This really needs to be replaced with proper udev hooks, but this is
    a quick interim fix.


author: Kyle McMartin <kyle@redhat.com> 1.17-1.56
changelog:
  - Add AMD x86/x86-64 microcode. (Dated: 2009-10-09)
    Doesn't need microcode_ctl modifications as it's loaded by
    request_firmware() like any other sensible driver.
  - Eventually, this AMD firmware can probably live inside
    kernel-firmware once it is split out.


author: Anton Arapov <anton@redhat.com> 1.17-18
changelog:
  - Ship splitted microcode for Intel CPUs [#690930]
  - Include tool for splitting microcode for Intl CPUs (Kay Sievers )


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190514a-2
changelog:
  - Remove disclaimer, as it is not as important now to justify kmsg/log
    pollution; its contents are partially adopted in README.caveats.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190918-1
changelog:
  - Intel CPU microcode update to 20190918 (#1753544).
  - Add new disclaimer, generated based on relevant caveats.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191112-1
changelog:
  - Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
    CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1755019, #1764060, #1764073,
      - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
    - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
    - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
    - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
      to 0xd4
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191112-2
changelog:
  - Package the publicy available microcode-20191112 release (#1755027):
    - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
    - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
    - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
    - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
      up to 0x1000151;
    - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
      0x2000064 up to 0x2000065;
    - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
      up to 0x500002c;
    - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
  - Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
  - Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
  - Update README.caveats with the link to the new Knowledge Base article.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191113-1
changelog:
  - Update Intel CPU microcode to microcode-20191113 release:
    - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
  - Drop 0001-releasenote-changes-summary-fixes.patch.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191115-1
changelog:
  - Update Intel CPU microcode to microcode-20191115 release:
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
      up to 0xd6;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
      0xc6 up to 0xca;
    - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
      up to 0xca;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191115-3
changelog:
  - Update stale posttrans dependency, add triggers for proper handling
    of the debug kernel flavour along with kernel-rt (#1766178).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191115-5
changelog:
  - Re-generate initramfs not only for the currently running kernel,
    but for several recently installed kernels as well (#1773338).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200508-1
changelog:
  - Update Intel CPU microcode to microcode-20200508 release (#1783103):
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
      up to 0x78.
  - Change the URL to point to the GitHub repository since the microcode download
    section at Intel Download Center does not exist anymore.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200520-1
changelog:
  - Update Intel CPU microcode to microcode-20200520 release (#1783103):
    - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
      up to 0x621;
    - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
      up to 0x71a.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200602-1
changelog:
  - Update Intel CPU microcode to microcode-20200602 release, addresses
    CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795354, #1795356, #1827184):
    - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
    - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
      up to 0x2f;
    - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
      up to 0x26;
    - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
    - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
      up to 0x22;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
      up to 0x1000157;
    - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
      (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
      up to 0x2006906;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
      up to 0x4002f01;
    - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
      up to 0x5002f01;
    - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
      from revision 0xca up to 0xd6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
      0xca up to 0xd6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
    - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200602-3
changelog:
  - Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
    0xdc, use 0xd6 by default (#1846119).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-1
changelog:
  - Update Intel CPU microcode to microcode-20200609 release (#1845967):
    - Fixed a typo in the release note file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-2
changelog:
  - Blacklist latest microcode revision for 06-[89]e-0x CPUs (AML-Y,
    CFL-H/S/U/Xeon E, CML-Y, KBL-G/H/S/X/U/Y/Xeon E3 v6, WHL-U) on Dell systems,
    use revision 0xae/0xb4/0xb8 by default, provide the latest revision
    and intermediate revision 0xca in caveats (#1807960, #1846097).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-3
changelog:
  - Add README file to the documentation directory.
  - Add publicly-sourced codenames list to supply to gen_provides.sh; update
    the latter to handle the somewhat different format.
  - Add SUMMARY.intel-ucode file containing metadata information from
    the microcode file headers.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201027-1
changelog:
  - Update Intel CPU microcode to microcode-20201027 release, addresses
    CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
    (#1893266, #1893254, #1893234):
    - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
    - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
    - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
    - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
    - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
    - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
      0xe0;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
      to 0x2006a08;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
      to 0xe0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xd6 up to 0xde;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
      to 0xde;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x43 up to 0x44;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
      up to 0x1000159;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
      up to 0x4003003;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5002f01 up to 0x5003003;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
      to 0x40;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
      to 0x1e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
      to 0x18;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
      up to 0xa0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
      up to 0xe0.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-1
changelog:
  - Update Intel CPU microcode to microcode-20201112 release (#1896912):
    - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
      to 0x34;
    - Updated releasenote file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-2
changelog:
  - Do not use "grep -q" in a pipe in check_caveats (#1902021).
  - Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
    (#1902884).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210216-1
changelog:
  - Update Intel CPU microcode to microcode-20210216 release (#1902884):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
      to 0x2006a0a;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
      up to 0x4003006;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003003 up to 0x5003006.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-1
changelog:
  - Update Intel CPU microcode to microcode-20210525 release, addresses
    CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
    (#1962664, #1962714, #1962734, #1962680):
    - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
    - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
    - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
    - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
    - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
    - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
    - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
    - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
      to 0xb00003e;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
      to 0x2006b06;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
      to 0xea;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xde up to 0xea;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
      to 0xea;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x44 up to 0x46;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
      to 0x19;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
      up to 0x100015b;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
      up to 0x4003102;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003006 up to 0x5003102;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
      up to 0x7002302;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x7000019 up to 0x700001b;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
      up to 0xf000019;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe00000f up to 0xe000012;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
      to 0x44;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
      to 0x34;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
      to 0x1a;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
      up to 0xa6;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
      to 0xea;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
      up to 0xea;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
      up to 0xec;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
      up to 0xe8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
      0xe0 up to 0xea.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-2
changelog:
  - Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
    intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
    and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
  - Enable 06-8c-01 microcode update by default (#1970611).
  - Enable 06-5e-03 microcode update by default (#1897673).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210608-1
changelog:
  - Update Intel CPU microcode to microcode-20210608 release (#1921773):
    - Fixes in releasenote.md file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220204-1
changelog:
  - Update Intel CPU microcode to microcode-20220204 release, addresses
    CVE-2021-0127, CVE-2021-0145, and CVE-2021-33120 (#1971906, #2049543,
      - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
      to 0xb000040;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
      to 0x2006c0a;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xea up to 0xec;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xea up
      to 0xec;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x46 up to 0x49;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
      up to 0x100015c;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
      up to 0x400320a;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003102 up to 0x500320a;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
      up to 0x7002402;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x700001b up to 0x700001c;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
      up to 0xf00001a;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000012 up to 0xe000014;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
      to 0x24;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
      up to 0xd000331;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
      up to 0xa8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
      to 0x2d;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
      to 0x22;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
      to 0x3c;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
      to 0x15;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
      to 0x2400001f;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
      to 0xec;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
      up to 0xec;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
      up to 0xee;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
      up to 0xea;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xea up to 0xec;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
      to 0x50.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220510-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2086743):
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-97-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
      revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) at revision 0x41c;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) at revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
      to 0x2006d05;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xec up to 0xf0;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
      to 0xf0;
    - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
      to 0x90d;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
      up to 0x100015d;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
      up to 0x4003302;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x500320a up to 0x5003302;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
      up to 0x7002501;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
      to 0x48;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
      to 0x28;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
      up to 0xd000363;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
      to 0x1e;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
      up to 0xb0;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
      to 0x31;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
      to 0x26;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
      to 0x16;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
      up to 0x24000023;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
      to 0xf0;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
      up to 0xf0;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
      up to 0xf0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
      up to 0xf0;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xec up to 0xf0;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
      to 0x53.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220809-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-21233 (#2115667):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
      to 0x2006e05;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
      up to 0x100015e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
      up to 0xd000375;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
      to 0x3c;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
      up to 0xb2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
      to 0x28;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
      to 0x40;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
      0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
      up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
      up to 0x421;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
      to 0x54;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230214-1
changelog:
  - Update Intel CPU microcode to microcode-20230214 release, addresses
    CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171234,
      - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b000181;
    - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
      0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
      0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
      0x2b000181;
    - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
      0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
      0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
      0x2c000170;
    - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
    - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
    - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
      revision 0x410e;
    - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
      revision 0x410e;
    - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf0 up to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
      to 0xf4;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
      up to 0x1000161;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
      up to 0x4003303;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003302 up to 0x5003303;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
      up to 0x7002503;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
      up to 0xd000389;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
      to 0x22;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
      up to 0xb8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
      to 0x32;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
      to 0x42;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
      up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x421 up to 0x429;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
      up to 0x429;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
      up to 0x24000024;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
      to 0xf4;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf0 up to 0xf4;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
      to 0x57;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20241112-1
changelog:
  - Update Intel CPU microcode to microcode-20241112 release, addresses
    CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67344):
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
      up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
      up to 0x435;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
      up to 0x20;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
      to 0x12b;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
      up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
      up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
      up to 0x21000283.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20250211-1
changelog:
  - Update Intel CPU microcode to microcode-20250211 release, addresses
    CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
    CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293 (RHEL-79195,
    RHEL-79197, RHEL-79198, RHEL-79213, RHEL-79216):
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
    - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
      revision 0x12c;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf8 up
      to 0xfa;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x100 up
      to 0x102;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
      up to 0xd0003f5;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
      up to 0x10002c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000603
      up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000390 up to
      0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000603
      up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
      up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
      to 0x9;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
      up to 0x436;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
      to 0x63;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
      to 0x12c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
      up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4123 up to 0x4124;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
      up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
      up to 0x21000291.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250512-1
changelog:
  - Add a caveat to provide ability to persistently disable SPR-EE updates
    beyond 0x2b0005c0 on systems where absence of latency spikes
    is more important than lack of the latest CVE mitigations (RHEL-95245)
  - Update Intel CPU microcode to microcode-20250512 release, addresses
    CVE-2024-28956, CVE-2025-20103, CVE-2025-20054, CVE-2024-43420,
    CVE-2025-20623, CVE-2024-45332, CVE-2025-24495, CVE-2025-20012
    (RHEL-92231)
    - Addition of 06-8f-04/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-06/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision
      0xa0000d1;
    - Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcode at revision
      0x10003a2;
    - Addition of 06-b5-00/0x80 (ARL-U A1) microcode at revision 0xa;
    - Addition of 06-bd-01/0x80 (LNL B0) microcode at revision 0x11f;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) at revision 0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode (in
      intel-ucode/06-c6-02) at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode at revision
      0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb8 up to 0xbc;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfc up to 0x100;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x102 up
      to 0x104;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003707 up to 0x5003901;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002904
      up to 0x7002b01;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003f5
      up to 0xd000404;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002c0
      up to 0x10002d0;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x24 up
      to 0x26;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc6
      up to 0xca;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x38 up
      to 0x3c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x52 up
      to 0x56;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000620
      up to 0x2b000639;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0003e0 up to
      0x2c0003f7;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000620
      up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x38
      up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x436 up to 0x437;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x436 up to 0x437;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x436 up to 0x437;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x9 up
      to 0xa;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x436
      up to 0x437;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfc up
      to 0x100;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfe
      up to 0x102;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x63 up
      to 0x64;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x20
      up to 0x24;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000330
      up to 0x3000341;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12c up
      to 0x12f;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12c up to 0x12f;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4124
      up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4124 up to 0x4128;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1c up
      to 0x1d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000291
      up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000291
      up to 0x210002a9.


author: Ales Matej <amatej@redhat.com> - 3.4.0-1
changelog:
  - Update to 3.4.0
  - Fix: do not download metadata in remove command
  - Add reinstall command
  - Add "--setopt=tsflags=test" support
  - Add "--setopt=reposdir=<path>" and "--setopt=varsdir=<path1>,<path2>,..." support
  - Add "--config=<path_to_config_file>" support
  - Add "--disableplugin", "--enableplugin" support (RhBug:1781126)
  - Add "--noplugins" support
  - Add "--setopt=cachedir=<path_to_cache_directory>" support
  - Add "--installroot=<path_to_installroot_directory>" support
  - Add "--refresh" support
  - Support "install_weak_deps" conf option and "--setopt=install_weak_deps=0/1"
  - Respect reposdir from conf file
  - Respect "metadata_expire" conf file opton (RhBug:1771147)
  - [repolist] Print padding spaces only if output is terminal


author: Nicola Sella <nsella@redhat.com> - 3.4.0-3
changelog:
  - Patch: Add support for setting a platform module ID
  - Rename "update" command to "upgrade", "update" remain as compatibility alias


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - Don't set default value of "assumeyes" to TRUE
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Add commands: distro-sync, makecache
  - Add subcommands support
  - Add support for command aliases
  - Added alias "update" to "upgrade" command
  - Relicense to GPLv2+
  - Add support for setting allow_vendor_change
  - [download] Support for "--resolve", "--alldeps" and "--archlist=" arguments
  - [download] several optimizations
  - Support "--setopt=keepcache=0/1"
  - Extend "--setopt" to support repository options


author: Michal Hlavinka <mhlavink@redhat.com> 56-1
changelog:
  - Upgrade to 56 (#1479800)
  - fixes wait exit codes of co-processes when run in interactive mode (#1479320)


author: Michal Sekletar <msekleta@redhat.com> - 0.26-14
changelog:
  - start timer after the installation (#1278587)
  - make mlocate-updatedb.service of the type simple, systemd will then not wait for its completion (#1282232)


author: James Paul Turner <jamesturner246@fedoraproject.org> - 3.1.6-1
changelog:
  - Update to MPFR version 3.1.6
  - Use autosetup specfile macro for applying patches (patches 1 and 2 applied)
  - Removed iconv calls, as they were breaking .info files, which are now unicode
    resolves #1299649
  - Other minor cleanups
  - BuildRequire gcc per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.18-15
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073842)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-5.20180224
changelog:
  - fix crash in parsing of terminfo use capability (CVE-2018-10754)
  - add gcc-c++ to build requirements


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-8.20180224
changelog:
  - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594)
  - handle missing character after backslash in terminfo entry (CVE-2019-17595)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-27
changelog:
  - fix memory leak due of proc file creating (#2105957)
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
  - fix memory leak when ipv6 disable set to 1 (#2151537)
  - fix proxy timeout issue (#2160723)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-30
changelog:
  - fix crash when configured as proxy - issue 82 (RHEL-14454)
  - log once truncating issue (RHEL-13597)
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26650)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.50.20160912git
changelog:
  - Resolves: 1557470 - netstat -i cut's interface names
  - Resolves: 1566084 - netstat -agn only shows 10 character interface name for IPv4 addressing


author: Michal Ruprich <michalruprich@gmail.com> - 2.0-0.52.20160912git
changelog:
  - Resolves: #1711119 - netstat says "packetes" instead of "packets"
  - Resolves: #1670355 - Exit code on wrong parameter is zero for many net-tools binaries
  - Resolves: #1807989 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Tomáš Mráz <tmraz@redhat.com> - 3.4-4
changelog:
  - Cover the gaps in annotation coverage for assembler sources
  - Add .hmac checksums for FIPS mode integrity checking


author: Daiki Ueno <dueno@redhat.com> - 3.4.1-5
changelog:
  - Backport powerpc64 optimization patches from upstream (#1855228)
    Patch from Christopher M. Riedl.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.52.20-4
changelog:
  - Python 2 binary package renamed to python2-newt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-8
changelog:
  - rename newt-python3 subpackage to python3-newt
  - build python3 subpackage unconditionally
  - don't use unversioned python_sitearch macro
  - drop static subpackage
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - fix description of python2-newt


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-10
changelog:
  - move snack provides to python3-newt subpackage (#1640153)
  - fix radio button selection check in snack (#1714517)


author: Steve Dickson <steved@redhat.com> 0.3.5-2
changelog:
  - nfs4_getfacl: Add new option -c/--omit-header (bz 1698281)
  - nfs4_setfacl: Skip comment field while reading ACE(s) (bz 1687299)


author: Phil Sutter <psutter@redhat.com> [0.9.3-21.el8]
changelog:
  - tests: shell: Fix bogus testsuite failure with 100Hz (Phil Sutter) [1919203]
  - doc: nft.8: Extend monitor description by trace (Phil Sutter) [1820365]
  - include: missing sctp_chunk.h in Makefile.am (Phil Sutter) [1979334]
  - exthdr: Implement SCTP Chunk matching (Phil Sutter) [1979334]
  - scanner: sctp: Move to own scope (Phil Sutter) [1979334]
  - scanner: introduce start condition stack (Phil Sutter) [1979334]
  - json: Simplify non-tcpopt exthdr printing a bit (Phil Sutter) [1979334]
  - json: tcp: add raw tcp option match support (Phil Sutter) [1979334]
  - tcp: add raw tcp option match support (Phil Sutter) [1979334]
  - tcpopt: allow to check for presence of any tcp option (Phil Sutter) [1979334]
  - tcpopt: split tcpopt_hdr_fields into per-option enum (Phil Sutter) [1979334]
  - tcpopt: rename noop to nop (Phil Sutter) [1979334]
  - tcpopts: clean up parser -> tcpopt.c plumbing (Phil Sutter) [1979334]
  - parser: merge sack-perm/sack-permitted and maxseg/mss (Phil Sutter) [1979334]
  - tests/py: Move tcpopt.t to any/ directory (Phil Sutter) [1979334]


author: Phil Sutter <psutter@redhat.com> [0.9.3-22.el8]
changelog:
  - json: Drop pointless assignment in exthdr_expr_json() (Phil Sutter) [1999059]
  - parser_json: Fix for memleak in tcp option error path (Phil Sutter) [1999059]
  - parser_bison: Fix for implicit declaration of isalnum (Phil Sutter) [1999059]
  - parser_json: Fix error reporting for invalid syntax (Phil Sutter) [1994141]


author: Phil Sutter <psutter@redhat.com> [0.9.3-23.el8]
changelog:
  - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set") (Phil Sutter) [1908127]
  - segtree: Fix segfault when restoring a huge interval set (Phil Sutter) [1908127]


author: Phil Sutter <psutter@redhat.com> [0.9.3-24.el8]
changelog:
  - tests: shell: better parameters for the interval stack overflow test (Phil Sutter) [1908127]
  - tests: shell: $NFT needs to be invoked unquoted (Phil Sutter) [1908127]


author: Phil Sutter <psutter@redhat.com> [0.9.3-25.el8]
changelog:
  - mnl: do not build nftnl_set element list (Phil Sutter) [2047821]
  - tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773]
  - evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773]
  - evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594]
  - src: support for restoring element counters (Phil Sutter) [2039594]
  - netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594]


author: Phil Sutter <psutter@redhat.com> [0.9.3-26.el8]
changelog:
  - libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287]
  - src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287]
  - src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287]
  - rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287]
  - rule: memleak in __do_add_setelems() (Phil Sutter) [2073287]
  - tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924]
  - mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924]


author: Phil Sutter <psutter@redhat.com> [1.0.4-1.el8]
changelog:
  - Synchronize patch level with nftables-1.0.4-10.el9 (Phil Sutter) [2211076]
  - Rebase onto version 1.0.4 (Phil Sutter) [2211076]


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el8]
changelog:
  - Add expected error records for testsuite runs (Phil Sutter) [2211076]
  - tests: monitor: Summarize failures per test case (Phil Sutter) [2211076]


author: Phil Sutter <psutter@redhat.com> [1.0.4-3.el8]
changelog:
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5160]


author: Kevin Fenzi <kevin@scrye.com> 0-0.3.20140118git
changelog:
  - Update to 20140118 snapshot
  - Fixed License tag to be correct
  - Fixed changelog
  - nft scripts now use full path for nft
  - Fixed man page building
  - Dropped unneeded rm in install
  - Patched build to not be silent.


author: Phil Sutter - 1:0.9.0-4
changelog:
  - Add fixes for covscan report
  - Fix for ECN keyword in LHS of relational
  - Update meta pkt_type value description
  - Fix for segfault with JSON output if xt expression is present
  - Add missing nft suffix to files included from /etc/sysconfig/nftables.conf
  - Use native JSON API in nft monitor


author: Phil Sutter <psutter@redhat.com> - 1:0.9.0-9
changelog:
  - Allow variables in jump statement
  - Make example configs readable only by root
  - Document nft list parameters
  - Document vmap statement
  - Install netdev-ingress.nft sample config in the right spot
  - Backport upstream fixes since last release


author: Phil Sutter <psutter@redhat.com> [0.9.2-1.el8]
changelog:
  - src: obj: fix memleak in handle_free() (Phil Sutter) [1643192]
  - libnftables: memleak when list of commands is empty (Phil Sutter) [1643192]
  - mnl: do not cache sender buffer size (Phil Sutter) [1643192]
  - src: meter: avoid double-space in list ruleset output (Phil Sutter) [1643192]
  - src: parser_json: fix crash while restoring secmark object (Phil Sutter) [1643192]
  - nftables: don't crash in 'list ruleset' if policy is not set (Phil Sutter) [1643192]
  - json: tests: fix typo in ct expectation json test (Phil Sutter) [1643192]
  - parser_bison: Fix 'exists' keyword on Big Endian (Phil Sutter) [1643192]
  - json: fix type mismatch on "ct expect" json exporting (Phil Sutter) [1643192]
  - libnftables: use-after-free in exit path (Phil Sutter) [1643192]
  - netlink_delinearize: fix wrong conversion to "list" in ct mark (Phil Sutter) [1643192]
  - mnl: fix --echo buffer size again (Phil Sutter) [1643192]
  - parser_json: fix crash on insert rule to bad references (Phil Sutter) [1643192]
  - evaluate: flag fwd and queue statements as terminal (Phil Sutter) [1643192]
  - tests: shell: check that rule add with index works with echo (Phil Sutter) [1643192]
  - cache: fix --echo with index/position (Phil Sutter) [1643192]
  - src: secmark: fix brace indentation and missing quotes in selctx output (Phil Sutter) [1643192]
  - Add python3-nftables sub-package (Phil Sutter) [1643192]
  - Rebase onto upstream version 0.9.2 (Phil Sutter) [1643192]


author: Phil Sutter <psutter@redhat.com> [0.9.2-2.el8]
changelog:
  - rule: Fix for single line ct timeout printing (Phil Sutter) [1643192]
  - tests/monitor: Fix for changed ct timeout format (Phil Sutter) [1643192]
  - monitor: Add missing newline to error message (Phil Sutter) [1643192]
  - src: restore --echo with anonymous sets (Phil Sutter) [1643192]


author: Phil Sutter <psutter@redhat.com> [0.9.2-4.el8]
changelog:
  - tproxy: Add missing error checking when parsing from netlink (Phil Sutter) [1643192]
  - parser_json: Fix checking of parse_policy() return code (Phil Sutter) [1643192]


author: Phil Sutter <psutter@redhat.com> [0.9.3-6.el8]
changelog:
  - monitor: Do not decompose non-anonymous sets (Phil Sutter) [1774742]
  - main: restore --debug (Phil Sutter) [1778883]
  - main: enforce options before commands (Phil Sutter) [1778883]


author: Phil Sutter <psutter@redhat.com> [0.9.3-8.el8]
changelog:
  - cache: Fix for doubled output after reset command (Phil Sutter) [1790793]
  - tests: shell: Search diff tool once and for all (Phil Sutter) [1790793]
  - xfrm: spi is big-endian (Phil Sutter) [1790963]


author: Phil Sutter <psutter@redhat.com> [0.9.3-9.el8]
changelog:
  - netlink: Avoid potential NULL-pointer deref in netlink_gen_payload_stmt() (Phil Sutter) [1793030]
  - netlink: Fix leaks in netlink_parse_cmp() (Phil Sutter) [1793030]
  - netlink: Fix leak in unterminated string deserializer (Phil Sutter) [1793030]


author: Phil Sutter <psutter@redhat.com> [0.9.3-10.el8]
changelog:
  - scanner: Extend asteriskstring definition (Phil Sutter) [1763652]
  - doc: nft.8: Mention wildcard interface matching (Phil Sutter) [1763652]
  - tests: py: Support testing host binaries (Phil Sutter) [1754047]
  - tests: monitor: Support testing host's nft binary (Phil Sutter) [1754047]
  - tests: monitor: Support running individual test cases (Phil Sutter) [1754047]
  - tests: json_echo: Support testing host binaries (Phil Sutter) [1754047]
  - tests: json_echo: Fix for Python3 (Phil Sutter) [1754047]


author: Phil Sutter <psutter@redhat.com> [0.9.3-11.el8]
changelog:
  - Package requires libnftnl-1.1.5-3 (Phil Sutter) [1795224]
  - src: Add support for concatenated set ranges (Phil Sutter) [1795224]
  - src: Add support for NFTNL_SET_DESC_CONCAT (Phil Sutter) [1795224]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795224]
  - parser: add a helper for concat expression handling (Phil Sutter) [1795224]


author: Phil Sutter <psutter@redhat.com> [0.9.3-14.el8]
changelog:
  - JSON: Improve performance of json_events_cb() (Phil Sutter) [1835300]
  - doc: Document notrack statement (Phil Sutter) [1841292]


author: Phil Sutter <psutter@redhat.com> [0.9.3-15.el8]
changelog:
  - segtree: Fix get element command with prefixes (Phil Sutter) [1832235]
  - tests: 0034get_element_0: do not discard stderr (Phil Sutter) [1832235]
  - segtree: Merge get_set_interval_find() and get_set_interval_end() (Phil Sutter) [1832235]
  - segtree: Use expr_clone in get_set_interval_*() (Phil Sutter) [1832235]
  - segtree: Fix missing expires value in prefixes (Phil Sutter) [1832235]


author: Phil Sutter <psutter@redhat.com> [0.9.3-16.el8]
changelog:
  - src: Set NFT_SET_CONCAT flag for sets with concatenated ranges (Phil Sutter) [1820684]
  - include: Resync nf_tables.h cache copy (Phil Sutter) [1820684]


author: Phil Sutter <psutter@redhat.com> [0.9.3-17.el8]
changelog:
  - json: don't leave dangling pointers on hlist (Phil Sutter) [1900565]
  - json: Fix seqnum_to_json() functionality (Phil Sutter) [1900565]
  - json: echo: Speedup seqnum_to_json() (Phil Sutter) [1900565]
  - proto: Fix ARP header field ordering (Phil Sutter) [1896334]
  - proto: add sctp crc32 checksum fixup (Phil Sutter) [1895804]
  - mergesort: unbreak listing with binops (Phil Sutter) [1891790]
  - evaluate: missing datatype definition in implicit_set_declaration() (Phil Sutter) [1877022]
  - evaluate: Perform set evaluation on implicitly declared (anonymous) sets (Phil Sutter) [1877022]
  - src: store expr, not dtype to track data in sets (Phil Sutter) [1877022]


author: Phil Sutter <psutter@redhat.com> [0.9.3-19.el8]
changelog:
  - evaluate: Reject quoted strings containing only wildcard (Phil Sutter) [1818117]
  - tests: monitor: use correct $nft value in EXIT trap (Phil Sutter) [1919203]
  - monitor: Fix for use after free when printing map elements (Phil Sutter) [1919203]
  - tests: Disable tests known to fail on RHEL8 (Phil Sutter) [1919203]


author: Phil Sutter <psutter@redhat.com> [0.9.3-20.el8]
changelog:
  - src: Optimize prefix matches on byte-boundaries (Phil Sutter) [1934926]
  - src: Support odd-sized payload matches (Phil Sutter) [1934926]
  - spec: Add an rpminspect.yaml file to steer rpminspect (Phil Sutter) [1962184]
  - spec: Explicitly state dist string in Release tag (Phil Sutter) [1962184]


author: Phil Sutter <psutter@redhat.com> [1.0.4-5.el8]
changelog:
  - xt: Fix fallback printing for extensions matching keywords (Phil Sutter) [RHEL-5806]
  - xt: Fall back to generic printing from translation (Phil Sutter) [RHEL-5806]
  - xt: Rewrite unsupported compat expression dumping (Phil Sutter) [RHEL-5806]
  - xt: Purify enum nft_xt_type (Phil Sutter) [RHEL-5806]
  - xt: Delay libxtables access until translation (Phil Sutter) [RHEL-5806]
  - Warn for tables with compat expressions in rules (Phil Sutter) [RHEL-5806]


author: Filip Januš <fjanus@redhat.com> - 3.1-4
changelog:
  - addiing: recommending to install 32 bit-version if 32 bit glibc is installed
  - resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1803161


author: Filip Januš <fjanus@redhat.com> - 3.1-7
changelog:
  - improve recommandation of 32 bit-version
  - resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1803161


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - pkcsstats: Fix handling of user name
  - p11sak: Fix user confirmation prompt behavior when stdin is closed
  Related: #2159697


author: Than Ngo <than@redhat.com> - 3.21.0-7
changelog:
  - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222594, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22791


author: Simon Pichugin <spichugi@redhat.com> - 2.4.46-19
changelog:
  - Bump version to 2.4.46-19
  - Resolves: RHEL-34283 - openldap: null pointer dereference in ber_memalloc_x function


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/_libdir instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    evolution_connector_prefix)
  - provide openldap-evolution-devel = version-release in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on x86 boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under _libdir/tls


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add _sysconfdir/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of _sbindir/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Thomas Woerner <twoerner@redhat.com> 2.3.30-1.1
changelog:
  - tcp_wrappers has a new devel and libs sub package, therefore changing build
    requirement for tcp_wrappers to tcp_wrappers-devel


author: Jay Fenlason <fenlason<redhat.com> 2.3.34-1
changelog:
  - New upstream release
  - Upgrade the scripts for migrating the database so that they might
    actually work.
  - change bind-libbind-devel to bind-devel in BuildPreReq


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-2
changelog:
  - slapadd during package update is now quiet (bz#224581)
  - use _localstatedir instead of var/ during build (bz#220970)
  - bind-libbind-devel removed from BuildRequires (bz#216851)
  - slaptest is now quiet during service ldap start, if
    there is no error/warning (bz#143697)
  - libldap_r.so now links with pthread (bz#198226)
  - do not strip binaries to produce correct .debuginfo packages
    (bz#152516)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-3
changelog:
  - do not create script in /tmp on startup (bz#188298)
  - add compat-slapcat to openldap-compat (bz#179378)
  - do not import ddp services with migrate_services.pl
    (bz#201183)
  - sort the hosts by adders, preventing duplicities
    in migrate*nis*.pl (bz#201540)
  - start slupd for each replicated database (bz#210155)
  - add ldconfig to devel post/postun (bz#240253)
  - include misc.schema in default slapd.conf (bz#147805)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-4
changelog:
  - Fix initscript return codes (#242667)
  - Provide overlays (as modules; #246036, #245896)
  - Add available modules to config file


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-6
changelog:
  - fix compat-slapcat compilation. Now it can be found in
    /usr/lib/compat-openldap/slapcat, because the tool checks argv[0]
    (#246581)


author: Jan Safranek <jsafranek@redhat.com> 2.3.37-2
changelog:
  - do not use specific automake and autoconf
  - do not distinguish between NPTL and non-NPTL platforms, we have NPTL
    everywhere
  - db-4.6.18 integrated
  - updated openldap-servers License: field to reference BDB license


author: Jan Safranek <jsafranek@redhat.com> 2.3.38-2
changelog:
  - skeleton /etc/sysconfig/ldap added
  - new SLAPD_LDAP option to turn off listening on ldap:/// (#292591)
  - fixed checking of SSL (#292611)
  - fixed upgrade with empty database


author: Jan Safranek <jsafranek@redhat.com> 2.4.7-4
changelog:
  - fixed rpmlint warnings and errors
    - /etc/openldap/schema/README moved to /usr/share/doc/openldap


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-3
changelog:
  - reworked the upgrade logic, slapcat/slapadd of the whole database
    is needed only if minor version changes (2.3.x -> 2.4.y)
  - do not try to save database in LDIF format, if openldap-servers package
    is  being removed (it's up to the admin to do so manually)


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-4
changelog:
  - bdb upgraded to 4.6.21
  - reworked upgrade logic again to run db_upgrade when bdb version
    changes


author: Jan Safranek <jsafranek@redhat.com> 2.4.11-3
changelog:
  - add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins
    to set non-default slapd shutdown timeout
  - add checkpoint to default slapd.conf file (#458679)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.15-3
changelog:
  - extended previous patch (#481310) to remove options cfMP
    from some client tools
  - correction of patch setugid (#494330)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.16-1
changelog:
  - rebase of openldap to 2.4.16
  - fixed minor issue in spec file (output looking interactive
    when installing servers)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-2
changelog:
  - changed configuration approach. Instead od slapd.conf slapd
    is using slapd.d directory now
  - fix of some issues caused by renaming of init script
  - fix of buffer overflow issue in ldif.c pointed out by new glibc


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-4
changelog:
  - updated smbk5pwd patch to be linked with libldap (#526500)
  - the last buffer overflow patch replaced with the one from upstream
  - added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
    to files owned by openldap-servers


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-2
changelog:
  - fixed tls connection accepting when TLSVerifyClient = allow
  - /etc/openldap/ldap.conf removed from files owned by openldap-servers
  - minor changes in spec file to supress warnings
  - some changes in init script, so it would be possible to use it when
    using old configuration style


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.22-1
changelog:
  - rebased to 2.4.22 (mostly bugfixes, added back-ldif, back-null testing support)
  - due to some possible issues pointed out in last update testing phase, I'm
    pulling back the last change (slapd can't be moved since it depends on /usr
    possibly mounted from network)


author: Rich Megginson <rmeggins@redhat.com> - 2.4.22-3
changelog:
  - added ldif.h to the public api in the devel package
  - added -lldif to the public api
  - added HAVE_MOZNSS and other flags to use Mozilla NSS for crypto


author: Jan Vcelak <jvcelak@redhat.com> - 2.4.22-6
changelog:
  - CVE-2010-0211 openldap: modrdn processing uninitialized pointer free (#605448)
  - CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference (#605452)
  - obsolete configuration file moved to /usr/share/openldap-servers (#612602)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.22-7
changelog:
  - Mozilla NSS - delay token auth until needed (#616552)
  - Mozilla NSS - support use of self signed CA certs as server certs (#614545)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-1
changelog:
  - rebase to 2.4.23
  - embeded db4 library removed
  - removed bogus links in "SEE ALSO" in several man-pages (#624616)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-2
changelog:
  - fix possible infinite loop when checking permissions of TLS files (#641946)
  - removed outdated autofs.schema (#643045)
  - removed outdated README.upgrade
  - removed relics of migrationtools


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-3
changelog:
  - add support for multiple prefixed Mozilla NSS database files in TLS_CACERTDIR
  - reject non-file keyfiles in TLS_CACERTDIR (#652315)
  - TLS_CACERTDIR precedence over TLS_CACERT (#652304)
  - accept only files in hash.0 format in TLS_CACERTDIR (#650288)
  - improve SSL/TLS trace messages (#652818)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-4
changelog:
  - Mozilla NSS - implement full non-blocking semantics
    ldapsearch -Z hangs server if starttls fails (#652822)
  - updated list of all overlays in slapd.conf (#655899)
  - fix database upgrade process (#656257)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-5
changelog:
  - initscript: slaptest with '-u' to skip database opening (#667768)
  - removed slurpd options from sysconfig/ldap
  - fix: verification of self issued certificates (#657984)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-6
changelog:
  - fix: some server certificates refused with inadequate type error (#668899)
  - fix: default encryption strength dropped in switch to using NSS (#669446)
  - systemd compatibility: add configuration file (#656647, #668223)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: openldap can't use TLS after a fork() (#636956)
  - fix: openldap-server upgrade gets stuck when the database is damaged (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.24-2
changelog:
  - new: system resource limiting for slapd using ulimit
  - fix update: openldap can't use TLS after a fork() (#636956)
  - fix: possible null pointer dereference in NSS implementation
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.25-1
changelog:
  - rebase to new upstream release
  - change default database type from BDB to HDB
  - enable ldapi:/// interface by default
  - set cn=config management ACLs for root user, SASL external schema (#712495)
  - fix: server scriptlets require initscripts package (#716857)
  - fix: connection fails if TLS_CACERTDIR doesn't exist but TLS_REQCERT
    is set to 'never' (#716854)
  - fix: segmentation fault caused by double-free in ldapexop (#699683)
  - fix: segmentation fault of client tool when input line in LDIF file
    is splitted but indented incorrectly (#716855)
  - fix: segmentation fault of client tool when LDIF input file is not terminated
    by a new line character (#716858)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-2
changelog:
  - security hardening: library needs partial RELRO support added (#733071)
  - fix: NSS_Init* functions are not thread safe (#731112)
  - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#725819)
  - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#725818)
  - fix: conversion of constraint overlay settings to cn=config is incorrect (#733067)
  - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#733069)
  - manpage fix: errors in manual page slapo-unique (#733070)
  - fix: matching wildcard hostnames in certificate Subject field does not work (#733073)
  - new feature: honor priority/weight with ldap_domain2hostlist (#733078)
  - manpage fix: wrong ldap_sync_destroy() prototype in ldap_sync(3) manpage (#717722)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-3
changelog:
  - fix: SSL_ForceHandshake function is not thread safe (#701678)
  - fix: allow unsetting of tls_* syncrepl options (#734187)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-5
changelog:
  - rebuild: openldap does not work after libdb rebase (#743824)
  - regression fix: openldap built without tcp_wrappers (#743213)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-6
changelog:
  - package cleanup:
    + hardened build: switch from LDFLAGS to RPM macros
    + remove old provides and obsoletes
    + add new slapd maintainance scripts
    + drop defattr macros, clean up permissions in specfile
    + fix rpmlint warnings: macros in comments/changelog
    + fix rpmlint warnings: non UTF-8 documentation
    + rename environment file to be more consistent (ldap -> slapd)
  - replace sysv initscript with systemd service file (#
  - new format of environment file due to switch to systemd
    (automatic conversion is performed)
  - patch OpenLDAP to skip empty command line arguments
    (arguments expansion in systemd works different than in shell)
  - CVE-2011-4079: one-byte buffer overflow in slapd (#749324)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-1
changelog:
  - new upstream release
    + server: support for delta-syncrepl in multi master replication
    + server: add experimental backend - MDB
    + server: dynamic configuration for passwd, perl, shell, sock, and sql backends
    + server: support passwords in APR1
    + library: support for Wahl (draft)
    + a lot of bugfixes
  - remove patches which were merged upstream
  - compile backends as modules (except BDB, HDB, and monitor)
  - reload systemd daemon after installation


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-3
changelog:
  - fix: replication (syncrepl) with TLS causes segfault (#783431)
  - fix: slapd segfaults when PEM certificate is used and key is not set (#772890)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-1
changelog:
  - new upstream release
    + MozNSS fixes
    + connection handling fixes
    + server: buxfixes in mdb backend
    + server: buxfixes in overlays (syncrepl, meta, monitor, perl, sql, dds, rwm)
  - openldap-servers now provide ldib2ldbm (#437104)
  - certificates management improvements
    + create empty Mozilla NSS certificate database during installation
    + enable builtin Root CA in generated database (#789088)
    + generate server certificate using Mozilla NSS tools instead of OpenSSL tools
    + fix: correct path to check-config.sh in service file (Jan Synáček <jsynacek@redhat.com>)
  - temporarily disable certificates checking in check-config.sh script
  - fix: check-config.sh get stuck when executing command as a ldap user


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-2
changelog:
  - fix update: provide ldif2ldbm, not ldib2ldbm (#437104)
  - Jan Synáček <jsynacek@redhat.com>:
    + unify systemctl binary paths throughout the specfile and make them usrmove compliant
    + make path to chkconfig binary usrmove compliant


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-3
changelog:
  - fix: ldap_result does not succeed for sssd (#771484)
  - Jan Synáček <jsynacek@redhat.com>:
    + fix: count constraint broken when using multiple modifications (#795766)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-4
changelog:
  - fix: missing options in manual pages of client tools (#796232)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732915)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.30-1
changelog:
  - new upstream release
    + server: fixes in mdb backend
    + server: fixes in manual pages
    + server: fixes in syncprov, syncrepl, and pcache
  - removed patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-1
changelog:
  - new upstream release
    + library: IPv6 url detection
    + library: rebinding to failed connections
    + server: various fixes in mdb backend
    + server: various fixes in replication
    + server: various fixes in overlays and minor backends
    + documentation fixes
  - remove patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-2
changelog:
  - fix: nss-tools package is required by the base package, not the server subpackage
  - fix: MozNSS CA certdir does not work together with PEM CA cert file (#819536)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-3
changelog:
  - update fix: count constraint broken when using multiple modifications (#795766)
  - fix: invalid order of TLS shutdown operations (#808464)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#810462)
  - fix: reading pin from file can make all TLS connections hang (#829317)
  - CVE-2012-2668: cipher suite selection by name can be ignored (#825875)
  - fix: slapd fails to start on reboot (#829272)
  - fix: default cipher suite is always selected (#828790)
  - fix: less influence between individual TLS contexts:
    - replication with TLS does not work (#795763)
    - possibly others


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-4
changelog:
  - modify the package build process
    + fix autoconfig files to detect Mozilla NSS library using pkg-config
    + remove compiler flags which are not needed currently
    + build server, client and library together
    + avoid stray dependencies by using --as-needed linker flag
    + enable SLAPI interface in slapd


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-5
changelog:
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - fix: smbk5pwd module computes invalid LM hashes (#841560)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-1
changelog:
  - new upstream release
    + library: double free, SASL handling
    + tools: read SASL_NOCANON from config file
    + slapd: config index renumbering, duplicate error response
    + backends: various fixes in mdb, bdb/hdb, ldap
    + accesslog, syncprov: fix memory leaks in with replication
    + sha2: portability, thread safety, support SSHA256,384,512
    + documentation fixes


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-2
changelog:
  - enhancement: TLS, prefer private keys from authenticated slots
  - enhancement: TLS, allow certificate specification including token name
  - resolve TLS failures in replication in 389 Directory Server


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-3
changelog:
  - fix: some TLS ciphers cannot be enabled (#852338)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#852476)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#852786)
  - fix: MozNSS certificate database in SQL format cannot be used (#857373)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#857455)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.33-1
changelog:
  - new upstream release:
    + slapd: ACLs, syncrepl
    + backends: locking and memory management in MDB
    + manpages: slapo-refint
  - patch update: MozNSS certificate database in SQL format cannot be used (#860317)
  - fix: slapd.service should not use /tmp (#859019)


author: Jan Vcelak <jvcelak@fedoraproject.org> 2.4.34-1
changelog:
  - new upstream release (#917603)
  - fix: slapcat segfaults if cn=config.ldif not present (#872784)
  - use systemd-rpm macros in spec file (#850247)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-1
changelog:
  - enable perl backend (#820547)
  - package ppolicy-check-password (#829749)
  - add perl specific BuildRequires
  - fix bogus dates


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-2
changelog:
  - fix: syncrepl push DELETE operation does not recover (#920482)
  - run autoreconf every build, drop autoreconf patch (#926280)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-1
changelog:
  - new upstream release (#947235)
  - fix: slapd.service should ensure that network is up before starting (#946921)
  - fix: NSS related resource leak (#929357)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-3
changelog:
  - fix: minor documentation fixes
  - set SASL_NOCANON to on by default (#949864)
  - remove trailing spaces


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-4
changelog:
  - do not needlessly run ldconfig after installing openldap-devel
  - fix: LDAPI with GSSAPI does not work if SASL_NOCANON=on (#960222)
  - fix: lt_dlopen() with back_perl (#960048)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.37-1
changelog:
  - new upstream release (#1023916)
  - fix: missing a linefeed at the end of file /etc/openldap/ldap.conf (#1019836)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-3
changelog:
  - remove redundant sysconfig-related stuff
  - add documentation reference to service file
  - alias slapd.service as openldap.service


author: Jan Synáček <jsynacek@redhat.com> - 2.4.40-5
changelog:
  - harden the build
  - improve check_password
  - provide an unversioned symlink to check_password.so.1.1


author: Jan Synáček <jsynacek@redhat.com> - 2.4.40-6
changelog:
  - remove openldap-fedora-systemd.patch
  - remove openldap-ldaprc-currentdir.patch
  - remove openldap-userconfig-setgid.patch
  - remove openldap-syncrepl-unset-tls-options.patch
  - remove unneeded configure flags, disable sql backend and aci
  - make mdb default after a new installation
  - remove pid file and args file
  - renumber patches and sources


author: Jan Synáček <jsynacek@redhat.com> - 2.4.40-7
changelog:
  - remove tmpfiles config since it's no longer needed
  - fix invalid ldif
  - simplify checking for missing server configuration


author: Matus Honek <mhonek@redhat.com> - 2.4.44-3
changelog:
  - fix: Setting olcTLSProtocolMin does not change supported protocols (#1375432)
  - fix: slapd should start after network-online.service (#1336487)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-9
changelog:
  - NSS: Enhance OpenLDAP to support TLSv1.3 protocol with NSS (#1435692)
  - NSS: Rearrange ciphers-, parsing-, and protocol-related patches (#1435692)


author: Matus Honek <mhonek@redhat.com> - 2.4.45-1
changelog:
  - Rebase to version 2.4.45 (#1458081)
    * fixes CVE-2017-9287 (#1456712, #1456713)
  - Update the 'sources' file with new SHA512 hashes


author: Matus Honek <mhonek@redhat.com> - 2.4.45-5
changelog:
  - Fix issues in MozNSS compatibility layer (#1400570)
    + Force write file with fsync to avoid race conditions
    + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
    + Allow missing cert and key which is a valid usecase
    + Create extraction folder only in /tmp to simplify selinux rules
    + Fix Covscan issues


author: Matus Honek <mhonek@redhat.com> - 2.4.45-7
changelog:
  - MozNSS Compat. Layer fixes (#1400570)
    - fix incorrect parsing of CACertDir (orig. #1533955)
    - fix PIN disclaimer not always shown (orig. #1516409)
    - fix recursive directory deletion (orig. #1516409)
    - Ensure consistency of a PEM dir before usage (orig. #1516409)
      + Warn just before use of a PIN about key file extraction
    - Enable usage of NSS DB with PEM cert/key (orig. #1525485)
      + Fix a possible invalid dereference (covscan)


author: Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.4.45-9
changelog:
  - Escape macros in %changelog
  - Disable TLSMC in F29+
  - Remove obsolete Group tag
  - Don't call ldconfig in servers subpackage
  - Switch to %ldconfig_scriptlets
  - Remove unneeded Requires(post): systemd-sysv, chkconfig
  - Switch to %systemd_requires
  - Change BuildRequires: systemd-units to systemd


author: Matus Honek <mhonek@redhat.com> - 2.4.45-12
changelog:
  - MozNSS Compat. Layer: fix: libldap tlsmc continues even after it fails to extract CA certificates (#1550110)


author: Matus Honek <mhonek@redhat.com> - 2.4.45-13
changelog:
  - fix: openldap does not use Fedora build flags
    + makes use of redhat-rpm-config package
  - Drop superfluous back-sql linking patch


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.4.46-2
changelog:
  - Perl 5.28 rebuild
  - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1564161)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-3
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1598103)
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-6
changelog:
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
  - Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)


author: Simon Pichugin <spichugi@redhat.com> - 2.4.46-21
changelog:
  - Bump version to 2.4.46-21
  - Resolves: RHEL-75823 - Fix double file close when first TLS connection fails


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-6
changelog:
  - Add support for Gemalto IDPrime smart cards (#1657970)
  - Fix 2k RSA key operations with Coolkey (#1766712)


author: Jakub Jelen <jjelen@redhat.com> - 0.20.0-3
changelog:
  - Support PIN change for HID Alt tokens (#1830901)
  - Fix CVE-2020-26570, CVE-2020-26571 and CVE-2020-26572
  - Fix right padding of token labels of some cards (#1877973)


author: Dmitry Belyavskiy - 8.0p1-17
changelog:
  - Fix parsing of IPv6 IPs in sftp client (#2151334)
  - Avoid ssh banner one-byte overflow (#2138344)
  - Avoid crash of sshd when Include folder does not exist (#2133087)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-20
changelog:
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-1684
  - Add comment to OpenSSH server config about FIPS-incompatible key
    Resolves: RHEL-5221
  - Avoid killing all processes on system in case of race condition
    Resolves: RHEL-11548
  - Avoid sshd_config 256K limit
    Resolves: RHEL-5279
  - Using DigestSign/DigestVerify functions for better FIPS compatibility
    Resolves: RHEL-5217
  - Fix GSS KEX causing ssh failures when connecting to WinSSHD
    Resolves: RHEL-5321


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-22
changelog:
  - Fix Terrapin attack
    Resolves: RHEL-19308
  - Forbid shell metasymbols in username/hostname
    Resolves: RHEL-19788


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 8.0p1-25.0.1
changelog:
  - seccomp: Allow check_nanosleep to better compatibility for both glibc2.28 and glibc2.32
  - Support loongarch64 seccomp_filter sandbox (xuezhixin@uniontech.com)
  - another case where a utimes() failure could make scp send (jiang.yong5@zte.com.cn)
  - add sw patch (nijie@wxiat.com)
  - adapt macro `seccomp_audit_arch` to kernel-headers. (Weisson@linux.alibaba.com)


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5
changelog:
  - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#2005402


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067145


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
changelog:
  - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
    Resolves: CVE-2022-2097
  - Update expired certificates used in the testsuite
    Resolves: rhbz#2100554
  - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
    Resolves: rhbz#2090371
  - Fix CVE-2022-2068: the c_rehash script allows command injection
    Resolves: rhbz#2098278


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9
changelog:
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-10
changelog:
  - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters
    Resolves: RHEL-14243
  - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value
    Resolves: RHEL-14237


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-11
changelog:
  - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking
    excessively long X9.42 DH keys or parameters may be very slow
    Resolves: RHEL-16536


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-12
changelog:
  - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series
    (a proper fix for CVE-2020-25659)
    Resolves: RHEL-17694


author: Liwei Ge <geliwei@openanolis.org> - 1:1.1.1k-14.0.1
changelog:
  - Support loongarch64
  - Support SM2 distid for sign and verify (tianjia.zhang@linux.alibaba.com)
  - add sw patch (nijie@wxiat.com)
  - change sw arch (nijie@wxiat.com)
  - add sw arch in opensslconf.h (nijie@wxiat.com)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.8-1
changelog:
  - Update to 0.4.8-1
  - RSA key generation on the token
  - RSA-OAEP and RSA-PKCS encryption support
  - RSA-PSS signature support
  - Support for OpenSSL 1.1.1 beta
  - Removed support for OpenSSL 0.9.8
  - Various bug fixes and enhancements


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.8-2
changelog:
  - Require OpenSSL >= 1.0.2
  - Fixed missing declaration of ERR_get_CKR_code()
  - Add support to use EC keys and tests (#1625338)
  - Exposed check_fork() API
  - Fixed memory leak of RSA objects in pkcs11_store_key()
  - Updated OpenSSL license in eng_front.c
  - Fixed build for old C dialects
  - Allow engine to use private key without PIN
  - Require DEBUG to be defined to print debug messages
  - Changed package description


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.10-1
changelog:
  - Update to 0.4.10 (#1745082)
  - Add BuildRequires for OpenSSL >= 1.0.2, required for testing
  - Print tests logs if failed during build
  - Small bug fixes such as removal of unused variable
  - Search objects in all matching tokens (#1705505)


author: Neal Gompa <ngompa13@gmail.com> - 1.74-1
changelog:
  - Update to upstream version 1.74
  - Drop merged patches
  - Rediff remaining patches
  - Move newns to /usr/libexec/os-prober (debuginfo generation works)
  - Mark copyright file as license file


author: Peter Jones <pjones@redhat.com> - 1.74-7
changelog:
  - Make gcc use -Wl,-z,now -Wl,-z,relro -pie.  Dunno why the default didn't
    pick this up.
    Resolves: rhbz#1624158


author: Daiki Ueno <dueno@redhat.com> - 0.23.21-4
changelog:
  - Fix realloc usage on proxy cleanup (#1894979)
  - Make 'trust anchor --store' preserve all attributes from .p11-kit files


author: Daiki Ueno <dueno@redhat.com> - 0.23.22-1
changelog:
  - Rebase to 0.23.22 to fix memory safety issues (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363)
  - Preserve DT_NEEDED information from the previous version, flagged by rpmdiff
  - Add xsltproc to BR


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-25
changelog:
  - pam_motd: avoid unnecessary logging. Resolves: #2091062
  - pam_lastlog: check localtime_r() return value. Resolves: #2012871
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2062512
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2082442


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-33
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21242


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-35
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62877
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23018
  - libpam: support long lines in service files. Resolves: RHEL-5051


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - changed /dev/cdrom default user permissions back to 0600 in console.perms
    because some cdrom players open O_RDWR.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed glob/regexp confusion in pam_console, added kbd and fixed fb devices
  - added pam_xauth module


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - many bug fixes in pam_xauth
  - pam_console can now handle broken applications that do not set
    the PAM_TTY item.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.72
  - fix pam_unix password-changing bug
  - fix pam_unix's cracklib support
  - change package URL


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Add a patch to accept 'pts/N' in /etc/securetty as a match for tty '5'
    (which is what other pieces of the system think it is). Fixes bug #7641.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add new pam_stack module.
  - Install pwdb_chkpwd and unix_chkpwd as the current user for non-root builds


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add system-auth control file
  - let gethostname() call in pam_access.c be implicitly declared to avoid
    conflicting types if unistd.c declares it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add account management wrappers for pam_listfile, pam_nologin, pam_securetty,
    pam_shells, and pam_wheel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - symlink libpam.so to libpam.so.%{version}, and likewise for libpam_misc
  - reverse order of checks in _unix_getpwnam for pam_unix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix installation of pam_xauth man pages (#12417)
  - forcibly strip helpers (#12430)
  - try to make pam_console a little more discriminating


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_console's extra checks disableable
  - simplify extra check to just check if the device owner is root
  - add a debug log when pam_stack comes across a NULL item
  - have pam_stack hand items up to the parent from the child


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - need to make pam_console's checking a little stronger
  - only pass data up from pam_stack if the parent didn't already define it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a broken_shadow option to pam_unix
  - add all module README files to the documentation list (#16456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move pam_filter modules to /lib/security/pam_filter (#16111)
  - add pam_tally's application to allow counts to be reset (#16456)
  - move README files to the txts subdirectory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - give users /dev/cdrom* instead of /dev/cdrom in console.perms (#16768)
  - add nvidia control files to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix problems when looking for headers in /usr/include (#17236)
  - clean up a couple of compile warnings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify the files list to make sure #16456 stays fixed
  - make pam_stack track PAM_AUTHTOK and PAM_OLDAUTHTOK items
  - add pam_chroot module
  - self-hosting fixes from the -devel split
  - update generated docs in the tree


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch from Dmitry V. Levin to have pam_stack propagate the PAM fail_delay
  - roll back the README for pam_xauth to actually be the right one
  - tweak pam_stack to use the parent's service name when calling the substack


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak pre script to be called in all upgrade cases
  - get pam_unix to only care about the significant pieces of passwords it checks
  - add /usr/include/db1/db.h as a build prereq to pull in the right include
    files, no matter whether they're in glibc-devel or db1-devel
  - pam_userdb.c: include db1/db.h instead of db.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add RLIMIT_LOCKS to pam_limits (patch from Jes Sorensen) (#20542)
  - link pam_userdb to Berkeley DB 2.x to match 6.2's setup correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix similar() function in pam_cracklib (#14740)
  - fix example in access.conf (#21467)
  - add conditional compilation for building for 6.2 (for pam_userdb)
  - tweak post to not use USESHADOW any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix handling of "nis" when changing passwords by adding the checks for the
    data source to the password-updating module in pam_unix
  - add the original copyright for pam_access (fix from Michael Gerdts)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge to 0.74
  - make console.perms match perms set by MAKEDEV, and add some devfs device names
  - add 'sed' to the buildprereq list (#24666)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually time out when attempting to lckpwdf() (#25889)
  - include time.h in pam_issue (#25923)
  - update the default system-auth to the one generated by authconfig 4.1.1
  - handle getpw??? and getgr??? failures more gracefully (#26115)
  - get rid of some extraneous {set,end}{pw,gr}ent() calls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: change the documented default config file to reflect the defaults
  - pam_limits: you should be able to log in a total of maxlogins times, not
    (maxlogins - 1)
  - handle group limits on maxlogins correctly (#25690)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - own /etc/security
  - be more descriptive when logging messages from pam_limits
  - pam_listfile: remove some debugging code (#28346)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add pam_console_apply
  - /dev/pilot's usually a serial port (or a USB serial port), so revert its
    group to 'uucp' instead of 'tty' in console.perms
  - change pam_console's behavior wrt directories -- directories which are
    mount points according to /etc/fstab are taken to be synonymous with
    their device special nodes, and directories which are not mount points
    are ignored


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: error out on undefined classes in pam_console config file
  - console.perms: actually change the permissions on the new device classes
  - pam_console: add an fstab= argument, and -f and -c flags to pam_console_apply
  - pam_console: use g_log instead of g_critical when bailing out
  - console.perms: logins on /dev/vc/* are also console logins, from Douglas
    Gilbert via Tim Waugh


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: make 'trust' and 'deny' work together correctly
  - pam_wheel: also check the user's primary gid
  - pam_group: also initialize groups when called with PAM_REINITIALIZE_CRED


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove /dev/dri from console.perms -- XFree86 munges it, so it's outside of
    our control (reminder from Daryll Strauss)
  - add /dev/3dfx to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge up to 0.75
  - pam_unix: temporarily ignore SIGCHLD while running the helper
  - pam_pwdb: temporarily ignore SIGCHLD while running the helper
  - pam_dispatch: default to uncached behavior if the cached chain is empty


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_access: compare IP addresses with the terminating ".", as documented
    (patch from Carlo Marcelo Arenas Belon, I think) (#16505)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: add apm_bios to the list of devices the console owner can use
  - console.perms: add beep to the list of sound devices


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: change js* to js[0-9]*
  - include pam_aconf.h in more modules (patches from Harald Welte)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: fix logic bug when changing permissions on single
    file and/or lists of files
  - pam_console: return the proper error code (reported and patches
    for both from Frederic Crozat)
  - change deprecated Copyright: tag in .spec file to License:


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: don't error out if the group has no members, but is the user's
    primary GID (reported by David Vos)
  - pam_unix: preserve permissions on files which are manipulated (#43706)
  - pam_securetty: check if the user is the superuser before checking the tty,
    thereby allowing regular users access to services which don't set the
    PAM_TTY item (#39247)
  - pam_access: define NIS and link with libnsl (#36864)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: use /var/run/console instead of /var/lock/console for lock files
  - pam_issue: read the right number of bytes from the file


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-10
changelog:
  - pam_xauth: fix errors due to uninitialized data structure (fix from Tse Huong
    Choo)
  - pam_xauth: random cleanups
  - pam_console: use /var/run/console instead of /var/lock/console at install-time
  - pam_unix: fix preserving of permissions on files which are manipulated


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_stack: perform deep copy of conversation structures
  - include the static libpam in the -devel subpackage (#52321)
  - move development .so and .a files to %{_libdir}
  - pam_unix: don't barf on empty passwords (#51846)
  - pam_unix: redo compatibility with "hash,age" data wrt bigcrypt (#42394)
  - console.perms: add usb camera, scanner, and rio devices (#15528)
  - pam_cracklib: initialize all options properly (#49613)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modules: use getpwnam_r and friends instead of non-reentrant versions
  - pam_console: clear generated .c and .h files in "clean" makefile target


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-12
changelog:
  - noreplace configuration files in /etc/security
  - pam_console: update pam_console_apply and man pages to reflect
    /var/lock -> /var/run move


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_unix: use crypt() instead of bigcrypt() when salted field is less than
    the critical size which lets us know it was generated with bigcrypt()
  - use a wrapper to handle ERANGE errors when calling get....._r functions:
    defining PAM_GETPWNAM_R and such (for getpwnam, getpwuid, getgrnam,
    getgrgid, and getspnam) before including _pam_macros.h will cause them
    to be implemented as static functions, similar to how defining PAM_SM_xxx
    is used to control whether or not PAM declares prototypes for certain
    functions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_userdb: fix the key_only flag so that the null-terminator of the
    user-password string isn't expected to be part of the key in the db file,
    matching the behavior of db_load 3.2.9


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: rewrite to skip refcounting and just use a temporary file
    created using mkstemp() in /tmp


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: close a possible DoS due to use of dotlock-style locking in
    world-writable directories by relocating the temporary file to the target
    user's home directory
  - general: include headers local to this tree using relative paths so that
    system headers for PAM won't be pulled in, in case include paths don't
    take care of it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add cracklib as a buildprereq
  - pam_wheel: don't ignore out if the user is attempting to switch to a
    unprivileged user (this lets pam_wheel do its thing when users attempt
    to get to system accounts or accounts of other unprivileged users)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_mkhomedir: recurse into subdirectories properly
  - pam_mkhomedir: handle symlinks
  - pam_mkhomedir: skip over special items in the skeleton directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: don't just return if the user is root -- we'll want to set the
    priority (it could be negative to elevate root's sessions)
  - pam_issue: fix off-by-one error allocating space for the prompt string


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_tally: don't try to read past the end of faillog -- it probably contains
    garbage, which if written into the file later on will confuse /usr/bin/faillog


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_rhosts: allow "+hostname" as a synonym for "hostname" to jive better
    with the hosts.equiv(5) man page
  - use the automake install-sh instead of the autoconf install-sh, which
    disappeared somewhere between 2.50 and now


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-15
changelog:
  - reorder patches so that the reentrancy patch is applied last -- we never
    came to a consensus on how to guard against the bugs in calling applications
    which this sort of change addresses, and having them last allows for dropping
    in a better strategy for addressing this later on


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-16
changelog:
  - pam_xauth: always return PAM_SUCCESS or PAM_SESSION_ERR instead of PAM_IGNORE,
    matching the previous behavior (libpam treats PAM_IGNORE from a single module
    in a stack as a session error, leading to false error messages if we just
    return PAM_IGNORE for all cases)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-19
changelog:
  - fix a bug in the getpwnam_r wrapper which sometimes resulted in false
    positives for non-existent users


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-20
changelog:
  - pam_stack: fix some memory leaks (reported by Fernando Trias)
  - pam_chroot: integrate Owl patch to report the more common causes of failures


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-31
changelog:
  - libpam_misc: fix possible infinite loop in misc_conv (#62195)
  - pam_xauth: fix cases where DISPLAY is "localhost:screen" and the xauth
    key is actually stored using the system's hostname (#61524)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-36
changelog:
  - pam_timestamp: chown intermediate directories when creating them
  - pam_timestamp_check: add -d flag to poll


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-40
changelog:
  - pam_timestamp_check: check that stdio descriptors are open before we're
    invoked
  - add missing chroot.conf


author: Elliot Lee <sopwith@redhat.com> 0.75-42
changelog:
  - Since cracklib-dicts location will not be correctly detected without 
    that package being installed, add buildreq for cracklib-dicts.
  - Add patch57: makes configure use $LIBNAME when searching for cracklib 
    dicts, and error out if not found.


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-44
changelog:
  - fix syntax errors in pam_console's yacc parser which newer bison chokes on
  - forcibly set FAKEROOT at make install time


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-45
changelog:
  - create /lib/security, even if it isn't /%{_lib}/security, because we
    can't locate /lib/security/$ISA without it (noted by Arnd Bergmann)
  - clear out the duplicate docs directory created during %install


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-46
changelog:
  - pam_xauth: reintroduce ACL support, per the original white paper
  - pam_xauth: default root's export ACL to none instead of everyone


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-49
changelog:
  - modify calls to getlogin() to check the directory of the current TTY before
    searching for an entry in the utmp/utmpx file (#98020, #98826, CAN-2003-0388)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-0
changelog:
  - update to 0.77 upstream release
    - pam_limits: limits now affect root as well
    - pam_nologin: returns PAM_IGNORE instead of PAM_SUCCESS unless "successok"
      is given as an argument
    - pam_userdb: correctly return PAM_AUTH_ERR instead of PAM_USER_UNKNOWN when
      invoked with the "key_only" argument and the database has an entry of the
      form "user-<wrongpassword>"
  - use a bundled libdb for pam_userdb.so because the system copy uses threads,
    and demand-loading a shared library which uses threads into an application
    which doesn't is a Very Bad Idea


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_succeed_if: fix thinko in argument parsing which would walk past the
    end of the argument list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_pwdb.so link with libnsl again so that it loads (#107093)
  - remove now-bogus buildprereq on db4-devel (we use a bundled copy for
    pam_userdb to avoid symbol collisions with other db libraries in apps)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-15
changelog:
  - don't install _pam_aconf.h -- apps don't use it, other PAM headers which
    are installed don't use it, and its contents may be different for arches
    on a multilib system
  - check for linkage problems in modules at %install-time (kill #107093 dead)
  - add buildprereq on flex (#101563)


author: Dan Walsh <dwalsh@redhat.com> 0.77-19.sel
changelog:
  - Change unix_chkpwd to handle unix_passwd and unix_acct
  - This eliminates the need for pam modules to have read/write access to /etc/shadow.


author: Tomas Mraz <tmraz@redhat.com> 0.77-56
changelog:
  - #75454 fixed locking when changing password
  - #127054 
  - #125653 removed unnecessary getgrouplist call
  - #124979 added quiet option to pam_succeed_if


author: Tomas Mraz <tmraz@redhat.com> 0.77-61
changelog:
  - #129328 pam_env shouldn't abort on missing /etc/environment
  - #126985 pam_stack should always copy the conversation function 
  - #127524 add /etc/security/opasswd to files


author: Tomas Mraz <tmraz@redhat.com> 0.77-63
changelog:
  - Fix checking of group %group syntax in pam_limits
  - Drop fencepost patch as it was already fixed 
    by upstream change from 0.75 to 0.77
  - Fix brokenshadow patch


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - #87628 pam_timestamp remembers authorization after logout
  - #116956 fixed memory leaks in pam_stack


author: Tomas Mraz <tmraz@redhat.com> 0.77-66
changelog:
  - #77646 log failures when renaming the files when changing password
  - Log failure on missing /etc/security/opasswd when remember option is present


author: Tomas Mraz <tmraz@redhat.com> 0.78-1
changelog:
  - update to Linux-PAM-0.78
  - #140451 parse passwd entries correctly and test for failure
  - #137802 allow using pam_console for authentication


author: Tomas Mraz <tmraz@redhat.com> 0.78-5
changelog:
  - echo why tests failed when rebuilding
  - fixed some warnings and errors in pam_console for gcc4 build
  - improved parsing pam_console config file


author: Tomas Mraz <tmraz@redhat.com> 0.78-6
changelog:
  - add functionality for running handler executables from pam_console
    when console lock was obtained/lost
  - removed patches merged to pam-redhat


author: Tomas Mraz <tmraz@redhat.com> 0.78-8
changelog:
  - remove ownership and permissions handling from pam_console call
    pam_console_apply as a handler instead


author: Tomas Mraz <tmraz@redhat.com> 0.78-9
changelog:
  - fix wrong logging in pam_console handlers
  - add executing ainit handler for alsa sound dmix
  - #147879, #112777 - change permissions for dri devices


author: Tomas Mraz <tmraz@redhat.com> 0.79-3
changelog:
  - make pam_unix LSB 2.0 compliant even when SELinux enabled
  - #88127 - change both local and NIS passwords to keep them in sync,
    also fix a regression in passwd functionality on NIS master server


author: Tomas Mraz <tmraz@redhat.com> 0.79-5
changelog:
  - added auditing patch by Steve Grubb
  - added cleanup patches for bugs found by Steve Grubb
  - don't clear the shadow option of pam_unix if nis option used


author: Tomas Mraz <tmraz@redhat.com> 0.79-7
changelog:
  - pam_xauth: unset the XAUTHORITY variable on error, fix
    potential memory leaks
  - modify path to IDE floppy devices in console.perms (#155560)


author: Tomas Mraz <tmraz@redhat.com> 0.79-9
changelog:
  - update the pam audit patch to support newest audit library,
    audit also pam_setcred calls (Steve Grubb)
  - don't use the audit_fd as global static variable
  - don't unset the XAUTHORITY when target user is root


author: Tomas Mraz <tmraz@redhat.com> 0.79-10
changelog:
  - add the Requires dependency on audit-libs (#159885)
  - pam_loginuid shouldn't report error when /proc/self/loginuid
    is missing (#159974)


author: Tomas Mraz <tmraz@redhat.com> 0.80-1
changelog:
  - upgrade to new upstream sources
  - removed obsolete patches
  - pam_selinux module shouldn't fail on broken configs unless
    policy is set to enforcing (Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.80-2
changelog:
  - fixed module tests so the pam doesn't require itself to build (#163502)
  - added buildprereq for building the documentation (#163503)
  - relaxed permissions of binaries (u+w)


author: Tomas Mraz <tmraz@redhat.com> 0.80-8
changelog:
  - process limit values other than RLIMIT_NICE correctly (#168790)
  - pam_unix: always honor nis flag on password change (by Aaron Hope)


author: Tomas Mraz <tmraz@redhat.com> 0.80-9
changelog:
  - don't include ps and pdf docs (#168823)
  - new common config file for configuration utilities
  - remove glib2 dependency (#166979)


author: Tomas Mraz <tmraz@redhat.com> 0.80-13
changelog:
  - fixed CAN-2005-2977 unix_chkpwd should skip user verification only if
    run as root (#168181)
  - link pam_loginuid to libaudit
  - support no tty in pam_access (#170467)
  - updated audit patch (by Steve Grubb)
  - the previous pam_selinux change was not applied properly
  - pam_xauth: look for the xauth binary in multiple directories (#171164)


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-1
changelog:
  - support netgroup matching in pam_succeed_if
  - upgrade to new release
  - drop pam_pwdb as it was obsolete long ago
  - we don't build static libraries anymore


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-2
changelog:
  - fix dangling symlinks in -devel (#175929)
  - link libaudit only where necessary
  - actually compile in audit support


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-1
changelog:
  - new upstream version
  - updated db4 to 4.3.29
  - added module pam_tally2 with auditing support
  - added manual pages for system-auth and config-util (#179584)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-2
changelog:
  - added try_first_pass option to pam_cracklib
  - use try_first_pass for pam_unix and pam_cracklib in
    system-auth (#182350)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-3
changelog:
  - added pam_namespace module written by Janak Desai (per-user /tmp
  support)
  - new pam-redhat modules version


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-4
changelog:
  - fixed console device class for irda (#189966)
  - make pam_console_apply fail gracefully when a class is missing


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-5
changelog:
  - the namespace instance init script is now in /etc/security (#190148)
  - pam_namespace: added missing braces (#190026)
  - pam_tally(2): never call fclose twice on the same FILE (from upstream)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-1
changelog:
  - upgrade to new upstream version
  - make pam_console_apply not dependent on glib
  - support large uids in pam_tally, pam_tally2


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-2
changelog:
  - pam_console_apply shouldn't access /var when called with -r (#191401)
  - actually apply the large-uid patch
  - don't build hmactest in pam_timestamp so openssl-devel is not required
  - add missing buildrequires (#191915)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-3
changelog:
  - use md5 implementation from pam_unix in pam_namespace
  - pam_namespace should call setexeccon only when selinux is enabled


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-5
changelog:
  - updated pam_namespace with latest patch by Janak Desai
  - merged pam_namespace patches
  - added buildrequires libtool
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-1
changelog:
  - updated to a new upstream release
  - added service as value to be matched and list matching to
    pam_succeed_if
  - namespace.init was missing from EXTRA_DIST


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-3
changelog:
  - don't report error in pam_selinux for nonexistent tty (#188722)
  - add pam_keyinit to the default system-auth file (#198623)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-6
changelog:
  - revoke keyrings properly when pam_keyinit called more than once (#201048)
    patch by David Howells


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-7
changelog:
  - revoke keyrings properly when pam_keyinit called as root (#201048)
  - pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails (#197748)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-1
changelog:
  - upgrade to new upstream version, as there are mostly bugfixes except
    improved documentation
  - add support for session and password service for pam_access and
    pam_succeed_if
  - system-auth: skip session pam_unix for crond service


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-2
changelog:
  - silence pam_succeed_if in default system-auth (#205067)
  - round the pam_timestamp_check sleep up to wake up at the start of the
    wallclock second (#205068)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.1
changelog:
  - preserve effective uid in namespace.init script (LSPP for newrole)
  - include /var/log/faillog and tallylog to filelist (#209646)
  - add ids to .xml docs so the generated html is always the same (#210569)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - update internal db4 to 4.5.20 version
  - move setgid before setuid in pam_keyinit (#212329)
  - make username check in pam_unix consistent with useradd (#212153)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-5
changelog:
  - add select-context option to pam_selinux (#213812)
  - autoreconf won't work with autoconf-2.61 as configure.in is not yet adjusted
    for it


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-8
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)
  - update gmo files as we patch some po files (#218271)
  - add use_current_range option to pam_selinux (#220487)
  - improve the role selection in pam_selinux
  - remove shortcut on Password: in ja locale (#218271)
  - revert to old euid and not ruid when setting euid in pam_keyinit (#219486)
  - rename selinux-namespace patch to namespace-level


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.0-1
changelog:
  - upgrade to new upstream version
  - drop pam_stack module as it is obsolete
  - some changes to silence rpmlint


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-1
changelog:
  - upgrade to new upstream version resolving CVE-2007-0003
  - pam_namespace: unmount poly dir for override users


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-3
changelog:
  - correctly relabel tty in the default case (#229542)
  - pam_unix: cleanup of bigcrypt support
  - pam_unix: allow modification of '*' passwords to root


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-4
changelog:
  - pam_console: always decrement use count (#230823)
  - pam_namespace: use raw context for poly dir name (#227345)
  - pam_namespace: truncate long poly dir name (append hash) (#230120)
  - we don't patch any po files anymore


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-5
changelog:
  - pam_selinux: improve context change auditing (#234781)
  - pam_namespace: fix parsing config file with unknown users (#234513)


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-6
changelog:
  - pam_namespace: better document behavior on failure (#237249)
  - pam_unix: split out passwd change to a new helper binary (#236316)
  - pam_namespace: add support for temporary logons (#241226)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-3
changelog:
  - updated db4 to 4.6.18 (#249740)
  - added user and new instance parameters to namespace init
  - document the new features of pam_namespace
  - do not log an audit error when uid != 0 (#249870)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-5
changelog:
  - most devices are now handled by HAL and not pam_console (patch by davidz)
  - license tag fix
  - multifunction scanner device support (#251468)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-6
changelog:
  - do not ask for blank password when SELinux confined (#254044)
  - initialize homedirs in namespace init script (original patch by dwalsh)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-9
changelog:
  - do not preserve contexts when copying skel and other namespace.init
    fixes (#298941)
  - do not free memory sent to putenv (#231698)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-17
changelog:
  - test for setkeycreatecon correctly
  - add exclusive login mode of operation to pam_selinux_permit (original
    patch by Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.99.10.0-1
changelog:
  - new upstream release
  - add default soft limit for nproc of 1024 to prevent
    accidental fork bombs (#432903)


author: Tomas Mraz <tmraz@redhat.com> 0.99.10.0-2
changelog:
  - if shadow is readable for an user do not prevent him from
    authenticating any user with unix_chkpwd (#433459)
  - call audit from unix_chkpwd when appropriate


author: Tomas Mraz <tmraz@redhat.com> 0.99.10.0-4
changelog:
  - pam_namespace: fix problem with level polyinst (#438264)
  - pam_namespace: improve override checking for umount
  - pam_selinux: fix syslogging a context after free() (#438338)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1-4
changelog:
  - pam_namespace: allow safe creation of directories owned by user (#437116)
  - pam_unix: fix multiple error prompts on password change (#443872)


author: Tomas Mraz <tmraz@redhat.com> 1.0.2-1
changelog:
  - pam_loginuid: uids are unsigned (#460241)
  - new minor upstream release
  - use external db4
  - drop tests for not pulling in libpthread (as NPTL should
    be safe)


author: Tomas Mraz <tmraz@redhat.com> 1.0.2-2
changelog:
  - new password quality checks in pam_cracklib
  - report failed logins from btmp in pam_lastlog
  - allow larger groups in modutil functions
  - fix leaked file descriptor in pam_tally


author: Tomas Mraz <tmraz@redhat.com> 1.0.90-4
changelog:
  - fix parsing of config files containing non-ASCII characters
  - fix CVE-2009-0579 (mininimum days for password change ignored) (#487216)
  - pam_access: improve handling of hostname resolution


author: Tomas Mraz <tmraz@redhat.com> 1.0.91-6
changelog:
  - add password-auth, fingerprint-auth, and smartcard-auth
    for applications which can use them namely gdm (#494874)
    patch by Ray Strode


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-5
changelog:
  - do not change permissions with pam_console_apply
  - drop obsolete pam_tally module and the faillog file (#461258)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-7
changelog:
  - pam_console: fix memory corruption when executing handlers (patch by
    Stas Sergeev) and a few more fixes in the handler execution code (#532302)


author: Tomas Mraz <tmraz@redhat.com> 1.1.2-1
changelog:
  - add pam_faillock module implementing temporary account lock out based
    on authentication failures during a specified interval
  - do not build some auxiliary tools that are not installed that require
    flex-static to build
  - upgrade to new upstream release


author: Tomas Mraz <tmraz@redhat.com> 1.1.3-1
changelog:
  - upgrade to new upstream release fixing CVE-2010-3316 CVE-2010-3435
    CVE-2010-3853
  - try to connect to an abstract X-socket first to verify we are
    at real console (#647191)


author: Tomas Mraz <tmraz@redhat.com> 1.1.3-3
changelog:
  - fix segfault in faillock utility
  - remove some cases where the information of existence of
    an user account could be leaked by the pam_faillock,
    document the remaining case


author: Tomas Mraz <tmraz@redhat.com> 1.1.3-5
changelog:
  - add config for autocreation of subdirectories in /var/run (#656655)
  - automatically enable kernel console in pam_securetty


author: Tomas Mraz <tmraz@redhat.com> 1.1.3-10
changelog:
  - detect the shared / and make the polydir mounts private based on that
  - fix memory leak and other small errors in pam_namespace


author: Tomas Mraz <tmraz@redhat.com> 1.1.5-7
changelog:
  - add inactive account lock out functionality to pam_lastlog
  - fix pam_unix remember user name matching
  - add gecoscheck and maxclassrepeat functionality to pam_cracklib
  - correctly check for crypt() returning NULL in pam_unix
  - pam_unix - do not fallback to MD5 on password change
    if requested algorithm not supported by crypt() (#818741)
  - install empty directories


author: Tomas Mraz <tmraz@redhat.com> - 1.1.5-8
changelog:
  - fix build failure in pam_unix
  - add display of previous bad login attempts to postlogin.pamd
  - put the tmpfiles.d config to /usr/lib and rename it to pam.conf
  - build against libdb-5


author: Tomas Mraz <tmraz@redhat.com> 1.1.6-2
changelog:
  - link setuid binaries with full relro (#853158)
  - add rhost and tty to auditing data in modules (#677664)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.6-9
changelog:
  - do not fail if btmp file is corrupted (#906852)
  - fix strict aliasing warnings in build
  - UsrMove
  - use authtok_type with pam_pwquality in system-auth
  - remove manual_context handling from pam_selinux (#876976)
  - other minor specfile cleanups


author: Tomáš Mráz <tmraz@redhat.com> 1.1.6-12
changelog:
  - add auditing of SELinux policy violation in pam_rootok (#965723)
  - add SELinux helper to pam_pwhistory


author: Tomáš Mráz <tmraz@redhat.com> 1.1.6-14
changelog:
  - use links instead of w3m to create txt documentation
  - recognize login session in pam_sepermit to prevent gdm from locking (#969174)
  - add support for disabling password logging in pam_tty_audit


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-7
changelog:
  - rename the 90-nproc.conf to 20-nproc.conf (#1071618)
  - canonicalize user name in pam_selinux (#1071010)
  - refresh the pam-redhat tarball


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-17
changelog:
  - update the audit-grantor patch with the upstream changes
  - pam_userdb: correct the example in man page (#1078784)
  - pam_limits: check whether the utmp login entry is valid (#1080023)
  - pam_console_apply: do not print error if console.perms.d is empty
  - pam_limits: nofile refers to open file descriptors (#1111220)
  - apply PIE and full RELRO to all binaries built


author: Tomáš Mráz <tmraz@redhat.com> 1.3.1-5
changelog:
  - pam_faillock: Support configuration file /etc/security/faillock.conf
  - pam_faillock: Support local_users_only option
  - pam_namespace: Support noexec, nosuid and nodev flags for tmpfs mounts
  - Drop tallylog and pam_tally[2] documentation
  - pam_lastlog: Do not display failed attempts with PAM_SILENT flag
  - pam_lastlog: Support unlimited option to override fsize limit
  - pam_unix: Log if user authenticated without password
  - pam_tty_audit: Improve manual page
  - Optimize closing fds when spawning helpers
  - Fix duplicate password verification in pam_authtok_verify()


author: Iker Pedrosa <ipedrosa@redhat.com> 1.3.1-9
changelog:
  - pam_usertype: new module to tell if uid is in login.defs ranges (#1810474)
  - pam_tty_audit: if kernel audit is disabled return PAM_IGNORE (#1775357)


author: Peter Robinson <pbrobinson@redhat.com> - 1.3.1-12
changelog:
  - Add the motd.d directories (empty) to silence warnings and to
    provide proper ownership for them (#1847501)


author: Iker Pedrosa <ipedrosa@redhat.com> 1.3.1-13
changelog:
  - pam_wheel: if getlogin fails fallback to PAM_RUSER: fixed malformed patch (#1866866)
  - pam_namespace: polyinstantiation refer to gdm doc (#1861841)


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-17
changelog:
  - pam_keyinit: thread-safe implementation. Resolves: #1997969
  - pam_motd: support multiple motd paths specified, with filename overrides. Resolves: #2014458


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-19
changelog:
  - Add the motd.d directories (empty) to silence warnings and to
    provide proper ownership for them. Resolves: #2014458


author: Brian C. Lane <bcl@redhat.com> - 3.2-33
changelog:
  - Switch gpt-header-move and msdos-overlap to python3 (bcl)
    Resolves: rhbz#1595810
  - Modify gpt-header-move and msdos-overlap to work with py2 or py3 (bcl)
    Related: rhbz#1595810


author: Brian C. Lane <bcl@redhat.com> - 3.2-34
changelog:
  - Fix the length of several strncpy calls (bcl)
    Related: rhbz#1602652
  - parted.c: Always free peek_word (bcl)
    Related: rhbz#1602652
  - parted.c: Make sure dev_name is freed (bcl)
    Related: rhbz#1602652
  - t6100-mdraid-partitions: Use v0.90 metadata for the test (bcl)
  - Fix msdos-overlap to work correctly with py2 or py3 (bcl)
    Related: rhbz#1595810


author: Brian C. Lane <bcl@redhat.com> - 3.2-35
changelog:
  - Use python3-devel in buildroot
    Resolves: rhbz#1615576
  - linux.c: Use sys/sysmacros.h for major/minor
    Resolves: rhbz#1615592


author: Brian C. Lane <bcl@redhat.com> - 3.2-37
changelog:
  - Add CI tests
    Resolves: rhbz#1653912
  - t6000-dm: Stop using private lvm root
    Related: rhbz#1653912


author: Brian C. Lane <bcl@redhat.com> - 3.2-39
changelog:
  - tests: Add a test for resizepart on a busy partition (bcl)
    Related: rhbz#1861804
  - parted: Preserve resizepart End when prompted for busy partition (bcl)
    Resolves: rhbz#1861804
  - Fix end_input usage in do_resizepart (bcl)
    Related: rhbz#1861804
  - tests: Test incomplete resizepart command (bcl)
    Related: rhbz#1861804
  - Fix resizepart iec unit end sector (psusi)
    Related: rhbz#1861804
  - libparted: Fix endian bug in bsd.c (AWilcox)
    Resolves: rhbz#1980105


author: Than Ngo <than@redhat.com> - 2.7.6-10
changelog:
  - CVE-2019-13636 , Don't follow symlinks unless --follow-symlinks is given
  - Resolves: #1665928, patch has a huge error output and segfaults when the file to be patched does not exist


author: Petr Pisar <ppisar@redhat.com> - 8.41-6
changelog:
  - Fix returning unset groups in POSIX interface if REG_STARTEND has a non-zero
    starting offset (upstream bug #2244)


author: Petr Pisar <ppisar@redhat.com> - 8.42-2
changelog:
  - Fix handling UTF and start-of-pattern options in C++ wrapper
    (upstream bug #2283)
  - Fix an error message and locale handling in pcregrep tool


author: Petr Pisar <ppisar@redhat.com> - 8.42-3
changelog:
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 256
    (bug #1619228)


author: Petr Pisar <ppisar@redhat.com> - 8.42-5
changelog:
  - Fix CVE-2019-20838 (a subject buffer overread in JIT when UTF is disabled
    and \X or \R has a greater than 1 fixed quantifier) (bug #1852252)
  - Fix CVE-2020-14155 (an integer overflow when parsing numbers after "(?C"))
    (bug #1851552)


author: Petr Pisar <ppisar@redhat.com> - 10.31-6
changelog:
  - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern
    matches an empty string, but never at the starting offset


author: Petr Pisar <ppisar@redhat.com> - 10.31-7
changelog:
  - Fix checking that a lookbehind assertion has a fixed length if the
    lookbehind assertion is used inside a lookahead assertion
  - Fix parsing VERSION conditions


author: Petr Pisar <ppisar@redhat.com> - 10.31-8
changelog:
  - Fix backtracking atomic groups when they are not separated by something with
    a backtracking point


author: Petr Pisar <ppisar@redhat.com> - 10.31-9
changelog:
  - Recognize all Unicode space characters with /x option in a pattern
    (bug #1617960)
  - Fix changing dynamic options (bug #1617960)
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 255,
    (bug #1617960)
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 256,
    (bug #1617960)


author: Petr Pisar <ppisar@redhat.com> - 10.32-1
changelog:
  - 10.32 bump (bug #1628200)
  - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has
    a greater than 1 fixed quantifier (bug #1628200)
  - Fix matching a zero-repeated subroutine call at a start of a pattern
    (bug #1628200)
  - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200)


author: Jakub Jelen <jjelen@redhat.com> - 1.9.5-1
changelog:
  - Rebase to 1.9.5 version to address race conditions (#2014641)
  - Drop dowstream polkit policy to avoid repeated authentication requests in remote sessions (#1928154)


author: Paul Howarth <paul@city-fan.org> - 1.1903-1
changelog:
  - Update to 1.1903
    - Fix documentation typos (CPAN RT#84981)
    - Add -w and -i switches to diffnew.pl (CPAN RT#69945)
    - Remove Algorithm::DiffOld from the index; the module is still distributed
      with Algorithm::Diff, but is not indexed on CPAN because this is an
      ***UNAUTHORIZED*** release of Algorithm::DiffOld
  - Add patch to generate provide for perl(Algorithm::DiffOld)
  - Drop %defattr, redundant since rpm 4.4
  - General spec tidy-up


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.54-6
changelog:
  - Adjust to sqlite-3.22.0 (bug #1543286)
  - Add new index constraint ops introduced in SQLite 3.21.0 to PerlData


author: Jan Pazdziora <jpazdziora@redhat.com> - 6.56-1
changelog:
  - 1372494 - Rebase to upstream version 6.56.
  - 1372494 - Rebase to upstream version 6.55, build failed due to
    https://rt.cpan.org/Public/Bug/Display.html?id=117404.


author: Jitka Plesnikova <jplesnik@redhat.com> - 6.60-3
changelog:
  - Replace versioned MODULE_COMPAT by non-versioned perl-libs
  - Package tests
  - Resolves: rhbz#2219504


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-416
changelog:
  - 5.26.3 bump (bug #1655526)
  - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920)
  - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922)
  - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924)
  - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-417
changelog:
  - Fix Time-Local tests to pass after year 2019 (bug #1807120)
  - Run-require perl(Encode) by perl-libs (bug #1903503)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-419
changelog:
  - Fix CVE-2020-10543 (bug #1839273)
  - Fix CVE-2020-10878 (bug #1839276)
  - Fix a file mode of a perl-example.stp example (bug #1913693)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-1
changelog:
  - 5.10.0 final
  - clear out all the unnecessary patches (down to 8 patches!)
  - get rid of super perl debugging mode
  - add new subpackages


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-4
changelog:
  - create %{_prefix}/lib/perl5/vendor_perl/%{perl_version}/auto and own it
    in base perl (resolves bugzilla 214580)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-5
changelog:
  - disable some futime tests in t/io/fs.t because they started failing on x86_64
    in the Fedora builders, and no one can figure out why. :/


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-7
changelog:
  - Add perl-File-Temp provides/obsoletes/conflicts (#433836),
    reported by Bill McGonigle <bill@bfccomputing.com>
  - escape the macros in Jan 30 entry


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-12
changelog:
  - conditionalize multilib patch report in patchlevel.h
  - Update Archive::Extract to 0.26
  - Update Module::Load::Conditional to 0.24


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-19
changelog:
  - fix CPANPLUS-Dist-Build Provides/Obsoletes (bz 437615)
  - bump version on Module-CoreList subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-20
changelog:
  - create the vendor_perl/%{perl_version}/%{perl_archname}/auto directory 
    in %{_libdir} so we own it properly


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-21
changelog:
  - sparc64 fails two tests under mysterious circumstances. we need to get the
    rest of the tree moving, so we temporarily disable the tests on that arch.


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-26
changelog:
  - make config parameter list consistent for 32bit and 64bit platforms,
    add config option -Dinc_version_list=none (#448735)
  - use perl_archname consistently
  - cleanup of usage of *_lib macros in %install


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-33
changelog:
  - 451078 update Test::Harness to 3.12 for more testing. Removed verbose 
  test, new Test::Harness has possibly verbose output, but updated package
  has a lot of features f.e. TAP::Harness. Carefully watched all new bugs 
  related to tests!


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-38
changelog:
  - 455933 update to CGI-3.38
  - fix fuzz problems (patch6)
  - 217833 pos() function handle unicode characters correct


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-39.fc10
changelog:
  - CGI.pm bug in exists() on tied param hash (#457085)
  - move the enc2xs templates (../Encode/*.e2x) to -devel, (#456534)


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-44.fc10
changelog:
  - remove Tar.pm from Archive-Extract
  - fix version of Test::Simple in spec
  - update Test::Simple
  - update Archive::Tar to 1.38


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-46
changelog:
  - also preserve the timestamp of AUTHORS; move the fix to the recode
    function, which is where the stamps go wrong


author: Marcela Mašláňová <mmaslano@redhat.com> 4:5.10.0-47.fc10
changelog:
  - rt#33242, rhbz#459918. Segfault after reblessing objects in Storable.
  - rhbz#465728 upgrade Simple::Pod to 3.07


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-51
changelog:
  - to fix Fedora bz 473223, which is really perl bug #54186 (http://rt.perl.org/rt3//Public/Bug/Display.html?id=54186)
    we apply Changes 33640, 33881, 33896, 33897


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-52
changelog:
  - 295021 CVE-2007-4829 perl-Archive-Tar directory traversal flaws
  - add another source for binary files, which test untaring links


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-54
changelog:
  - 455410 http://rt.perl.org/rt3/Public/Bug/Display.html?id=54934
    Attempt to free unreferenced scalar fiddling with the symbol table
    Keep the refcount of the globs generated by PerlIO::via balanced.


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-60
changelog:
  - remove compatibility obsolete sitelib directories
  - use a better BuildRoot
  - drop a redundant mkdir in %install
  - call patchlevel.h only once; rm patchlevel.bak
  - update modules Sys::Syslog, Module::Load::Conditional, Module::CoreList,
    Test::Harness, Test::Simple, CGI.pm (dropping the upstreamed patch),
    File::Path (that includes our perl-5.10.0-CVE-2008-2827.patch),
    constant, Pod::Simple, Archive::Tar, Archive::Extract, File::Fetch,
    File::Temp, IPC::Cmd, Time::HiRes, Module::Build, ExtUtils::CBuilder
  - standardize the patches for updating embedded modules
  - work around a bug in Module::Build tests bu setting TMPDIR to a directory
    inside the source tree


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-61
changelog:
  - apply Change 34507: Fix memory leak in single-char character class optimization
  - Reorder @INC, based on b9ba2fadb18b54e35e5de54f945111a56cbcb249
  - fix Archive::Extract to fix test failure caused by tar >= 1.21
  - Merge useful Debian patches


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-66
changelog:
  - fix CGI::escape for all strings (#472571)
  - perl-CGI-t-util-58.patch: Do not distort lib/CGI/t/util-58.t
    http://rt.perl.org/rt3/Ticket/Display.html?id=64502


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-74
changelog:
  - fix generated .ph files so that they no longer cause warnings (#509676)
  - remove PREREQ_FATAL from Makefile.PL's processed by miniperl
  - update to latest Scalar-List-Utils (#507378)
  - perl-skip-prereq.patch: skip more prereq declarations in Makefile.PL files


author: Chris Weyl <cweyl@alumni.drew.edu> - 4:5.10.0-82
changelog:
  - update our Test-Simple update to 0.92 (patch by Iain Arnell), #519417
  - update Module-Pluggable to 3.9


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-87
changelog:
  - fix patch-update-Compress-Raw-Zlib.patch (did not patch Zlib.pm)
  - update Compress::Raw::Zlib to 2.023
  - update IO::Compress::Base, and IO::Compress::Zlib to 2.015 (#542645)


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.1-100
changelog:
  - new upstream version
  - release number must be high, because of stale version numbers of some
    of the subpackages
  - drop upstreamed patches
  - update the versions of bundled modules
  - shorten the paths in @INC
  - build without DEBUGGING
  - implement compatibility measures for the above two changes, for a short
    transition period
  - provide perl(:MODULE_COMPAT_5.10.0), for that transition period only


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-109
changelog:
  - 547656 CVE-2009-3626 perl: regexp matcher crash on invalid UTF-8 characters  
  - 549306 version::Internals should be packaged in perl-version subpackage
  - Parse-CPAN-Meta updated and separate package is dead


author: Paul Howarth <paul@city-fan.org> - 4:5.10.1-115
changelog:
  - restore missing version macros for Compress::Raw::Zlib, IO::Compress::Base
    and IO::Compress::Zlib


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-116
changelog:
  - add noarch into correct sub-packages
  - move Provides/Obsoletes into correct modules from main perl


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-118
changelog:
  - 463773 remove useless txt files from installation
  - 575842 remove PERL_USE_SAFE_PUTENV, use perl putenv


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.12.1-123
changelog:
  - remove patch with debugging symbols, which should be now ok without it
  - update to 5.12.1
  - MODULE_COMPAT


author: Petr Pisar <ppisar@redhat.com> - 4:5.12.1-130
changelog:
  - Run tests in parallel
  - Add "-Wl,--enable-new-dtags" to linker to allow to override perl's rpath by
    LD_LIBRARY_PATH used in tests. Otherwise tested perl would link to old
    in-system libperl.so.
  - Normalize spec file indentation


author: Petr Sabata <psabata@redhat.com> - 4:5.12.2-1
changelog:
  - Update to 5.12.2
  - Removed one hardcoded occurence of perl version in build process
  - Added correct path to dtrace binary
  - BuildRequires: systemtap-sdt-devel


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.12.2-141
changelog:
  - 643447 fix redefinition of constant C in h2ph (visible in git send mail,
    XML::Twig test suite)
  - remove ifdef for s390


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.0-161
changelog:
  - test build of released 5.14.0
  - remove Class::ISA from sub-packages
  - patches 8+ are part of new release
  - remove vendorarch/auto/Compress/Zlib


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.0-169
changelog:
  - filter even Mac:: requires, polish filter again for correct installation
  - add sub-package Compress-Raw-Bzip2, solve Bzip2 conflicts after install
  - and add IO::Uncompress::Bunzip2 correctly into IO-Compress


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.0-170
changelog:
  - try to update to latest ExtUtils::MakeMaker, no luck -> rebuild with current 
    version, fix bug RT#67618 in modules


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.1-171
changelog:
  - update to 5.14.1 - no new modules, just serious bugfixes and doc
  - switch off fork test, which is failing only on koji


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.1-178
changelog:
  - update macros -> add %perl_bootstrap 1 and example for readability
  - add into Module::Build dependency on perl-devel (contains macros.perl)
  - create new sub-package macros, because we need macros in minimal buildroot


author: Iain Arnell <iarnell@gmail.com> 4:5.14.1-179
changelog:
  - Parse-CPAN-Meta explicitly requires CPAN::Meta::YAML and JSON::PP
  - Exclude CPAN::Meta* from CPAN sub-package
  - Don't try to normalize CPAN-Meta, JSON-PP, and Parse-CPAN-Meta versions;
    their dual-life packages aren't and have much higher numbers already


author: Paul Howarth <paul@city-fan.org> - 4:5.14.1-182
changelog:
  - Have perl-Module-Build explicitly require perl(CPAN::Meta) >= 2.110420,
    needed for creation of MYMETA files by Build.PL; the dual-life version of
    the package already has this dependency


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.1-188
changelog:
  - Make gdbm support optional to bootstrap with new gdbm
  - Split Carp into standalone sub-package to dual-live with newer versions
    (bug #736768)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.1-189
changelog:
  - Correct perl-CGI list of Provides
  - Make tests optional
  - Correct perl-ExtUtils-ParseXS Provides
  - Correct perl-Locale-Codes Provides
  - Correct perl-Module-CoreList version
  - Automate perl-Test-Simple-tests Requires version


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-193
changelog:
  - 5.14.2 bump (see
    https://metacpan.org/module/FLORA/perl-5.14.2/pod/perldelta.pod for release
    notes).
  - Fixes panics when processing regular expression with \b class and /aa
    modifier (bug #731062)
  - Fixes CVE-2011-2728 (File::Glob bsd_glob() crash with certain glob flags)
    (bug #742987)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-195
changelog:
  - Fix CVE-2011-3597 (code injection in Digest) (bug #743010)
  - Sub-package Digest and thus Digest::MD5 module (bug #743247)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-196
changelog:
  - Filter false perl(DynaLoader) provide from perl-ExtUtils-MakeMaker
    (bug #736714)
  - Change Perl_repeatcpy() prototype to allow repeat count above 2^31
    (bug #720610)
  - Do not own site directories located in /usr/local (bug #732799)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.2-197
changelog:
  - cleaned spec (thanks to Grigory Batalov)
  -  Module-Metadata sub-package contained perl_privlib instead of privlib
  -  %files parent section was repeated twice


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-205
changelog:
  - Sub-package ExtUtils::Install
  - Sub-package ExtUtils::Manifest
  - Do not provide private perl(ExtUtils::MakeMaker::_version)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-207
changelog:
  - Fix interrupted reading. Thanks to Šimon Lukašík for reporting this issue
    and thanks to Marcela Mašláňová for finding fix. (bug #767931)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-211
changelog:
  - Fix searching for Unicode::Collate::Locale data (bug #756118)
  - Run safe signal handlers before returning from sigsuspend() and pause()
    (bug #771228)
  - Correct perl-Scalar-List-Utils files list
  - Stop !$^V from leaking (bug #787613)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.16.0-RC2-217
changelog:
  - clean patches, not needed with new version
  - regen by podcheck list of failed pods. cn, jp, ko pods failed. I can't decide
    whether it's a real problem or false positives.


author: Paul Howarth <paul@city-fan.org> 4:5.16.0-226
changelog:
  - Move the rest of ExtUtils-ParseXS into its sub-package, so that the main
    perl package doesn't need to pull in perl-devel (bug #839953)


author: Jitka Plesnikova <jplesnik@redhat.com> 4:5.16.1-228
changelog:
  - 5.16.1 bump (see
    http://search.cpan.org/dist/perl-5.16.1/pod/perldelta.pod for release
    notes)
  - Fixed reopening by scalar handle (bug #834221)
  - Fixed tr/// multiple transliteration (bug #831679)
  - Fixed heap-overflow in gv_stashpv (bug #826516)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.1-233
changelog:
  - Do not access freed memory when cloning thread (bug #825749)
  - Match non-breakable space with /[\h]/ in ASCII mode (bug #844919)
  - Clear $@ before `do' I/O error (bug #834226)
  - Do not truncate syscall() return value to 32 bits (bug #838551)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.1-238
changelog:
  - Do not leak with attribute on my variable (bug #858966)
  - Allow operator after numeric keyword argument (bug #859328)
  - Extend stack in File::Glob::glob (bug #859332)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.2-249
changelog:
  - Run-require POD convertors by Module-Build and ExtUtils-MakeMaker to
    generate documentation when building other packages


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.2-250
changelog:
  - Sub-package Text-Soundex (bug #905889)
  - Fix conflict declaration at perl-Pod-LaTeX (bug #904085)
  - Remove bundled Module-Pluggable (bug #903624)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.2-254
changelog:
  - Correct perl-podlators dependencies
  - Obsolete perl-ExtUtils-Typemaps by perl-ExtUtils-ParseXS (bug #891952)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.2-256
changelog:
  - Sub-package File-CheckTree (bug #909144)
  - Sub-package Text-ParseWords
  - Sub-package Encode (bug #859149)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-261
changelog:
  - 5.16.3 bump (see <http://search.cpan.org/dist/perl-5.16.3/pod/perldelta.pod>
    for release notes)
  - Remove bundled autodie, B-Lint, CPANPLUS, Encode, File-CheckTree, IPC-Cmd,
    Params-Check, Text-Soundex, Thread-Queue


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-263
changelog:
  - Correct perl-Digest-MD5 dependencies
  - Remove bundled Archive-Extract, File-Fetch, HTTP-Tiny,
    Module-Load-Conditional, Time-Local


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-265
changelog:
  - Conflict perl-autodie with older perl (bug #911226)
  - Sub-package Env (bug #924619)
  - Sub-package Exporter (bug #924645)
  - Sub-package File-Path (bug #924782)
  - Sub-package File-Temp (bug #924822)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-267
changelog:
  - Remove bundled constant, DB_File, Digest-MD5, Env, Exporter, File-Path,
    File-Temp, Module-Load, Log-Message-Simple, Pod-Simple, Test-Harness,
    Text-ParseWords


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-270
changelog:
  - Fix leaking tied hashes (bug #859910)
  - Fix dead lock in PerlIO after fork from thread (bug #947444)
  - Add proper conflicts to perl-Getopt-Long, perl-Locale-Maketext, and
    perl-Sys-Syslog


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-271
changelog:
  - Sub-package Time-HiRes (bug #957048)
  - Remove bundled Getopt-Long, Locale-Maketext, and Sys-Syslog


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-272
changelog:
  - Make regular expression engine safe in a signal handler (bug #849703)
  - Remove bundled ExtUtils-ParseXS, and Time-HiRes


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-277
changelog:
  - Move CPANPLUS-Dist-Build files from perl-CPANPLUS
  - Move CPAN-Meta-Requirements files from CPAN-Meta
  - Add perl-Scalar-List-Utils to perl-core dependencies


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-278
changelog:
  - Update SystemTap scripts to recognize new phase__change marker and new probe
    arguments (bug #971094)
  - Update h2ph(1) documentation (bug #948538)
  - Update pod2html(1) documentation (bug #948538)
  - Do not double-own archlib directory (bug #894195)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-279
changelog:
  - Do not distribute File::Spec::VMS (bug #973713)
  - Remove bundled CPANPLUS-Dist-Build (bug #973041)


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.0-282
changelog:
  - Do not load system Term::ReadLine::Gnu while running tests
  - Disable ornaments on perl5db AutoTrace tests


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.0-283
changelog:
  - Define SONAME for libperl.so and move the libary into standard path
  - Link XS modules to libperl.so on Linux (bug #960048)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.18.1-287
changelog:
  - 5.18.1 bump (see <http://search.cpan.org/dist/perl-5.18.1/pod/perldelta.pod>
    for release notes)
  - Disable macro %{rebuild_from_scratch}
  - Fix regex seqfault 5.18 regression (bug #989921)
  - Fixed interpolating downgraded variables into upgraded (bug #970913)
  - SvTRUE returns correct value (bug #967463)
  - Fixed doc command in perl debugger (bug #967461)
  - Fixed unaligned access in slab allocator (bug #964950)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.18.1-288
changelog:
  - Fix rules for parsing numeric escapes in regexes (bug #978233)
  - Fix crash with \&$glob_copy (bug #989486)
  - Fix coreamp.t's rand test (bug #970567)
  - Reap child in case where exception has been thrown (bug #988805)
  - Fix using regexes with multiple code blocks (bug #982131)


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.1-289
changelog:
  - perl_default_filter macro does not need to filter private libraries from
    provides (bug #1020809)
  - perl_default_filter anchors the filter regular expressions
  - perl_default_filter appends the filters instead of redefining them


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.2-294
changelog:
  - Drop perl-Test-Simple-tests package is it is not delivered by dual-lived
    version
  - Hide dual-lived perl-Object-Accessor


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.2-300
changelog:
  - Sub-package perl-App-find2perl (bug #1111196)
  - Sub-package perl-App-a2p (bug #1111232)
  - Sub-package perl-App-s2p (bug #1111242)


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.2-301
changelog:
  - Remove bundled perl-App-a2p, perl-App-find2perl, perl-App-s2p, and
    perl-Package-Constants
  - Correct perl-App-s2p license to ((GPL+ or Artistic) and App-s2p)


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.2-303
changelog:
  - Declare dependencies for cpan tool (bug #1122498)
  - Use stronger algorithm needed for FIPS in t/op/crypt.t (bug #1128032)
  - Make *DBM_File desctructors thread-safe (bug #1107543)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.20.0-305
changelog:
  - Update to Perl 5.20.0
  - Clean patches, not needed with new version
  - Update patches to work with new version
  - Update version of sub-packages, remove the deleted sub-packages
  - Sub-package perl-IO-Socket-IP, perl-experimental
  - Disable BR perl(local::lib) for cpan tool when bootstraping


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.0-307
changelog:
  - Specify all dependencies for perl-CPAN (bug #1090112)
  - Disable non-core modules at perl-CPAN when bootstrapping
  - Remove bundled perl-CPAN (bug #1090112)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.20.1-308
changelog:
  - 5.20.1 bump (see <http://search.cpan.org/dist/perl-5.20.1/pod/perldelta.pod>
    for release notes)
  - Sub-package perl-ExtUtils-Miniperl (bug #1141222)


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-310
changelog:
  - Move all Module-CoreList files into perl-Module-CoreList
  - Sub-package corelist(1) into perl-Module-CoreList-tools (bug #1142757)
  - Remove bundled perl-Module-CoreList, and perl-Module-CoreList-tools
    (bug #1142757)
  - Sub-package Devel-PPPort (bug #1143999)
  - Sub-package B-Debug (bug #1142952)
  - Use native version for perl-ExtUtils-CBuilder
  - Specify all dependencies for perl-ExtUtils-Install (bug #1144068)
  - Require perl-ExtUtils-ParseXS by perl-ExtUtils-MakeMaker because of xsubpp


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-311
changelog:
  - Remove bundled perl-Devel-PPPort (bug #1143999)
  - Remove bundled perl-B-Debug (bug #1142952)
  - Remove bundled perl-ExtUtils-CBuilder (bug #1144033)
  - Remove bundled perl-ExtUtils-Install (bug #1144068)


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-312
changelog:
  - Do not double-own perl-Pod-Usage' and perl-Pod-Checker' files by
    perl-Pod-Parser on bootstrap
  - Sub-package ExtUtils-Command (bug #1158536)
  - Sub-package Filter-Simple (bug #1158542)
  - Build-require groff-base instead of big groff


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-313
changelog:
  - Freeze epoch at perl-Pod-Checker and perl-Pod-Usage (bug #1163490)
  - Remove bundled perl-ExtUtils-Command (bug #1158536)
  - Remove bundled perl-Filter-Simple (bug #1158542)


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-314
changelog:
  - Consider Filter::Util::Call dependency as mandatory (bug #1165183)
  - Sub-package encoding module
  - Own upper directories by each package that installs a file there and
    remove empty directories (bug #1165013)


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-315
changelog:
  - Report inaccesible file on failed require (bug #1166504)
  - Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1128032)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.20.2-320
changelog:
  - 5.20.2 bump (see <http://search.cpan.org/dist/perl-5.20.2/pod/perldelta.pod>
    for release notes)
  - Regenerate a2p.c (BZ#1177672)


author: Petr Šabata <contyk@redhat.com> - 4:5.20.2-326
changelog:
  - Correct license tags of the main package, CGI, Compress-Raw-Zlib,
    Digest-MD5, Test-Simple and Time-Piece
  - Package a Pod-Html license clarification email


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.20.2-328
changelog:
  - Sub-package perl-CGI-Fast and perl-Module-Build-Deprecated
  - Add missing dual-life modules to perl-core


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.22.0-241
changelog:
  - 5.22.0 bump (see <http://search.cpan.org/dist/perl-5.22.0/pod/perldelta.pod>
    for release notes)
  - Update sub-packages and erase the removed modules from the core
  - Clean patches, not needed with new version
  - Update patches to work with new version


author: Petr Pisar <ppisar@redhat.com> - 4:5.22.0-346
changelog:
  - Subpackage "open" module in order to keep deprecated "encoding" module
    optional (bug #1228378)
  - Control building dual-lived sub-packages by perl_bootstrap macro
  - Make PadlistNAMES() lvalue again (bug #1231165)
  - Make magic vtable writable as a work-around for Coro (bug #1231165)
  - Explain file break-down into RPM packages in perl package description


author: Petr Pisar <ppisar@redhat.com> - 4:5.22.0-347
changelog:
  - Store distribution's linker and compiler flags to more Config's options
    in order to apply them when linking executable programs (bug #1238804)
  - Sub-package Config-Perl-V (bug #1238203)
  - Sub-package MIME-Base64 (bug #1238222)
  - Sub-package PerlIO-via-QuotedPrint (bug #1238229)
  - Update Pod-Escapes metadata (bug #1238237)
  - Sub-package Term-Cap (bug #1238248)
  - Sub-package Text-Balanced (bug #1238269)
  - Sub-package libnet (bug #1238689)
  - Sub-package perlfaq (bug #1238703)
  - Sub-package Unicode-Normalize (bug #1238730)
  - Sub-package Unicode-Collate (bug #1238760)
  - Sub-package Math-BigInt
  - Do not provide Net/libnet.cfg (bug #1238689)
  - Revert downstream change in Net::Config default configuration
  - Move libnetcfg tool from perl-devel into perl-libnetcfg sub-package


author: Petr Pisar <ppisar@redhat.com> - 4:5.22.0-348
changelog:
  - Sub-package bignum
  - Sub-package Math-BigRat
  - Sub-package Math-BigInt-FastCalc
  - Sub-package Math-Complex
  - Remove bundled perl-Config-Perl-V (bug #1238203)
  - Remove bundled perl-MIME-Base64 (bug #1238222)
  - Remove bundled perl-PerlIO-via-QuotedPrint (bug #1238229)
  - Remove bundled perl-Pod-Escapes (bug #1238237)
  - Remove bundled perl-Term-Cap (bug #1238248)
  - Remove bundled perl-Text-Balanced (bug #1238269)
  - Remove bundled perl-libnet (bug #1238689)
  - Remove bundled perl-perlfaq (bug #1238703)
  - Remove bundled perl-Unicode-Normalize (bug #1238730)
  - Remove bundled perl-Unicode-Collate (bug #1238760)


author: Petr Pisar <ppisar@redhat.com> - 4:5.22.0-351
changelog:
  - Sub-package Attribute-Handlers
  - Sub-package Devel-Peek
  - Sub-package Devel-SelfStubber
  - Sub-package SelfLoader
  - Sub-package IO
  - Sub-package Errno
  - Correct perl-Digest-SHA dependencies
  - Correct perl-Pod-Perldoc dependencies
  - Move utf8 and dependencies to perl-libs
  - Correct perl-devel and perl-CPAN dependencies
  - Sub-package IPC-SysV
  - Sub-package Test
  - Sub-package utilities (splain) into perl-utils
  - Provide perl version in perl(:VERSION) dependency symbol


author: Petr Pisar <ppisar@redhat.com> - 4:5.22.1-360
changelog:
  - Weak perl-Encode-devel dependency on perl-devel to Recommends level
    (bug #1129443)
  - Remove perl-ExtUtils-ParseXS dependency on perl-devel (bug #1129443)
  - Require perl-devel by perl-ExtUtils-MakeMaker
  - Provide MM::maybe_command independently (bug #1129443)
  - Replace ExtUtils::MakeMaker dependency with ExtUtils::MM::Utils in IPC::Cmd
    (bug #1129443)
  - Remove perl-ExtUtils-Install dependency on perl-devel (bug #1129443)
  - Remove perl-ExtUtils-Manifest dependency on perl-devel (bug #1129443)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.24.0-362
changelog:
  - 5.24.0 bump (see <http://search.cpan.org/dist/perl-5.24.0/pod/perldelta.pod>
    for release notes)
  - Update sub-packages; Update or remove patches


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-364
changelog:
  - Remove reflexive dependencies
  - Use pregenerated dependencies on bootstrapping
  - Specify more build-time dependencies


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-368
changelog:
  - Do not use unitialized memory in $h{\const} warnings (RT#128189)
  - Fix precedence in hv_ename_delete (RT#128086)
  - Do not treat %: as a stash (RT#128238)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-378
changelog:
  - perl-core depends on Parse::CPAN::Meta module instead of package name to allow
    upgrading perl-CPAN-Meta to 2.150010 (bug #1370681)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-379
changelog:
  - Fix crash in "evalbytes S" (RT#129196)
  - Fix crash in splice (RT#129164, RT#129166, RT#129167)
  - Fix string overrun in Perl_gv_fetchmethod_pvn_flags (RT#129267)
  - Fix crash when matching UTF-8 string with non-UTF-8 substrings (RT#129350)
  - Fix parsing perl options in shell bang line (RT#129336)
  - Fix firstchar bitmap under UTF-8 with prefix optimization (RT#129950)
  - Avoid infinite loop in h2xs tool if enum and type have the same name
    (RT130001)
  - Fix stack handling when calling chdir without an argument (RT#129130)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-381
changelog:
  - Fix crash in Storable when deserializing malformed code reference
    (RT#68348, RT#130098)
  - Fix crash on explicit return from regular expression substitution (RT#130188)
  - Tighten dependencies between architecture specific sub-packages to ISA
  - Fix assigning split() return values to an array
  - Fix const correctness in hv_func.h (bug #1242980)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-382
changelog:
  - Fix a crash in optimized evaluation of "or ((0) x 0))" (RT#130247)
  - Fix a memory leak in IO::Poll (RT#129788)
  - Fix regular expression matching (RT#130307)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-383
changelog:
  - Remove bundled Math-BigInt-FastCalc (bug #1408463)
  - Remove bundled Math-BigRat (bug #1408467)
  - Remove bundled bignum (bug #1409585)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-386
changelog:
  - Fix a buffer overflow in split in scalar context (RT#130262)
  - Fix a heap overflow with pack "W" (RT129149)
  - Fix a use-after-free when processing scalar variables in forms (RT#129125)
  - Fix a heap overflow if invalid octal or hexadecimal number is used in
    transliteration expression (RT#129342)
  - Fix out-of-bound read in case of unmatched regexp backreference (RT#129377)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-387
changelog:
  - Fix UTF-8 string handling in & operator (RT#129287)
  - Fix recreation of *:: (RT#129869)
  - Fix a memory leak in B::RHE->HASH method (RT#130504)
  - Fix parsing goto statements in multicalled subroutine (RT#113938)
  - Fix a heap overlow in parsing $# (RT#129274)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-388
changelog:
  - Adapt tests to zlib-1.2.11 (bug #1420326)
  - Fix a crash when compiling a regexp with impossible quantifiers (RT#130561)
  - Fix a buffer overrun with format and "use bytes" (RT#130703)
  - Fix a buffer overflow when studying some regexps repeatedly
    (RT#129281, RT#129061)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-389
changelog:
  - Adapt Compress::Raw::Zlib to zlib-1.2.11 (bug #1420326)
  - Fix a heap buffer overflow when evaluating regexps with embedded code blocks
    from more than one source (RT#129881)
  - Fix a memory leak in list assignment from or to magic values (RT#130766)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-390
changelog:
  - Fix a null-pointer dereference on malformed code (RT#130815)
  - Fix an use-after-free in substr() that modifies a magic variable (RT#129340)
  - Fix a memory leak leak in Perl_reg_named_buff_fetch() (RT#130822)
  - Fix an invalid memory read when parsing a loop variable (RT#130814)
  - Fix a heap-use-after-free in four-arguments substr call (RT#130624)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.0-392
changelog:
  - 5.26.0 bump (see <http://search.cpan.org/dist/perl-5.26.0/pod/perldelta.pod>
    for release notes)
  - Update sub-packages
  - Update or remove patches
  - Enable hardening (bug #1238804)
  - Use 64 bit ints on 32 bit platforms (bug #1268828)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-394
changelog:
  - Make File::Glob more resistant against degenerative matching (RT#131211)
  - Fix a crash when calling a subroutine from a stash (RT#131085)
  - Fix an improper cast of a negative integer to an unsigned 8-bit type (RT#131190)
  - Fix cloning :via handles on thread creation (RT#131221)
  - Fix glob UTF-8 flag on a glob reassignment (RT#131263)
  - Fix a buffer overflow in my_atof2() (RT#131526)
  - Fix handling backslashes in PATH environment variable when executing
    "perl -S" (RT#129183)
  - Fix a conditional jump on uninitilized memory in re_intuit_start() (RT#131575)
  - Fix spurious "Assuming NOT a POSIX class" warning (RT#131522)
  - Provide perl-interpreter RPM dependency symbol
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-395
changelog:
  - perl package installs all core modules, interpreter moved to
    perl-interpreter package, perl-core package is obsolete
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>
    (bug #1464903)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-398
changelog:
  - Fix reporting malformed UTF-8 character (RT#131646)
  - Fix File::Glob rt131211.t test random failures
  - Fix t/op/hash.t test random failures
  - Parse caret variables with subscripts as normal variables inside ${...}
    escaping (RT#131664)
  - Do not display too many bytes when reporting malformed UTF-8 character
  - Fix select called with a repeated magical variable (RT#131645)
  - Fix error message for "our sub foo::bar" (RT#131679)
  - Fix executing arybase::_tie_it() in Safe compartement (RT#131588)
  - Fix handling attribute specification on our variables (RT#131597)
  - Fix splitting non-ASCII strings if unicode_strings feature is enabled (RT#130907)
  - Fix compiler warnings in code generated by ExtUtils::Constant
    (CPAN RT#63832, CPAN RT#101487)
  - Fix GCC version detection for -D_FORTIFY_SOURCE override (RT#131809)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-399
changelog:
  - Fix unreliable Time-HiRes tests (CPAN RT#122819)
  - Do not require $Config{libs} providers by perl-devel package (bug #1481324)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.1-402
changelog:
  - Remove invalid macro definitions from macros.perl (bug #1532539)
  - Fix an overflow in the lexer when reading a new line (RT#131793)
  - Fix Term::ReadLine not to create spurious &STDERR files (RT#132008)
  - Fix a crash when a match for inversely repeated group fails (RT#132017)
  - Fix an overflow when parsing a character range with no preceding character
    (RT#132245)
  - Fix walking symbol table for ISA in Carp
  - Fix handling file names with null bytes in stat and lstat functions
    (RT#131895)
  - Fix a crash when untying an object witout a stash
  - Fix deparsing of transliterations with unprintable characters (RT#132405)
  - Fix error reporting on do() on a directory (RT#125774)
  - Fix stack manipulation when a lexical subroutine is defined in a do block in
    a member of an iteration list (RT#132442)
  - Fix setting $! when statting a closed file handle (RT#108288)
  - Fix tainting of s/// with overloaded replacement (RT#115266)
  - Expand system() arguments before a fork (RT#121105)
  - Avoid undefined behavior when copying memory in Glob and pp_caller (RT#131746)


author: Björn Esser <besser82@fedoraproject.org> - 4:5.26.1-404
changelog:
  - Add patch to conditionalize a fix for an old and long fixed bug
    in libcrypt / glibc (rhbz#1536752)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.1-407
changelog:
  - Fix parsing braced subscript after parentheses (RT#8045)
  - Fix a heap use after free when moving a stack (RT#131954)
  - Call ldconfig scriptlets using a macro


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.2-410
changelog:
  - 5.26.2 bump
  - Fix CVE-2018-6913 (heap buffer overflow in pp_pack.c) (bug #1567776)
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1567777)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1567778)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.2-412
changelog:
  - perl-devel requires redhat-rpm-config because of hardened compiler profiles
    (bug #1557667)
  - Do not clobber file bytes in :encoding layer (RT#132833)
  - Fix line numbers in multi-line s/// (RT#131930)
  - Fix parsing extended bracketed character classes (RT#132167)
  - Fix a possibly unitialized memory read in the Perl parser (RT#133074)
  - Fix an infinite loop in the regular expression compiler (RT#133185)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.2-413
changelog:
  - Adjust tests to gdbm-1.15 (RT#133295)
  - Fix an integer wrap when allocating memory for an environment variable
    (RT#133204)
  - Fix printing a warning about a wide character when matching a regular
    expression while ISO-8859-1 locale is in effect
  - Fix invoking a check for wide characters while ISO-8859-1 locale is in effect


author: Petr Pisar <ppisar@redhat.com> - 2.12-367
changelog:
  - Fix CVE-2017-6512 (setting arbitrary mode on an arbitrary file in rmtree()
    and remove_tree()) (bug #1457834)


author: Paul Howarth <paul@city-fan.org> - 2.059-1
changelog:
  - Update to 2.059 (bug #1610017)
    - Fix memory leak when CRLs are used (CPAN RT#125867)
    - Fix memory leak when using stop_SSL and threads
      (https://rt.cpan.org/Ticket/Display.html?id=125867#txn-1797132)


author: Petr Pisar <ppisar@redhat.com> - 2.059-2
changelog:
  - Adapt to OpenSSL 1.1.1, it requires patched Net-SSLeay (bug #1610017)
  - Enable tests (bug #1610017)


author: Paul Howarth <paul@city-fan.org> - 2.060-1
changelog:
  - Update to 2.060 (bug #1610017)
    - Support for TLS 1.3 with OpenSSL 1.1.1 (needs Net::SSLeay ≥ 1.86); see
      also CPAN RT#126899
    - TLS 1.3 support is not complete yet for session reuse


author: Petr Pisar <ppisar@redhat.com> - 2.060-3
changelog:
  - Client sends a post-handshake-authentication extension if a client key and
    a certificate are available (bug #1633636)


author: Paul Howarth <paul@city-fan.org> - 1.84-1
changelog:
  - Update to 1.84
    - Fixed an error in t/local/04_basic.t causing a test failure if
      Test::Exception not installed


author: Paul Howarth <paul@city-fan.org> - 1.85-1
changelog:
  - Update to 1.85
    - Preparations for transferring maintenace to a new maintainer
    - Fixed test failure in t/local/33_x509_create_cert.t for some versions of
      OpenSSL
    - Fixed free() error that causes "Free to wrong pool ..." message on Windows


author: Petr Pisar <ppisar@redhat.com> - 1.85-3
changelog:
  - Adapt to OpenSSL 1.1.1 (bug #1610376)
  - Adapt tests to system-wide crypto policy (bug #1610376)
  - Adapt tests to security level 2 system-wide crypt policy (bug #1610376)


author: Petr Pisar <ppisar@redhat.com> - 1.85-5
changelog:
  - Revert retry in Net::SSLeay::{read,write}() (bug #1610376)
  - Revert retry in Net::SSLeay::write_partial() (bug #1610376)


author: Petr Pisar <ppisar@redhat.com> - 3.28-2
changelog:
  - Introduce a build-condition on groff
  - Rename a _without_tk build-condition to
    _without_perl_Pod_Perldoc_enables_tk_test


author: Paul Howarth <paul@city-fan.org> - 1.71-5
changelog:
  - Soften Business::ISBN dependency from Requires: to Suggests: to avoid
    pulling in gd and X libraries (#1380152)


author: Petr Pisar <ppisar@redhat.com> - 3.10-2
changelog:
  - Net::libnetFAQ document replaced with a hyper link because of the Artistic
    license (CPAN RT#117888)


author: Paul Howarth <paul@city-fan.org> - 1:0.236-1
changelog:
  - Update to 0.236
    - Add Travis test configuration
    - Make test for PMC availability more reliable
    - Disable benchmark test rt62341.t as it runs out of memory on many smoker
      systems (CPAN RT#118310)
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1:0.237-1
changelog:
  - Update to 0.237
    - Don't load vars.pm (CPAN RT#132077)
  - Drop legacy Group: tag
  - Drop buildroot cleaning in %install section


author: zhangbinchen <zhangbinchen@openanolis.org> - 3.6.8-69.0.1
changelog:
  - Add Anolis platform
  - Support Loongarch for python3 (songmingliang@uniontech.com)
  - Fix testcase fails on loongarch64 (geliwei@openanolis.org)
  - cherry-pick `add sw patch #1182efa2f05c5804a55d35d45a9d72f97b64a9b2`. (Weisson@linux.alibaba.com)
    cherry-pick `sw use python of wordsize 64 #862dabb407d3f98c64f3a9d2675fcd3a6300a21f`.


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-2
changelog:
  - disable invocation of brp-python-bytecompile in postprocessing, since
  it would be with the wrong version of python (adapted from ivazquez'
  python3000 specfile)
  - use a custom implementation of __find_provides in order to filter out bogus
  provides lines for the various .so modules
  - fixup distutils/unixccompiler.py to remove standard library path from rpath
  (patch 1, was Patch0 in ivazquez' python3000 specfile)
  - split out libraries into a -libs subpackage
  - update summaries and descriptions, basing content on ivazquez' specfile
  - fixup executable permissions on .py, .xpm and .xbm files, based on work in
  ivazquez's specfile
  - get rid of DOS batch files
  - fixup permissions for shared libraries from non-standard 555 to standard 755
  - move /usr/bin/python*-config to the -devel subpackage
  - mark various directories as being documentation


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-3
changelog:
  - remove executable flag from various files that shouldn't have it
  - fix end-of-line encodings
  - fix a character encoding


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-4
changelog:
  - update patch0's setup of the crypt module to link it against libcrypt
  - update patch0 to comment "datetimemodule" back out, so that it is built
  using setup.py (see Setup, option 3), thus linking it statically against
  timemodule.c and thus avoiding a run-time "undefined symbol:
  _PyTime_DoubleToTimet" failure on "import datetime"


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-5
changelog:
  - fixup importlib/_bootstrap.py so that it correctly handles being unable to
  open .pyc files for writing (patch 2, upstream issue 7187)
  - actually apply the rpath patch (patch 1)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-6
changelog:
  - reword description, based on suggestion by amcnabb
  - fix the test_email and test_imp selftests (patch 3 and patch 4 respectively)
  - fix the test_tk and test_ttk_* selftests (patch 5)
  - fix up the specfile's handling of shebang/perms to avoid corrupting
  test_httpservers.py (sed command suggested by amcnabb)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-7
changelog:
  - remove commented-away patch 51 (python-2.6-distutils_rpm.patch): the -O1
  flag is used by default in the upstream code
  - "Makefile" and the config-32/64.h file are needed by distutils/sysconfig.py
  _init_posix(), so we include them in the core package, along with their parent
  directories (bug 531901)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-8
changelog:
  - add a provides of "python(abi)" (see bug 532118)
  - fix issues identified by a.badger in package review (bug 526126, comment 39):
    - use "3" thoughout metadata, rather than "3.*"
    - remove conditional around "pkg-config openssl"
    - use standard cleanup of RPM_BUILD_ROOT
    - replace hardcoded references to /usr with _prefix macro
    - stop removing egg-info files
    - use /usr/bin/python3.1 rather than /use/bin/env python3.1 when fixing
  up shebang lines
    - stop attempting to remove no-longer-present .cvsignore files
    - move the post/postun sections above the "files" sections


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-9
changelog:
  - add macros.python3 to the -devel subpackage, containing common macros for use
  when packaging python3 modules


author: Andrew McNabb <amcnabb@mcnabbs.org> - 3.1.1-10
changelog:
  - switched a few instances of "find |xargs" to "find -exec" for consistency.
  - made the description of __os_install_post more accurate.


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-11
changelog:
  - add %check section (thanks to Thomas Spura)
  - update patch 4 to use correct shebang line
  - get rid of stray patch file from buildroot


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-12
changelog:
  - remove build-time requirements on tix and tk, since we already have
  build-time requirements on the -devel subpackages for each of these (Thomas
  Spura)
  - replace usage of %define with %global (Thomas Spura)
  - remove forcing of CC=gcc as this old workaround for bug 109268 appears to
  longer be necessary
  - move various test files from the "tools"/"tkinter" subpackages to the "test"
  subpackage


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-14
changelog:
  - replace references to /usr with %{_prefix}; replace references to
  /usr/include with %{_includedir} (Toshio)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-15
changelog:
  - fix the URLs output by pydoc so they point at python.org's 3.1 build of the
  docs, rather than the 2.6 build


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-16
changelog:
  - use the %{_isa} macro to ensure that the python-devel dependency on python
  is for the correct multilib arch (#555943)
  - delete bundled copy of libffi to make sure we use the system one


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-19
changelog:
  - add %py3dir macro to macros.python3 (to be used during unified python 2/3
  builds for setting up the python3 copy of the source tree)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-20
changelog:
  - change python-3.1.1-config.patch to remove our downstream change to curses
  configuration in Modules/Setup.dist, so that the curses modules are built using
  setup.py with the downstream default (linking against libncursesw.so, rather
  than libncurses.so), rather than within the Makefile; add a test to %install
  to verify the dso files that the curses module is linked against the correct
  DSO (bug 539917; changes _cursesmodule.so -> _curses.so)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-21
changelog:
  - introduce %{dynload_dir} macro
  - explicitly list all lib-dynload files, rather than dynamically gathering the
  payload into a temporary text file, so that we can be sure what we are
  shipping
  - introduce a macros.pybytecompile source file, to help with packaging python3
  modules (Source3; written by Toshio)
  - rename "2to3-3" to "python3-2to3" to better reflect python 3 module packaging
  plans


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-22
changelog:
  - update python-3.1.1-config.patch to remove downstream customization of build
  of pyexpat and elementtree modules
  - add patch adapted from upstream (patch 7) to add support for building against
  system expat; add --with-system-expat to "configure" invocation
  - remove embedded copies of expat and zlib from source tree during "prep"


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-24
changelog:
  - move the -gdb.py file from %{_libdir}/INSTSONAME-gdb.py to
  %{_prefix}/lib/debug/%{_libdir}/INSTSONAME.debug-gdb.py to avoid noise from
  ldconfig (bug 562980), and which should also ensure it becomes part of the
  debuginfo subpackage, rather than the libs subpackage
  - introduce %{py_SOVERSION} and %{py_INSTSONAME} to reflect the upstream
  configure script, and to avoid fragile scripts that try to figure this out
  dynamically (e.g. for the -gdb.py change)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-25
changelog:
  - split configure options into multiple lines for easy of editing
  - add systemtap static markers (wcohen, mjw, dmalcolm; patch 8), a systemtap
  tapset defining "python.function.entry" and "python.function.return" to make
  the markers easy to use (dmalcolm; source 5), and an example of using the
  tapset to the docs (dmalcolm; source 6) (rhbz:545179)


author: Thomas Spura <tomspur@fedoraproject.org> - 3.1.1-26
changelog:
  - rebuild for new package of redhat-rpm-config (rhbz:564527)
  - use 'install -p' when running 'make install'


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-27
changelog:
  - add pyfuntop.stp example (source 7)
  - convert usage of $$RPM_BUILD_ROOT to %{buildroot} throughout, for
  consistency with python.spec


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-1
changelog:
  - update to 3.1.2: http://www.python.org/download/releases/3.1.2/
  - drop upstreamed patch 2 (.pyc permissions handling)
  - drop upstream patch 5 (fix for the test_tk and test_ttk_* selftests)
  - drop upstreamed patch 200 (path-fixing script)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-3
changelog:
  - update python-gdb.py from v3 to v4 (fixing infinite recursion on reference
  cycles and tracebacks on bytes 0x80-0xff in strings, adding handlers for sets
  and exceptions)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-5
changelog:
  - exclude test_http_cookies when running selftests, due to hang seen on
  http://koji.fedoraproject.org/koji/taskinfo?taskID=2088463 (cancelled after
  11 hours)
  - update python-gdb.py from v5 to py3k version submitted upstream


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-6
changelog:
  - build and install two different configurations of Python 3: debug and
  standard, packaging the debug build in a new "python3-debug" subpackage
  (patch 103)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-7
changelog:
  - add configure-time support for COUNT_ALLOCS and CALL_PROFILE debug options
  (patch 104); enable them and the WITH_TSC option within the debug build


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-10
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - reformat whitespace in audioop.c (patch 106)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 107)
  - CVE-2010-2089: further checks within the audioop module (patch 108)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 109)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-11
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 110; upstream issue 9054; rhbz#610312)


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.0.a1
changelog:
  - 3.2a1; add alphatag
  - rework %files in the light of PEP 3147 (__pycache__)
  - drop our configuration patch to Setup.dist (patch 0): setup.py should do a
  better job of things, and the %files explicitly lists our modules (r82746
  appears to break the old way of doing things).  This leads to various modules
  changing from "foomodule.so" to "foo.so".  It also leads to the optimized build
  dropping the _sha1, _sha256 and _sha512 modules, but these are provided by
  _hashlib; _weakref becomes a builtin module; xxsubtype goes away (it's only for
  testing/devel purposes)
  - fixup patches 3, 4, 6, 8, 102, 103, 105, 111 for the rebase
  - remove upstream patches: 7 (system expat), 106, 107, 108 (audioop reformat
  plus CVE-2010-1634 and CVE-2010-2089), 109 (CVE-2008-5983)
  - add machinery for rebuilding "configure" and friends, using the correct
  version of autoconf (patch 300)
  - patch the debug build's usage of COUNT_ALLOCS to be less verbose (patch 125)
  - "modulator" was removed upstream
  - drop "-b" from patch applications affecting .py files to avoid littering the
  installation tree


author: Thomas Spura <tomspur@fedoraproject.org> - 3.2-0.1.a1
changelog:
  - on 64bit "stdlib" was still "/usr/lib/python*" (modify *lib64.patch)
  - make find-provides-without-python-sonames.sh 64bit aware


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.3.a1
changelog:
  - Move test.support to core package (rhbz#596258)
  - Add various missing __pycache__ directories to payload


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.4.a1
changelog:
  - move most of the content of the core package to the libs subpackage, given
  that the libs aren't meaningfully usable without the standard libraries


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.5.b2
changelog:
  - 3.2b2
  - rework patch 3 (removal of mimeaudio tests), patch 6 (no static libs),
  patch 8 (systemtap), patch 102 (lib64)
  - remove patch 4 (rendered redundant by upstream r85537), patch 103 (PEP 3149),
  patch 110 (upstreamed expat fix), patch 111 (parallel build fix for grammar
  fixed upstream)
  - regenerate patch 300 (autotool intermediates)
  - workaround COUNT_ALLOCS weakref issues in test suite (patch 126, patch 127,
  patch 128)
  - stop using runtest.sh in %check (dropped by upstream), replacing with
  regrtest; fixup list of failing tests
  - introduce "pyshortver", "SOABI_optimized" and "SOABI_debug" macros
  - rework manifests of shared libraries to use "SOABI_" macros, reflecting
  PEP 3149
  - drop itertools, operator and _collections modules from the manifests as py3k
  commit r84058 moved these inside libpython; json/tests moved to test/json_tests
  - move turtle code into the tkinter subpackage


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.8.b2
changelog:
  - set EXTRA_CFLAGS to our CFLAGS, rather than overriding OPT, fixing a linker
  error with dynamic annotations (when configured using --with-valgrind)
  - fix the ppc build of the debug configuration (patch 130; rhbz#661510)


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.9.rc1
changelog:
  - 3.2rc1
  - rework patch 6 (static lib removal)
  - remove upstreamed patch 130 (ppc debug build)
  - regenerate patch 300 (autotool intermediates)
  - updated packaging to reflect upstream rewrite of "Demo" (issue 7962)
  - added libpython3.so and 2to3-3.2


author: David Malcolm <dmalcolm@redhat.com> - 3.2.1-1
changelog:
  - 3.2.1; refresh lib64 patch (102), subprocess unit test patch (129), disabling
  of static library build (due to Modules/_testembed; patch 6), autotool
  intermediates (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.1-5
changelog:
  - re-enable and fix the --with-tsc option on ppc64, and rework it on 32-bit
  ppc to avoid aliasing violations (patch 130; rhbz#698726)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-2
changelog:
  - rewrite of "check", introducing downstream-only hooks for skipping specific
  cases in an rpmbuild (patch 132), and fixing/skipping failing tests in a more
  fine-grained manner than before; (patches 106, 133-142 sparsely, moving
  patches for consistency with python.spec: 128 to 134, 126 to 135, 127 to 141)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-3
changelog:
  - renumber and rename patches for consistency with python.spec (8 to 55, 106
  to 104, 6 to 111, 104 to 113, 105 to 114, 125, 131, 130 to 143)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-5
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib; don't build the _md5 and
  _sha* modules, relying on _hashlib in hashlib (rhbz#563986; patch 146)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.3-1
changelog:
  - 3.2.3; refresh patch 102 (lib64); drop upstream patches 148 (gdbm magic
  values), 149 (__pycache__ fix); add patch 152 (test_gdb regex)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.3-4
changelog:
  - avoid allocating thunks in ctypes unless absolutely necessary, to avoid
  generating SELinux denials on "import ctypes" and "import uuid" when embedding
  Python within httpd (patch 155; rhbz#814391)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.3-7
changelog:
  - update uid/gid handling to avoid int overflows seen with uid/gid
  values >= 2^31 on 32-bit architectures (patch 157; rhbz#697470)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.1.b1
changelog:
  * Fri Jun 22 2012 David Malcolm <dmalcolm@redhat.com> - 3.2.3-10
  - use macro for power64 (rhbz#834653)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.1.b1
changelog:
  - 3.2 -> 3.3: https://fedoraproject.org/wiki/Features/Python_3.3
  - 3.3.0b1: refresh patches 3, 55, 102, 111, 113, 114, 134, 157; drop upstream
  patch 147; regenenerate autotools patch; drop "--with-wide-unicode" from
  configure (PEP 393); "plat-linux2" -> "plat-linux" (upstream issue 12326);
  "bz2" -> "_bz2" and "crypt" -> "_crypt"; egg-info files are no longer shipped
  for stdlib (upstream issues 10645 and 12218); email/test moved to
  test/test_email; add /usr/bin/pyvenv[-3.3] and venv module (PEP 405); add
  _decimal and _lzma modules; make collections modules explicit in payload again
  (upstream issue 11085); add _testbuffer module to tests subpackage (added in
  upstream commit 3f9b3b6f7ff0); fix test failures (patches 160 and 161);
  workaround erroneously shared _sysconfigdata.py upstream issue #14774; fix
  distutils.sysconfig traceback (patch 162); add BuildRequires: xz-devel (for
  _lzma module); skip some tests within test_socket (patch 163)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.3.b2
changelog:
  - 3.3b1 -> 3.3b2; drop upstreamed patch 152; refresh patches 3, 102, 111,
  134, 153, 160; regenenerate autotools patch; rework systemtap patch to work
  correctly when LANG=C (patch 55); importlib.test was moved to
  test.test_importlib upstream


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.3.0-8
changelog:
  - Fix error in platform.platform() when non-ascii byte strings are decoded to
    unicode (rhbz#922149)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-1
changelog:
  - Updated to Python 3.3.1.
  - Refreshed patches: 55 (systemtap), 111 (no static lib), 146 (hashlib fips),
  153 (fix test_gdb noise), 157 (uid, gid overflow - fixed upstream, just
  keeping few more downstream tests)
  - Removed patches: 3 (audiotest.au made it to upstream tarball)
  - Removed workaround for http://bugs.python.org/issue14774, discussed in
  http://bugs.python.org/issue15298 and fixed in revision 24d52d3060e8.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-3
changelog:
  - Add patch that enables building on ppc64p7 (replace the sed, so that
  we get consistent with python2 spec and it's more obvious that we're doing it.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-1
changelog:
  - Updated to Python 3.3.2.
  - Refreshed patches: 153 (gdb test noise)
  - Dropped patches: 175 (configure -Wformat, fixed upstream), 182 (gdb
  test threads)
  - Synced patch numbers with python.spec.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.a4
changelog:
  - Update to Python 3.4 alpha 4.
  - Refreshed patches: 55 (systemtap), 102 (lib64), 111 (no static lib),
  114 (statvfs flags), 132 (unittest rpmbuild hooks), 134 (fix COUNT_ALLOCS in
  test_sys), 143 (tsc on ppc64), 146 (hashlib fips), 153 (test gdb noise),
  157 (UID+GID overflows), 173 (ENOPROTOOPT in bind_port), 186 (dont raise
  from py_compile)
  - Removed patches: 129 (test_subprocess nonreadable dir - no longer fails in
  Koji), 142 (the mock issue that caused this is fixed)
  - Added patch 187 (remove thread atfork) - will be in next version
  - Refreshed script for checking pyc and pyo timestamps with new ignored files.
  - The fips patch is disabled for now until upstream makes a final decision
  what to do with sha3 implementation for 3.4.0.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.b1
changelog:
  - Update to Python 3.4 beta 1.
  - Refreshed patches: 102 (lib64), 111 (no static lib), 125 (less verbose COUNT
  ALLOCS), 141 (fix COUNT_ALLOCS in test_module), 146 (hashlib fips),
  157 (UID+GID overflows), 173 (ENOPROTOOPT in bind_port)
  - Removed patch 00187 (remove pthread atfork; upstreamed)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.b2
changelog:
  - Update to Python 3.4 beta 2.
  - Refreshed patches: 55 (systemtap), 146 (hashlib-fips), 154 (test_gdb noise)
  - Dropped patches: 114 (statvfs constants), 177 (platform unicode)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.0-5
changelog:
  - Don't add Werror=declaration-after-statement for extension
    modules through setup.py (PyBT#21121)


author: Dan Horák <dan[at]danny.cz> - 3.4.1-7
changelog:
  - update the arch list where valgrind exists - %power64 includes also
      ppc64le which is not supported yet


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-1
changelog:
  - Update to 3.4.2
  - Refreshed patches: 156 (gdb autoload)
  - Removed: 195 (Werror declaration), 197 (CVE-2014-4650)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-7
changelog:
  - Fixed undefined behaviour in faulthandler which caused test to hang on x86_64
    (http://bugs.python.org/issue23433)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.3-1
changelog:
  - Updated to 3.4.3
  - BuildPython now accepts additional build options
  - Temporarily disabled test_gdb on arm (rhbz#1196181)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.3-4
changelog:
  - Use 1024bit DH key in test_ssl
  - Use -O0 when compiling -debug build
  - Update pip version variable to the version we actually ship


author: Thomas Spura <tomspur@fedoraproject.org> - 3.4.3-4
changelog:
  - python3-devel: Require python-macros for version independant macros such as
    python_provide. See fpc#281 and fpc#534.


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-9
changelog:
  - Fix for: CVE-2016-0772 python: smtplib StartTLS stripping attack
  - Raise an error when STARTTLS fails
  - rhbz#1303647: https://bugzilla.redhat.com/show_bug.cgi?id=1303647
  - rhbz#1346345: https://bugzilla.redhat.com/show_bug.cgi?id=1346345
  - Fixed upstream: https://hg.python.org/cpython/rev/d590114c2394


author: Tomas Orsava <torsava@redhat.com> - 3.5.2-1
changelog:
  - Rebased to version 3.5.2
  - Set to work with pip version 8.1.2
  - Removed patches 207, 237, 241 as fixes are already contained in Python 3.5.2
  - Removed arch or environment specific patches 194, 196, 203, and 208
    as test builds indicate they are no longer needed
  - Updated patches 102, 146, and 242 to work with the new Python codebase
  - Removed patches 200, 201, 5000 which weren't even being applied


author: Tomas Orsava <torsava@redhat.com> - 3.5.2-2
changelog:
  - Updated .pyc 'bytecompilation with the newly installed interpreter' to also
    recompile optimized .pyc files
  - Removed .pyo 'bytecompilation with the newly installed interpreter', as .pyo
    files are no more
  - Resolves rhbz#1373635


author: Charalampos Stratakis <cstratak@redhat.com> - 3.5.2-6
changelog:
  - Use proper patch numbering and base upstream branch for
  porting ssl and hashlib modules to OpenSSL 1.1.0
  - Drop hashlib patch for now
  - Add riscv64 arch to 64bit and no-valgrind arches


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-7
changelog:
  - Fix error check, so that Random.seed actually uses OS randomness (rhbz#1412275)
  - Skip test_aead_aes_gcm during rpmbuild


author: Tomas Orsava <torsava@redhat.com> - 3.6.0-8
changelog:
  - Modify the runtime dependency of python3-libs on system-python-libs to use
    just the version and release number, but not the dist tag due to Modularity


author: Tomas Orsava <torsava@redhat.com> - 3.6.0-9
changelog:
  - Modify the runtime dependency of python3-libs on system-python-libs again,
    because previous attempt didn't work properly with dnf resolving mechanism


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-12
changelog:
  - BuildRequire the new dependencies of setuptools when rewheel mode is enabled
  in order for the virtualenvs to work properly


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.0-18
changelog:
  - Set values of prefix and exec_prefix to /usr/local for
    /usr/bin/python* executables
  - Use new %_module_build macro


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.0-19
changelog:
  - Revert "Set values of prefix and exec_prefix to /usr/local for
    /usr/bin/python* executables..." to prevent build failures
    of packages using alternate build tools


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-21
changelog:
  - Use proper command line parsing in _testembed
  - Backport of PEP 538: Coercing the legacy C locale to a UTF-8 based locale
    https://fedoraproject.org/wiki/Changes/python3_c.utf-8_locale


author: Iryna Shcherbina <ishcherb@redaht.com> - 3.6.1-0.1.rc1
changelog:
  - Update to Python 3.6.1 release candidate 1
  - Add patch 264 to skip a known test failure on aarch64


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.1-6
changelog:
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Update to a newer implementation of PEP 538
  - Update description to reflect that Python 3 is now the default Python


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-7
changelog:
  - Added a dependency to the devel subpackage on python3-rpm-generators which
    have been excised out of rpm-build
  - Updated notes on bootstrapping Python on top of this specfile accordingly
  - Involves: rhbz#1410631, rhbz#1444925


author: Florian Weimer <fweimer@redhat.com> - 3.6.2-4
changelog:
  - Do not generate debuginfo subpackages (#1476593)
  - Rebuild with binutils fix for ppc64le (#1475636)


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-5
changelog:
  - Dropped BuildRequires on db4-devel which was useful for Python 2 (module
    bsddb), however, no longer needod for Python 3
  - Tested building Python 3 with and without the dependency, all tests pass and
    filelists of resulting RPMs are identical


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.2-7
changelog:
  - Revert "Add --executable option to install.py command"
    This enhancement is currently not needed and it can possibly
    collide with `pip --editable`option


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-8
changelog:
  - Have /usr/bin/2to3 (rhbz#1111275)
  - Provide 2to3 and idle3, list them in summary and description (rhbz#1076401)


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-11
changelog:
  - Add bcond for --without optimizations
  - Reword package descriptions
  - Remove Group declarations
  - Skip failing test_float_with_comma


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.2-12
changelog:
  - Use python3 style of calling super() without arguments in rpath
    patch to prevent recursion in UnixCCompiler subclasses
  Resolves: rhbz#1458122


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-13
changelog:
  - Rename patch files to be consistent
  - Run autotools to generate the configure script before building
  - Merge lib64 patches (104 into 102)
  - Skip test_bdist_rpm using test config rather than a patch (removes patch 137)
  - Remove patches 157 and 186, which had test changes left over after upstreaming
  - Remove patch 188, a temporary workaround for hashlib tests
  - Merge patches 180, 206, 243, 5001 (architecture naming) into new patch 274
  - Move python2-tools conflicts to tools subpackage (it was wrongly in tkinter)


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-14
changelog:
  - Expat >= 2.1.0 is everywhere, remove explicit requires
  - Conditionalize systemtap-devel BuildRequires
  - For consistency, require /usr/sbin/ifconfig instead of net-tools


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-16
changelog:
  - Specfile cleanup
  - Make the main description also applicable to the SRPM
  - Add audiotest.au to the test package


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-19
changelog:
  - Move pathfix.py to bindir, https://github.com/fedora-python/python-rpm-porting/issues/24
  - Make the -devel package require redhat-rpm-config
  Resolves: rhbz#1496757


author: Björn Esser <besser82@fedoraproject.org> - 3.6.4-8
changelog:
  - Add patch to explicitly link _ctypes module with -ldl (#1537489)
  - Refactored patch for libxcrypt
  - Re-enable strict symbol checks in the link editor


author: Tomas Orsava <torsava@redhat.com> - 3.6.4-10
changelog:
  - Disable test_gdb for all arches and test_buffer for ppc64le in anticipation
    of the F28 mass rebuild
  - Re-enable these tests after the mass rebuild when they can be properly
    addressed


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.4-14
changelog:
  - Remove the python3-tools package (#rhbz 1312030)
  - Move /usr/bin/2to3 to python3-devel
  - Move /usr/bin/idle and idlelib to python3-idle
  - Provide python3-tools from python3-idle


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.4-15
changelog:
  - Filter out automatic /usr/bin/python3.X requirement,
    recommend the main package from libs instead
  Resolves: rhbz#1547131


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.4-18
changelog:
  - Fix the py_byte_compile macro to work on Python 2
  - Remove the pybytecompile macro file from the flat package
  Resolves: rhbz#1484993


author: Tomas Orsava <torsava@redhat.com> - 3.6.5-3
changelog:
  - Platform-Python: Rebase implementation from RHEL8 Alpha:
  - Move the main executable to /usr/libexec/platform-python
  - Move /usr/bin/python*-config and /usr/bin/pythonX.Ym scripts to /usr/libexec/
  - Provide symlink to the main executable and other scripts from /usr/bin/,
    these will be later shipped only in the python36 module


author: Tomas Orsava <torsava@redhat.com> - 3.6.5-7
changelog:
  - Fix %py_byte_compile macro: when invoked with a Python 2 binary it also
    mistakenly ran py3_byte_compile


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-4
changelog:
  - Create the `libs-devel` subpackage and move `devel` contents there
  - `devel` subpackage is only for the buildroot and requires `python36-devel`
    to get /usr/bin/python3{,-config} symlinks there
  - `devel` subpackage will not be shipped into RHEL8, only `libs-devel` will
  - `debug` subpackage now runtime requires `libs-devel` instead of `devel`


author: Petr Viktorin <pviktori@redhat.com> - 3.6.6-5
changelog:
  - Fix the `devel` subpackage to require python3, rather than python36-devel,
    and provide /usr/bin/python3-config itself.


author: Petr Viktorin <pviktori@redhat.com> - 3.6.6-6
changelog:
  - Make `devel` subpackage require python36-devel again
    (and get /usr/bin/python3 and /usr/bin/python3-config from that).
  - Remove /usr/bin/python3* executables
  - Use pip36 instead of `pip3`


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-9
changelog:
  - Rename the python3 subpackage to platform-python
  - Provide the `python3` name for backwards compatibility until it's taken over
    by the python36 component
  - The python36 component that contains /usr/bin/python3 will Provide the
    name `python3` in its upcoming update
  - Resolves: rhbz#1619153


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-11
changelog:
  - Implement `alternatives` for chosing /usr/bin/python
  - Provide the default `no-python` alternative
  - Resolves: rhbz#1632625


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-12
changelog:
  - Rename the python3-debug subpackage to platform-python-debug
  - Provide the `python3-debug` name for backwards compatibility until it's taken
    over by the python36 component
  - Rename the python3-libs-devel subpackage to platform-python-devel for
    symmetry with the `platform-python` and `platform-python-debug` package
  - Add symlink /usr/libexec/platform-python-debug that was mistakenly omitted
  - Related: rhbz#1619153


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-13
changelog:
  - Stop providing the `python3` and `python3-debug` names from the
    platform-python/-debug subpackages
  - The `python3` and `python3-debug` names are now provided from the python36
    component
  - Conflict with older versions of `python3` and `python3-debug`
  - Related: rhbz#1619153


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.7-1
changelog:
  - Update to 3.6.7 (rhbz#1627739)
  - Re-enable test_gdb (rhbz#1639536)
  - Re-enable test_faulthandler (rhbz#1640147)


author: Tomas Orsava <torsava@redhat.com> - 3.6.7-2
changelog:
  - Switch to requiring platform-python-pip/setuptools instead of the python3-
    versions
  - Resolves: rhbz#1638836


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-7
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1704365 and rhbz#1703531


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-9
changelog:
  - Reduced default build flags used to build extension modules
    https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  Resolves: rhbz#1634784


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-12
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require platform-python-setuptools from platform-python-devel to prevent packaging errors
  Resolves: rhbz#1701286


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-13
changelog:
  - Do not set PHA verify flag on client side (rhbz#1725721)
  - Enable TLS 1.3 post-handshake authentication in http.client (rhbz#1671353)


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-14
changelog:
  - Adding a new patch 329 that adds support for OpenSSL FIPS mode
  - Explicitly listing man pages in files section to fix an RPM warning
  Resolves: rhbz#1731424


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-15
changelog:
  - Patch 329 that adds support for OpenSSL FIPS mode has been improved and
    bugfixed
  Resolves: rhbz#1744670 rhbz#1745499 rhbz#1745685


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-16
changelog:
  - Properly pass the -Og optimization flag to the debug build
  Resolves: rhbz#1712977 and rhbz#1714733


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-18
changelog:
  - Reduce the number of tests running during the profile guided optimizations build
  - Enable profile guided optimizations for all the supported architectures
  Resolves: rhbz#1749576


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-19
changelog:
  - Skip windows specific test_get_exe_bytes test case and enable test_distutils
  Resolves: rhbz#1754040


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-21
changelog:
  - Patch 329 (FIPS) modified: Added workaround for mod_ssl:
    Skip error checking in _Py_hashlib_fips_error
  Resolves: rhbz#1760106


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-22
changelog:
  - Changed Requires into Recommends for python3-pip to allow a lower RHEL8
    footprint for containers and other minimal environments
  Resolves: rhbz#1756217


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-23
changelog:
  - Modify the test suite to better handle disabled SSL/TLS versions and FIPS mode
  - Use OpenSSL's DRBG and disable os.getrandom() function in FIPS mode
  Resolves: rhbz#1754028, rhbz#1754027, rhbz#1754026, rhbz#1774471


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-24
changelog:
  - Build Python with -fno-semantic-interposition for better performance
  - https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup
  - Also fix test_gdb failures with Link Time Optimizations
  Resolves: rhbz#1724996


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-26
changelog:
  - Skip test_startup_imports from test_site if we have a .pth file in sys.path
  Resolves: rhbz#1814392


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-27
changelog:
  - Add a sentinel value on the Hmac_members table of the fips compliant hmac module
  Resolves: rhbz#1800512


author: Victor Stinner <vstinner@python.org> - 3.6.8-30
changelog:
  - Remove downstream 00178-dont-duplicate-flags-in-sysconfig.patch which
    introduced a bug on distutils.sysconfig.get_config_var('LIBPL')
    (rhbz#1851090).


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-31
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481
  - Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
  Resolves: rhbz#1854926


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-32
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in http.client
  Resolves: rhbz#1883257


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-33
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868003


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-34
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1890237


author: Victor Stinner <vstinner@redhat.com> - 3.6.8-39
changelog:
  - Fix reentrant call to threading.enumerate() (rhbz#1959459)
  - Don't exit Python with abort() when a thread exit and there is no available
    file descriptor to load dynamically the libgcc_s.so.1 library (rhbz#1972293)


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-41
changelog:
  - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
  Resolves: rhbz#1995234


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-43
changelog:
  - Change shouldRollover() methods of logging.handlers to only rollover regular files
  Resolves: rhbz#2009200


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-44
changelog:
  - Use the monotonic clock for theading.Condition
  - Use the monotonic clock for the global interpreter lock
  Resolves: rhbz#2003758


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-45
changelog:
  - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
  Resolves: rhbz#2036020


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-46
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2047376, rhbz#2060435


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-50
changelog:
  - Security fix for CVE-2022-45061
  - Strip the LTO bytecode from python.o
  Resolves: rhbz#2144072, rhbz#2137707


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-58
changelog:
  - Security fix for CVE-2022-48564
  Resolves: RHEL-16674
  - Skip tests failing on s390x
  Resolves: RHEL-19252


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-70
changelog:
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-16
changelog:
  - Add four new patches for CVEs in bundled urllib3 and requests
  CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
  Resolves: rhbz#1649153
  Resolves: rhbz#1700824
  Resolves: rhbz#1702473
  Resolves: rhbz#1643829


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-18
changelog:
  - Patch for pip install <url> allow directory traversal, leading to arbitrary file write
  Resolves: rhbz#1868016


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-20
changelog:
  - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
  Resolves: rhbz#1962856


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-4
changelog:
  - New subpackage platform-python-setuptools without files from /usr/bin/*
  - python3-setuptools contains only files from /usr/bin/* and depends
    on platform-python-setuptools
  - Resolves: rhbz#1641973


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.4-1
changelog:
  - First build from the distribute codebase -- distribute-0.6.4.
  - Remove svn patch as upstream has chosen to go with an easier change for now.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.7-1
changelog:
  - Move easy_install back into the main package as the needed files have been
    moved from python-devel to the main python package.
  - Update to 0.6.7 bugfix.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.9-4
changelog:
  - Fix install to make /usr/bin/easy_install the py2 version
  - Don't need python3-tools since the library is now in the python3 package
  - Few other changes to cleanup style


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.10-1
changelog:
  - Update the python3 portions but disable for now.
  - Update to 0.6.10
  - Remove %pre scriptlet as the file has a different name than the old
    package's directory


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.13-5
changelog:
  - Upstream patch for compatibility problem with setuptools
  - Minor spec cleanups
  - Provide python-distribute for those who see an import distribute and need
    to get the proper package.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.28-1
changelog:
  - New upstream release:
    - python-3.3 fixes
    - honor umask when setuptools is used to install other modules


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.8-1
changelog:
  - Update to upstream 0.8  release.  Codebase now runs on anything from
    python-2.4 to python-3.3 without having to be translated by 2to3.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.9.5-1
changelog:
  - Update to 0.9.5
    - package_index can handle hashes other than md5
    - Fix security vulnerability in SSL certificate validation
    - https://bugzilla.redhat.com/show_bug.cgi?id=963260


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.1.6-1
changelog:
  - Update to newer upstream release.  Some minor incompatibilities listed but
    they should affect few, if any consumers.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.1.7-1
changelog:
  - Update to newer upstream release that has our patch to the unittests
  - Fix for http://bugs.python.org/issue17997#msg194950 which affects us since
    setuptools copies that code. Changed to use
    python-backports-ssl_match_hostname so that future issues can be fixed in
    that package.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0-1
changelog:
  - Update to new upstream release with a few things removed from the API:
    Changelog: https://pypi.python.org/pypi/setuptools#id139


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0-8
changelog:
  - Remove the python-setuptools-devel Virtual Provides as per this Fedora 21
    Change: http://fedoraproject.org/wiki/Changes/Remove_Python-setuptools-devel


author: Ralph Bean <rbean@redhat.com> - 6.0.2-2
changelog:
  - Modernized python2 macros.
  - Inlined locale environment variables in the %check section.
  - Remove bundled egg-info and .exes.


author: Kevin Fenzi <kevin@scrye.com> 17.1.1-3
changelog:
  - Drop no longer needed Requires/BuildRequires on python-backports-ssl_match_hostname
  - Fixes bug #1231325


author: Kevin Fenzi <kevin@scrye.com> - 34.1.1-1
changelog:
  - Update to 34.1.1. Fixes bug #1412268
  - Fix License tag. Fixes bug #1412268
  - Add Requires for fomerly bundled projects: six, packaging appdirs


author: Michal Cyprian <mcyprian@redhat.com> - 36.2.0-3
changelog:
  - Revert "Add --executable option to easy_install command"
    This enhancement is currently not needed and it can possibly
    collide with `pip --editable`option


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-4
changelog:
  - Switch macros to bcond's and make Python 2 optional to facilitate building
    the Python 2 and Python 3 modules.


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-5
changelog:
  - Add Patch 0 that fixes a test suite failure on Python 3 in absence of
    the Python 2 version of pip
  - Move docs to their proper place


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-6
changelog:
  - Add the platform-python subpackage
  - Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-7
changelog:
  - Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Miro Hrončok <mhroncok@redhat.com> - 37.0.0-1
changelog:
  - Update to 37.0.0 (fixes #1474126)
  - Removed not needed pip3 patch (upstream included different version of fix)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-19
changelog:
  - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7)
  - semodule: add command-line option to detect module changes (#2049189)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-20
changelog:
  - python: Split "semanage import" into two transactions (#2063353)
  - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-21.1
changelog:
  - python: Harden tools against "rogue" modules (#2128976)
  - Update "pathfix" arguments to match ^^^ (#2128976)
  - python: Do not query the local database if the fcontext is non-local (#2124825)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-25
changelog:
  - Harden more tools against "rogue" modules (RHEL-17351)
  - sepolicy: port to dnf4 python API (RHEL-17398)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-26
changelog:
  - python/semanage: Allow modifying records on "add" (RHEL-28167)
  - python/semanage: Do not sort local fcontext definitions (RHEL-24461)


author: Jan Rybar <jrybar@redhat.com> - 0.115-15.1
changelog:
  - reduce waking session monitor on uninteresting session changes
  - make polkit-pkla-compat uninstallable (for cases when no .pkla on system)
  - Resolves: RHEL-34029


author: Panu Matilainen <pmatilai@redhat.com> - 1.18-1
changelog:
  - Rebase to popt 1.18 (https://github.com/rpm-software-management/popt/releases/tag/popt-1.18-release)
  - Update URLs to rebooted upstream
  - Clean up ancient cruft from spec, use modern build macros


author: Tim Waugh <twaugh@redhat.com> 0.0.1-1
changelog:
  - Default permissions for directories.
  - Initscript should not be marked config.
  - Fixed license tag.
  - Better buildroot tag.


author: Tim Waugh <twaugh@redhat.com> 0.0.1-2
changelog:
  - More consistent use of macros.
  - Build requires xmlto.
  - Don't use %makeinstall.
  - No need to run make check.


author: Tim Waugh <twaugh@redhat.com> 0.0.3-1
changelog:
  - 0.0.3:
    - Allow multiple services to be defined in a single configuration
      file.
    - Allow protocol specifications, e.g. ipp/udp.


author: Tim Waugh <twaugh@redhat.com> 0.0.4-1
changelog:
  - 0.0.4:
    - Fixed initscript so that it will not be reordered to start after
      rpcbind (bug #487250).


author: Tim Waugh <twaugh@redhat.com> - 0.0.5-9
changelog:
  - Avoid a race during start-up if there are no configured ports (bug #901988).
  - Moved tmpfiles configuration file to correct location.
  - Don't use %ghost in manifest for state directory, in order to make
    sure it is ready to use after installation.


author: Michal Ruprich <mruprich@redhat.com> - 0.0.5-20
changelog:
  - RHEL-2863 - Creating tmp files for systemd on behalf of portreserve references legacy directory /var/run/ instead of /run


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.3.1-10
changelog:
  - Release bump and rebuild for relengs to be able to ship postfix-pcre,
    postfix-cdb, postfix-sqlite
    Resolves: rhbz#1745321


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.8-2
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1977732


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.8-5
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#1787010
  - Fix building in ZUUL CI
    Resolves: rhbz#2196577


author: Jan Rybar <jrybar@redhat.com> - 3.3.15-8
changelog:
  - vmstat: added -y option to omit first report
  - Resolves: rhbz#2027350
  - sysctl: backport config directory order, align with systemd
  - Resolves: rhbz#2111915


author: Jan Rybar <jrybar@redhat.com> - 6.6.3-2
changelog:
  - lastcomm: added new --pid option to show process PID and PPID
  - changelog update: 6.6.3-1 author change
  - spec file update: added correct access mode to created /var/account/pacct


author: Jan Rybar <jrybar@redhat.com> - 23.1
changelog:
  - Rebase to the newest upstream official release
  - Source0 updated to latest functional SourceForge URL format
  - peekfd manpage now not present if peekfd binary missing on given architecture
  - URL of the project updated
  - new tool pslog added with rebase
  - Resolves: #1460695


author: liuzhilin <liuzhilin@uniontech.com> - 1.11.5-6.0.1
changelog:
  - Remove releated unversioned python macro that not supported now
    (See https://docs.fedoraproject.org/en-US/packaging-guidelines/Python/#_macros)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.0.4-3
changelog:
  - Python 2 binary package renamed to python2-chardet
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:1.1.fb23-4
changelog:
  - Python 2 binary package renamed to python2-configshell
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Christian Heimes <cheimes@redhat.com> - 2.3-1
changelog:
  - New upstream release 2.3
  - Fix AEAD tag truncation bug, CVE-2018-10903, RHBZ#1602755, RHBZ#1602932


author: Christian Heimes <cheimes@redhat.com> - 3.2.1-1
changelog:
  - Rebase to upstream release 3.2.1
  - Resolves: rhbz#1873581
  - Resolves: rhbz#1778939
  - Removed dependencies on python-asn1crypto, python-idna


author: Christian Heimes <cheimes@redhat.com> - 3.2.1-4
changelog:
  - CVE-2020-36242: Fixed a bug where certain sequences of update() calls
    when symmetrically encrypting very large payloads (>2GB) could result
    in an integer overflow, leading to buffer overflows.
  - Resolves: rhbz#1926528


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:2.6.1-2
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-9
changelog:
  - Python 2 binary package renamed to python2-dbus
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-10
changelog:
  - Also add Provides for the old name without %_isa
  - Use %python_provide for the python3 subpackage and drop manual Provide which
    conflicts with %python_provide in the python2 subpackage.


author: Miro Hrončok <mhroncok@redhat.com> - 0.13-1
changelog:
  - Updated to 0.13
  - Added python3 and python2 subpackages
  - Add --with tests
  - Modernize spec
  - Remove merged patch
  - Update upstream URL


author: Lumír Balhar <lbalhar@redhat.com> - 0.14-3
changelog:
  - Backport patch from upstream/rhel7 which allows pifconfig to show
    multiple IPv4 addresses for each interface
  - Move patches to dist-git
  - Resolves: rhbz#1652174


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Carl George <carl@george.computer> - 1.6.1-1
changelog:
  - Latest upstream
  - Add patch0 to remove pytest-{cov,runner} deps
  - Share doc and license dir between subpackages
  - Enable EPEL PY3 build


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9-16
changelog:
  - Python 2 binary package renamed to python2-kmod
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: John Kacur <jkacur@redhat.com> - 0.6.2-1
changelog:
  - Add bitmasklist_test
  - Clean-ups including using a more modern python spacing, tabbing, etc
  - Fix to parse number of cpus correctly on s390(x)
  Resolves: rhbz#1849215


author: John Kacur <jkacur@redhat.com> - 0.6.3-4
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2016204


author: John Kacur <jkacur@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream python-linux-procfs-0.7.3
  - This rebase removes upstream spec files and
  - syncs the git tag with version
  Resolves: RHEL-9195


author: John Dennis <jdennis@redhat.com> - 2.0.1-1
changelog:
  - Upgrade to upstream 2.0.1
  - port from jwt to jwcrypto (conditional build)
  - bring into alignment with rhel spec file


author: mulhern <amulhern@redhat.com> - 0.19.0
changelog:
  - Never raise a DeviceNotFoundError when iterating over a device enumeration
  - Device.subsystem() now returns None if device has no subsystem
  - Add DeprecationWarnings to deprecated Device methods
  - Replace "/" with "!" in Device.from_name() sys_name parameter
  - Add some unstable classes for parsing some kinds of values
  - Make version info more like Python's including micro numbers and levels
  - Refactor some internal modules into subdirectories
  - Work on tests and reproducers


author: mulhern <amulhern@redhat.com> - 0.20.0
changelog:
  - Remove parsing code added in previous release
  - No longer do CI for Python 2.6
  - Eliminate all wildcard imports and __all__ statements
  - No longer use deprecated Device.from_sys_path() method
  - Minor pylint induced changes
  - Documentation fixes


author: mulhern <amulhern@redhat.com> - 0.21.1
changelog:
  - Deprecate use of Device object as mapping from udev property names to values
  - Add a Properties class and a Device.properties() method for udev properties
  - Fix places where Device object was incorrectly used in a boolean context
  - Return an empty string, not None, if the property value is an empty string
  - Exceptions re-raised from libudev calls now have a message string
  - Insert a warning about using a Device in a boolean context in docs
  - Infrastructure for vagrant tests is removed
  - Various internal refactorings
  - Extensive test improvements
  - Numerous documentation fixes


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.10.0-3
changelog:
  - Python 2 binary package renamed to python2-pywbem
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tony Asleson <tasleson@redhat.com> - 0.11.0-8
changelog:
  - Fix the conflict with sblim-wbemcli: RHBZ #1757855
  - Corrected warning about multiple file inclusion


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.12-6
changelog:
  - Python 2 binary package renamed to python2-pyyaml
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 3.12-12
changelog:
  - Rename python3-PyYAML to python3-pyyaml
  - Modernize spec
  - Fix python2 invocation

  - Cherry-picked from: https://src.fedoraproject.org/rpms/PyYAML/pull-request/2


author: Lumír Balhar <lbalhar@redhat.com> - 2.20.0-4
changelog:
  - Bump release to fix upgrade path
    from 2.20.0-2.1.el8_1 via 2.20.0-3.el8_8 to 2.20.0-4.el8
  Related: rhbz#2209469


author: Arun SAG <sagarun@gmail.com> - 0.5.1-2
changelog:
  - Remove OPT_FLAGS from build section since it is a noarch package
  - Fix use of mixed tabs and space
  - Remove extra space around the word cumbersome in description


author: Arun SAG <sagarun@gmail.com> - 0.9.3-1
changelog:
  - Updated to new upstream version 0.9.3
  - Include python-gevent as a dependency for requests.async
  - Clean up shebangs in requests/setup.py,test_requests.py and test_requests_ext.py


author: Arun S A G <sagarun@gmail.com> 0.13.1-1
changelog:
  - Updated to latest upstream release 0.13.1
  - Use system provided ca-certificates
  - No more async requests use grrequests https://github.com/kennethreitz/grequests
  - Remove gevent as it is no longer required by requests


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.14.1-4
changelog:
  - Let brp_python_bytecompile run again, take care of the non-python{2,3} modules
    by removing them from the python{,3}-requests package that they did not belong
    in.
  - Use the certificates in the ca-certificates package instead of the bundled one
    + https://bugzilla.redhat.com/show_bug.cgi?id=904614
  - Fix a problem with cookie handling
    + https://bugzilla.redhat.com/show_bug.cgi?id=906924


author: Ralph Bean <rbean@redhat.com> - 1.1.0-1
changelog:
  - Latest upstream.
  - Relicense to ASL 2.0 with upstream.
  - Removed cookie handling patch (fixed in upstream tarball).
  - Updated cert unbundling patch to match upstream.
  - Added check section, but left it commented out for koji.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-2
changelog:
  - Unbundled python-charade/chardet.  Using system python-chardet now.
  - Removed deprecated comments and actions against oauthlib unbundling.
    Those are no longer necessary in 1.1.0.
  - Added links to bz tickets over Patch declarations.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-3
changelog:
  - Unbundled python-urllib3.  Using system python-urllib3 now.
  - Conditionally include python-ordereddict for el6.


author: Ralph Bean <rbean@redhat.com> - 2.0.0-1
changelog:
  - Latest upstream.
  - Add doc macro to the python3 files section.
  - Require python-urllib3 greater than or at 1.7.1.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-3
changelog:
  - Lock down the python-urllib3 version to the specific version we unbundled.
    https://bugzilla.redhat.com/show_bug.cgi?id=1253823


author: Ralph Bean <rbean@redhat.com> - 2.7.0-6
changelog:
  - Replace the provides macro with a plain provides field for now until we can
    re-organize this package into two different subpackages.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-7
changelog:
  - Tell setuptools about what version of urllib3 we're unbundling
    for https://github.com/kennethreitz/requests/issues/2816


author: Tomas Orsava <torsava@redhat.com> - 2.18.4-6
changelog:
  - Skip all tests needing httpbin: httpbin has too many dependencies to be
    shipped in RHEL just for build-time package tests


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-20
changelog:
  - Add --path query option (#1940895)
  - Macroize find-debuginfo script location (#2019540)
  - Validate and require subkey binding sigs on PGP pubkeys (#1958480)
  - Fixes CVE-2021-3521


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-22
changelog:
  - Fix spurious %transfiletriggerpostun execution (#2023693)
  - Skip recorded symlinks in --setperms (#1900662)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-31
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-32
changelog:
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069)
  - Fix IMA signature lengths assumed constant (RHEL-39896)
  - Fix root relocation regression (RHEL-49494)
  - Report unsafe symlinks during installation as a specific case (RHEL-39897)
  - Don't segfault on missing priority tag (RHEL-39894)


author: Liwei Ge <geliwei@openanolis.org> - 4.14.4-32.0.1
changelog:
  - Rebrand for Anolis OS
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - Support loongarch for rpm
  - Add loongarch64 support for debugedit(doupengda@loongson.cn)
  - Modify the spec to add debugedit for loongarch64(zhangwenlong@loongson.cn)
  - Support and switch rpmdb to sqlite (flin@linux.alibaba.com)
  - conditional set relbuf for loongarch debugedit (geliwei@openanolis.org)
  - avoid dead loop in db3_dbiOpen when db_create failed (xuchunmei@linux.alibaba.com)
  - do not switch rpmdb to sqlite (xuchunmei@linux.alibaba.com)
  - Fix a copy-paste --help description of --whatconflicts (wangkaiqiang@inspur.com)
  - https://bugzilla.openanolis.cn/show_bug.cgi?id=8035 (wangkaiqiang@inspur.com)
  - Add sw64 Architecture (nijie@wxiat.com)
  - update config to support sw64 Architecture. (Weisson@linux.alibaba.com)
  - keep compatibility between sw and other architecture. (Weisson@linux.alibaba.com)
  - Fix compatibility of debugedit tool on sw_64 platform. (Weisson@linux.alibaba.com)
  - cherry-pick Add sw8a Architecture #d96aa474da407c806ef6b68c669f8027e366f302 (nijie@wxiat.com)
  - cherry-pick Add sw8a patch #923576a65dc00eb4fbe1f10a5d0027c4de1f5be0 (nijie@wxiat.com)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - adjust for rpmdb index name change
  - drop unnecessary vendor-macro patch for real
  - add ISA-dependencies among rpm subpackages
  - make lzma and sqlite deps conditional and disabled by default for now


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - rpm 4.5.90-0.git8424.1 (alpha snapshot)
  - adjust to build against Berkeley DB 4.5.20 from compat-db for now
  - add posttrans to clean up db environment mismatch after upgrade
  - forward-port devel autodeps patch


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8426.5
  - flip back to external bdb
  - fix tab vs spaces complaints from rpmlint
  - add dep for lzma and require unzip instead of zip in build (#310694)
  - add pkgconfig dependency to rpm-devel
  - drop ISA-dependencies for initial introduction
  - new snapshot from upstream for documentation fixes


author: Florian Festi <ffesti@redhat.com>
changelog:
  - 4.5.90-0.git8426.10
  - rpm-4.5.90-posttrans.patch
  - use header from rpmdb in posttrans to make anaconda happy


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8461.1
  - new snapshot from upstream
  - fixes #68290, #455972, #446202, #453364, #456708, #456103, #456321, #456913,
    - partial fix for #457360


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add support for noarch subpackages
  - fix segfault in case of insufficient disk space detected (#460146)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - fix parsing of boolean expressions in spec (#456103)
    (unbreaks pam, jpilot and maybe other builds)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - create directory structure for rpmbuild prior to build if it doesn't exist (#455387)
  - create _topdir if it doesn't exist when installing SRPM
  - don't generate broken cpio in case of hardlink pointing on softlink,
    thanks to pixel@mandriva.com


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - add hack to support extracting gstreamer plugin provides (#438225)
  - fix another macro argument handling regression (#461180)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to official 4.5.90 alpha tarball 
  - a big pile of misc bugfixes + translation updates
  - isa-macro generation fix for ppc (#464754)
  - avoid pulling in pile of perl dependencies for an unused script
  - handle both "invalid argument" and clear env version mismatch on posttrans


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc1 
  - fixes #465586, #466597, #465409, #216221, #466503, #466009, #463447...
  - avoid using %configure macro for now, it has unwanted side-effects on rpm


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - Make noarch sub-packages actually work
  - Fix defaultdocdir logic in installplatform to avoid hardwiring mandir


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc2
  - fixes #471820, #473167, #469355, #468319, #472507, #247374, #426672, #444661
  - enable automatic generation of pkg-config and libtool dependencies #465377


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.2
changelog:
  - change platform sharedstatedir to something more sensible (#185862)
  - add rpmdb_foo links to db utils for documentation compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.3
changelog:
  - extract mimehandler provides from .desktop files
  - preliminaries for extracting font provides (not enabled yet)
  - dont classify font metrics data as fonts
  - only run script dep extraction once per file, duh


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-1
changelog:
  - update to 4.6.0 final
  - revert libmagic looking into compressed files for now, breaks ooffice build


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-4
changelog:
  - inherit group tag from the main package (#470714)
  - ignore BuildArch tags for anyarch actions (#442105)
  - don't check package BuildRequires when doing --rmsource (#452477)
  - don't fail because of missing sources when only spec removal
    is requested (#472427)


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-5
changelog:
  - remove two offending hunks from anyarch patch causing that
    RPMTAG_BUILDARCHS isn't written to SRPMs


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-7
changelog:
  - loosen up restrictions on dependency names (#455119)
  - handle inter-dependent pkg-config files for requires too (#473814)
  - error/warn on elf binaries in noarch package in build


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-0.beta1.9
changelog:
  - fix recorded file state of otherwise skipped files (#492947)
  - compress ChangeLog, drop old CHANGES file (#492440)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-1
changelog:
  - update to 4.7.0 final (http://rpm.org/wiki/Releases/4.7.0)
  - fixes #494049, #495429
  - dont permit test-suite failure anymore


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-2
changelog:
  - file classification tweaks for text files (#494817)
    - disable libmagic text token checks, it's way too error-prone
    - consistently classify all text as such and include description


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-3
changelog:
  - couple of merge-review fixes (#226377)
    - eliminate bogus leftover rpm:rpm rpmdb ownership
    - unescaped macro in changelog
  - fix find-lang --with-kde with KDE3 (#466009)
  - switch back to default file digest algorithm


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-4
changelog:
  - split cron-job into a sub-package to avoid silly deps on core rpm (#500722)
  - rpm requires coreutils but not in %post
  - build with libcap and libacl
  - fix pgp pubkey signature tag parsing


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-5
changelog:
  - don't mess up problem altNEVR in python ts.check() (#501068)
  - fix hardlink size calculation on build (#503020)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-8
changelog:
  - updated OSGi dependency extractor (#506471)
  - fix segfault in symlink fingerprinting (#505777)
  - fix invalid memory access causing bogus file dependency errors (#506323)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-5
changelog:
  - fix duplicate dependency filtering on build (#490378)
  - permit absolute paths in file lists again (#521760)
  - use permissions 444 for all .debug files (#522194)
  - add support for optional bugurl tag (#512774)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-6
changelog:
  - use relative paths within db environment (related to #507309, #507309...)
  - remove db environment on close in chrooted operation (related to above)
  - initialize rpmlib earlier in rpm2cpio (#523260)
  - fix file dependency tag extension formatting (#523282)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-7
changelog:
  - fix build with BDB 4.8.x by removing XA "support" from BDB backend 
  - perl dep extractor heredoc parsing improvements (#524929)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-8
changelog:
  - support multiple python implementations in brp-python-bytecompile (#531117)
  - make disk space problem reporting a bit saner (#517418)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.2-2
changelog:
  - missing error exit code from signing password checking (#496754)
  - dont fail build on unrecognized data files (#532489)
  - dont try to parse subkeys and secret keys (#436812)
  - fix chmod test on selinux, breaking %{_fixperms} macro (#543035)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.1
changelog:
  - update to 4.8.0-beta1 (http://rpm.org/wiki/Releases/4.8.0)
  - rpm-build conflicts with current ocaml-runtime


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.2
changelog:
  - fix noise from python bytecompile on non-python packages (#539635)
  - make all our -devel [build]requires isa-specific
  - trim out superfluous -devel dependencies from rpm-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-3
changelog:
  - fix segfault on failed url retrieval
  - fix verification error code depending on verbosity level
  - if anything in testsuite fails, dump out the log


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-8
changelog:
  - more fixes to postscript provides extractor (#562228)
  - avoid accessing unrelated mount points in disk space checking (#547548)
  - fix disk space checking with erasures present in transaction (#561160)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-11
changelog:
  - support single PPD providing driver for devices (#568351)
  - merge the psdriver patch pile into one
  - preserve empty lines in spec prep section (#573339)
  - teach python bindings about RPMTRANS_FLAG_NOCONTEXTS (related to #573111)
  - dont own localized man directories through find_lang (#569536)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-15
changelog:
  - handle non-existent dependency sets correctly in python (#593553)
  - make find-lang look in all locale dirs (#584866)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-16
changelog:
  - adjust to new pkg-config behavior wrt private dependencies (#596433)
  - rpm-build now requires pkgconfig >= 0.24


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-1
changelog:
  - update to 4.8.1 (http://rpm.org/wiki/Releases/4.8.1)
  - drop no longer needed patches
  - fix source url pointing to testing directory


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-2
changelog:
  - fix a potential getOutputFrom() error from font provide extraction
  - debug-friendlier message to aid finding other similar cases (#565223)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-5
changelog:
  - create gdb index on debuginfo generation (#617166)
  - rpm-build now requires /usr/bin/gdb-add-index for consistent index creation
  - include COPYING in -apidocs for licensing guidelines compliance


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-7
changelog:
  - bunch of spec tweaks, cleanups + corrections:
    - shorten rpm-build filelist a bit with glob use, reorder for saner grouping
    - missing isa in popt version dependency
    - only add rpmdb_foo symlinks for actually relevant db_* utils
    - drop no longer necessary file-devel dependency from rpm-devel
    - drop sqlite backend build-conditional
    - preliminaries for moving from db4 to libdb
  - use gnupg2 for signing as that's more likely to be installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.1
changelog:
  - rpm 4.9.0-beta1 (http://rpm.org/wiki/Releases/4.9.0)
    - drop no longer needed patches
    - adjust requires + buildrequires to match current needs
    - adjust rpmdb index ghosts to match the new release
    - split librpmbuild and librpmsign to a separate rpm-build-libs package
    - split rpmsign to its own package to allow signing without all the build goo
    - build-conditionalize plugins, disabled for now
    - gstreamer and printer dependency generation moving out
    - handle .so symlink dependencies with fileattrs
    - use gnupg2 for signing as that's what typically installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.3
changelog:
  - avoid division by zero in rpmdb size calculation (#671056)
  - fix secondary index iteration returing duplicate at end (#671149)
  - fix rebuilddb creating duplicate indexes for first header


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.5
changelog:
  - dont try to remove environment files if private env used (related to #671200)
  - unbreak mono dependency extraction (#673663)
  - complain instead of silent abort if cwd is not readable (#672576)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.1
changelog:
  - update to 4.9.0-rc1
  - drop upstream patches
  - nss packaging has changed, buildrequire nss-softokn-freebl-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.4
changelog:
  - spec cosmetics clean up extra whitespace + group more logically
  - wipe out BDB environment at boot via tmpfiles.d


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-5
changelog:
  - verify some properties of replaced and wrong-colored files (#528383)
  - only list packages that would be generated on spec query (#693338)
  - preferred color packages should be erased last (#680261)
  - fix leaks when freeing a populated transaction set
  - take file state into account for file dependencies


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-8
changelog:
  - add dwarf-4 support to debugedit (#707677)
  - generate build-id symlinks for all filenames sharing a build-id (#641377)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-9
changelog:
  - fix crash if prep or changelog section in spec is empty (#706959)
  - fix crash on macro which undefines itself
  - fix script dependency generation with file 5.07 string changes (#712251)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-3
changelog:
  - adjust db util prefix & dependency due to #749293
  - warn but dont fail the build if STABS encountered by debugedit (#725378)


author: Kay Sievers <kay@redhat.com> - 4.9.1.2-8
changelog:
  - add temporary rpmlib patch to support filesystem transition
    https://fedoraproject.org/wiki/Features/UsrMove


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-13
changelog:
  - fix memory corruption on rpmdb size estimation (#766260)
  - fix couple of memleaks in python bindings (#782147)
  - fix regression in verify output formatting (#797964)
  - dont process spec include in false branch of if (#782970)
  - only warn on missing excluded files on build (#745629)
  - dont free up file info sets on test transactions


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11505.5
changelog:
  - add temporary fake library provides to get around deltarpm "bootstrap"
    dependency (yes its dirty)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11519.1
changelog:
  - newer git snapshot to keep patch-count down
  - fixes CVE-2012-0060, CVE-2012-0061 and CVE-2012-0815
  - fix obsoletes in installing set getting matched on provides (#810077)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11536.1
changelog:
  - newer git snapshot (#809402, #808750)
  - adjust posttrans script wrt bdb string change (#803866, #805613)


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.1
changelog:
  - update to 4.11 (http://rpm.org/wiki/Releases/4.11.0) post-alpha snapshot
  - drop/adjust patches as necessary


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.3
changelog:
  - package /usr/lib/rpm/macros.d directory (related to #846679)
  - fixup a bunch of old incorrect dates in spec changelog


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.0-0.beta1.2
changelog:
  - armv7hl and armv7hnl should not have -mthumb (#901901)
  - fix duplicate directory ownership between rpm and rpm-build (#894201)
  - fix regression on paths shared between a real file/dir and a ghost


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-7
changelog:
  - fix build-time double-free on file capability processing (#956190)
  - fix relocation related regression on file sanity check (#1001553)
  - fix segfault on empty -p <lua> scriptlet body (#1004062)
  - fix source url, once again


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-11
changelog:
  - generate kmod(module.ko) provides for kernel (#1025513)
  - dont override CONFIG_SITE if already set (related to #962837)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-0.rc1.1
changelog:
  - update to 4.11.2-rc1 (http://rpm.org/wiki/Releases/4.11.2)
  - drop upstreamed patches, adjust others as needed
  - handle python egg-info's version munging in file lists


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-3
changelog:
  - dont eat newlines on parametrized macro invocations (#1045723)
  - fully reset file actions between rpmtsRun() calls (#1076552)
  - fix build and sign module initialization in python3 (#1064758)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-6
changelog:
  - build with -fsanitize=address and -fsanitize=undefined for now
  - add spec build conditional for sanitizer build


author: Tom Callaway <spot@fedoraproject.org> - 4.11.2-10
changelog:
  - remove _isa from all BuildRequires (bz 554854)
    See: https://fedoraproject.org/wiki/Packaging:Guidelines#BuildRequires_and_.25.7B_isa.7D


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.90-0.git12844.1
changelog:
  - Update to rpm 4.12-alpha ((http://rpm.org/wiki/Releases/4.12.0)
  - Drop/adjust patches as appropriate
  - New sub-package(s) for plugins


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0-0.beta1.1
changelog:
  - Update to 4.12.0-beta1 (http://rpm.org/wiki/Releases/4.12.0)
  - Fixes #1122004, #1111349, #1117912, #1123722
  - Drop upstreamed patches


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0.1-1
changelog:
  - Update to rpm-4.12.0.1 final (http://rpm.org/wiki/Releases/4.12.0.1)
  - Temporary workaround payload size mismatch issue in rpm2cpio (#1142949)


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0.1-3
changelog:
  - Skip ghost files in payload (#1156497)
  - Fix size and archice size tag generation on big-endian systems


author: Lubos Kardos <lkardos@redhat.com> - 4.12.0.1-5
changelog:
  - Add check against malicious CPIO file name size (#1168715)
  - Fixes CVE-2014-8118
  - Fix race condidition where unchecked data is exposed in the file system
    (#1039811)
  - Fixes CVE-2013-6435


author: Lubos Kardos <lkardos@redhat.com> 4.12.0-11
changelog:
  - Pass _find_debuginfo_opts -g to eu-strip for executables (#1186563)
  - add_minidebug is not ran when strip_g is set (#1186563)


author: Lubos Kardos <lkardos@redhat.com> - 4.12.90-5
changelog:
  - If globbing of a filename fails, try use the filename without globbing.
    (#1246743)
  - Modify rpmIsGlob() to be more precise and compatible with glob().
    (#1246743)


author: Lubos Kardos <lkardos@redhat.com> - 4.13-0.rc1.6
changelog:
  - If %_wrong_version_format_terminate_build is 1 then terminate build in case
    that version format is wrong i. e. epoch is not unsigned integer or version
    contains more separators (":", "-"). %_wrong_version_format_terminate_build
    is 1 by deafault (#1265700)


author: Lubos Kardos <lkardos@redhat.com> - 4.13-0.rc1.7
changelog:
  - Fix reading a memory right after the end of an allocated area (#1260248)
  - Add support for various types of dependencies to rpmdeps tool (#1247092)
  - fix %autopatch when patch do not exist (#1244172)


author: Lubos Kardos <lkardos@rpm.org> - 4.13.0-0.rc1.13
changelog:
  - Add possibility to disable file triggers
  - Fix unwanted multiple execution of filetriggers in dnf (#1282115)


author: Lubos Kardos <lkardos@redhat.com> - 4.13.0-0.rc1.20
changelog:
  - Revert using %configure, it causes problems
  - Temporary set %_gnu macro explictly, just for one build (#1303265)


author: Florian Festi <ffesti@rpm.org> - 4.13.0-0.rc1.24
changelog:
  - Also block idle and sleep in the systemd-inhibit plugin (#1297984)
  - Add support for MIPS release 6
  - Add mips32 mips64 mipsel and mipseb macros (#1285116)


author: Lubos Kardos <lkardos@redhat.com> 4.13.0-0.rc1.31
changelog:
  - Enable --no-backup-if-mismatch by default in %patch macro (#884755)
  - Add %{_default_patch_flags} to %__patch which is used in %autosetup
  - Use fuzz settings for %autopatch/%autosetup


author: Lubos Kardos <lkardos@redhat.com> 4.13.0-0.rc1.33
changelog:
  - Fix sigsegv in stringFormat() (#1316903)
  - Fix reading rpmtd behind its size in formatValue() (#1316896)


author: Igor Gnatenko <ignatenko@redhat.com> - 4.13.0-0.rc1.41
changelog:
  - Add %{?system_python_abi}
  - rpm-python -> python2-rpm && rpm-python3 -> python3-rpm with providing old names
  - Fixes and cleanups


author: Thierry Vignaud <tvignaud@redhat.com> - 4.13.0-2
changelog:
  - Fix package name references in python sub-packages to match reality
  - Re-enable test-suite now that it works again


author: Panu Matilainen <pmatilai@redhat.com> - 4.13.0-11
changelog:
  - Fix malformed packages being generated around 4GB boundary (#1405570)
  - Resurrect debuginfo GDB index generation (#1410907)


author: Mark Wielaard <mjw@redhat.com> - 4.13.0.1-13
changelog:
  - Add tests fix for sed file build-id regexp matching.
  - Add fix for build-ids in non-executable ELF files (#1433837).


author: Panu Matilainen <pmatilai@redhat.com> - 4.13.0.1-17
changelog:
  - Work around missing python[23] during build dependency parse
  - Include ISA in the new python library version dependencies too


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-19
changelog:
  - Minisymtab should only be added for executables or shared libraries.
  - Add find-debuginfo.sh -n (debugedit --no-recompute-build-id) option.


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-25
changelog:
  - Add support for debugsource and debuginfo subpackages
    - find-debuginfo-untangle-unique-build-options.patch
    - debugsrc-and-sub-debuginfo-packages.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-28
changelog:
  - Add debugedit-prefix.patch.
  - Add find-debuginfo-filter-built-ins.patch.
  - Add find-debuginfo-dwz-multi.patch.
  - Add find-debuginfo-and-macro-docs.patch.


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-29
changelog:
  - Track patches using https://pagure.io/rpm-fedora
  - Use file list to explicitly set mode for build-id dirs/files
    (#1452893, #1458839)


author: Miro Hrončok <mhroncok@redhat.com> - 4.13.90-0.git14000.4
changelog:
  - Add platform-python bytecompilation patch: platform-python-bytecompile.patch
  - Add platform python deps generator patch: platform-python-abi.patch
  - Add a platform-python subpackage and remove system python related declarations
  - Build rpm without platform_python for bytecompilation
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.1
changelog:
  - Rebase to rpm 4.14.0-rc1 (http://rpm.org/wiki/Releases/4.14.0)
  - Re-enable SHA256 header digest generation (see #1480407)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.2
changelog:
  - Actually honor with/without libimaevm option
  - ima-evm-utils-devel >= 1.0 is required for rpm >= 4.14.0


author: Tomas Orsava <torsava@redhat.com> - 4.14.1-5
changelog:
  - Add envvar that will be present during RPM build,
    Part of a Fedora Change for F28: "Avoid /usr/bin/python in RPM build"
    https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.1-6
changelog:
  - Avoid unnecessary macro helper dependency on /usr/bin/python (#1538657)
  - Fix release of previous changelog entry


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-0.rc2.1
changelog:
  - Update to rpm 4.14.2-rc2
  - Fixes a regression in rpmlog error handling (#1597274)
  - Fixes several resource leaks found by covscan (#1602681)
  - Fixes DISTTAG not getting copied to source rpms (#1596193)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-1
changelog:
  - Buildrequire audit-libs-devel to actually enable the feature (#1607612)
  - Update to rpm 4.14.2 final (http://rpm.org/wiki/Releases/4.14.2)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-7
changelog:
  - Move python-macro-helper to main package where the macros are (#1651926)
  - Document --noverify in the man page (#1646458)
  - Handle unsupported digests the same as disabled ones (#1652529)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-11
changelog:
  - Revised patch for Py3 string data as surrogate-escaped utf-8 (#1631292)
  - Add a .decode() method to returned Py3 strings for compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-14
changelog:
  - Verify packages before signing (#1646388)
  - Make rpmsign exist values more consistent with our other tools


author: Florian Festi <ffesti@redhat.com> - 4.14.2-16
changelog:
  - Sort list of hard linked files in find-debuginfo.sh (#1421272)
  - Correct rpm -ql exit value when optional -p is omitted (#1680610)
  - Show list of files only once when use rpm -ql and multiple rpm files (#1689898)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-23
changelog:
  - Use --dpbath only with full path (#1696408)
  - Fix memory leaks (#1714657)
  - Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
  - Fix bash warning from solution for #1689810


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-27
changelog:
  - Support generating build-id's from compressed ELF files (#1650074)
  - Compress annobit notes in find-debuginfo (#1719837)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-31
changelog:
  - Parallelize /usr/lib/rpm/brp-strip-static-archive (#1691824)
  - Parallelize /usr/lib/rpm/check-buildroot (#1704354)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-5
changelog:
  - Don't error out when replacing an invalid signature (#1874062)
  - Raise an expection when erasing a package fails in Python (#1872623)
  - Fix builds on NFS filesystems (#1840728)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12
changelog:
  - Bump up the limit of signature header to 64MB (#1918777)
  - Add fapolicyd plugin (#1923167)
  - Unblock signals in forked scriptlets (#1913765)
  - Fix ambiguous diagnostics output on file triggers (#1883338)
  - Ensure ELF files get stripped when debuginfo is disabled (#1634084)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13
changelog:
  - Fix minor issues found by COVSCAN in fapolicyd plugin
  - Actually honor libarchive bcond at configure time (#1902887)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15
changelog:
  - Add out-of-bounds checks to hdrblobInit() (#1929445)
  - Fixes CVE-2021-20266
  - Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16
changelog:
  - Add support for read-only sqlite rpmdb (#1938928)
  - Drop compat .decode() method from returned Py3 strings (#1840142)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-5
changelog:
  - Python 2 binary package renamed to python2-schedutils
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vit Mojzis <vmojzis@redhat.com> - 4.2.1-3
changelog:
  - Use 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g


author: Vit Mojzis <vmojzis@redhat.com> - 4.3.0-1
changelog:
  - SETools 4.3.0 release (#1820079)
  - Revised sediff method for TE rules. This drastically reduced memory and run time.
  - Added infiniband context support to seinfo, sediff, and apol.
  - Added apol configuration for location of Qt assistant.
  - Fixed sediff issue where properties header would display when not requested.
  - Fixed sediff issue with type_transition file name comparison.
  - Fixed permission map socket sendto information flow direction.
  - Added methods to TypeAttribute class to make it a complete Python collection.
  - Genfscon now will look up classes rather than using fixed values which
    were dropped from libsepol.
  - setools requires -console, -console-analyses and -gui packages (#1820078)


author: Vit Mojzis <vmojzis@redhat.com> - 4.3.0-4
changelog:
  - Disable/remove neverallow options in frontends (#2184141)
  - AVRuleXperm: Fix permission set creation for AVTAB_XPERMS_IOCTLDRIVER (#2174376)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.4-8
changelog:
  - Python 2 binary package renamed to python2-slip
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.4-10
changelog:
  - Also rename python-slip-dbus and python-slip-gtk to python2-*
  - Add missing %python_provide macros
  - Use new python2- names in dependencies


author: Charalampos Stratakis <cstratak@redhat.com> - 0.6.4-12
changelog:
  - Make firewalld to not log errors when running commands as root
    in the absence of polkitd.
  Resolves: rhbz#2076606


author: Tomas Orsava <torsava@redhat.com> - 1.24.2-1
changelog:
  - Rebased to 1.24.2 to fix CVE-2019-11324
  - Added patches for CVE-2019-11236 (AKA CVE-2019-9740)
  - Resolves: rhbz#1703361 rhbz#1706026


author: Lumír Balhar <lbalhar@redhat.com> - 1.24.2-3
changelog:
  - Enable TLS 1.3 post-handshake authentication
  - Adjust RECENT_DATE variable according to rules
  Resolves: rhbz#1726743


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.3.0-11
changelog:
  - Python 2 binary package renamed to python2-urwid
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: David Cantrell <dcantrell@redhat.com> - 1.3.1-2
changelog:
  - Apply upstream fix for EINTR handling in test_vterm test case
  - Apply upstream fix for test_remove_watch_file flakiness
  - Apply upstream fix for test_vterm handling of NUL characters


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Bixuan Cui <cuibixuan@linux.alibaba.com> - 0.6.7-15.0.1
changelog:
  - rasdaemon: add notification support when page goes offline for Memory Corrected Error
  - rasdaemon: add decoder to decode yitian ns error (tianruidong@linux.alibaba.com)
  - rasdaemon: add mce and mc trigger (tianruidong@linux.alibaba.com)
  - rasdaemon: AMD mce record just print one line (tianruidong@linux.alibaba.com)


author: Aristeu Rozanski <aris@redhat.com> 0.6.7-1
changelog:
  - Bumped to 0.6.7
  - Backported patches that sit on top of 0.6.7 without being released
    Related: rhbz#2052190


author: wangzhe <wanglan.wz@alibaba-inc.com> - 0.8.3-1.0.1
changelog:
  - update to 0.8.3
  - support mc event stat
  - support poison stat
  - support log level
  - support nvgpu event


author: Sumit Bose <sbose@redhat.com> - 0.16.3-19
changelog:
  - Realm join fails with error 'Failed to join domain: failed to lookup
    DC info ...'
    Resolves: rhbz#1859503
  - realm command to use option like dnshostname=fqdn
    Resolves: rhbz#1867912


author: Sumit Bose <sbose@redhat.com> - 0.16.3-20
changelog:
  - realmd should handle default_realm in krb5.conf
    Resolves: rhbz#1791016
  - [RFE] Enable LDAPS functionality in realmd join
    Resolves: rhbz#1826964


author: Sumit Bose <sbose@redhat.com> - 0.16.3-24
changelog:
  - Avoid duplicated log messages and use Samba's new CLI options
    Resolves: rhbz#2024248
    Resolves: rhbz#2028528


author: Sumit Bose <sbose@redhat.com> - 0.17.1-2
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: RHEL-12113
  - fix ccache handling for leave operation
    Resolves: RHEL-26166


author: Vladis Dronov <vdronov@redhat.com> - 6.8-4
changelog:
  - There is no need to hardcode _sbindir anymore, also the old value is
    incorrect
  - Update the rngd.service file
  - Fix a busyloop bug (bz 1956248)
  - Fix /dev/hwrng permission issue (bz 1955522)


author: Vladis Dronov <vdronov@redhat.com> - 6.8-6
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm is not
    run in a container (bz 1975554)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Fix a number of issues (bz 1974103, bz 1980421, bz 1859154)


author: Vladis Dronov <vdronov@redhat.com> - 6.14-4.git.b2b7934e
changelog:
  - Update rng-tools to v6.14 @ b2b7934e (bz 2015570)
  - Update jitterentropy library to v3.3.1 @ 887c9871
  - Add a config file for storing rngd options
  - Fix a security issue found by a covscan in jitterentropy library


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update rng-tools to v6.15 @ 172bf0e3 (bz 2075974)
  - Update jitterentropy library to v3.4.0 @ 887c9871
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.15-2
changelog:
  - Update rng-tools to v6.15 @ 6dcc9ec2 (bz 2124602)
  - Update jitterentropy library to v3.4.1 @ 4544e113
  - Do not require selinux-policy if it is not present


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update rng-tools to v6.15 @ cb8cc624 (bz 2141379)
  - Update jitterentropy library to v3.4.1 @ 7bf9f85d
  - Fix a stack corruption on s390x
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-1
changelog:
  - Update rng-tools to v6.16 @ 0e560296 (bz 2174908)
  - Get rid of text relocations in -fPIE build
  - Add a hint for opensc package (bz 1845854)


author: Ondrej Vasik <ovasik@redhat.com> 0.1-13
changelog:
  - copy content of /etc/skel directory for root as posstrans,
    don't overwrite  existing files (#999114)


author: Michal Ruprich <mruprich@redhat.com> - 3.1.3-19
changelog:
  - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Michal Ruprich <mruprich@redhat.com> - 3.1.3-20
changelog:
  - Resolves: RHEL-70207 - Path traversal vulnerability in rsync
  - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents


author: John A. Martin <jam@jamux.com>
changelog:
  - Built 1.6.3-2 after finding no rsync-1.6.3-1.src.rpm although there
    was an ftp://ftp.redhat.com/pub/contrib/alpha/rsync-1.6.3-1.alpha.rpm
    showing no packager nor signature but giving 
    "Source RPM: rsync-1.6.3-1.src.rpm".
  - Changes from 1.6.2-1 packaging: added '$RPM_OPT_FLAGS' to make, strip
    to '%build', removed '%prefix'.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some signed/unsigned issues (<krahmer@suse.de>)
  - tweak ipv6 patch (#55337, <john.l.villalovos@intel.com>)
  - make xinetd file %config(noreplace)


author: Bill Nottingham <notting@redhat.com> 2.5.4-2
changelog:
  - upstream patches: fix accidental use of --whole-file, fix
    minor memory leak, and bad worst-case child kill behavior
  - make passing -e to rsync:// URLs not cause an error exit (#62489)


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-6
changelog:
  - removed patch rsync-2.5.4-maxdel.patch
  - removed patch rsync-2.4.6-segv.patch
     - current 2.5.6 properly handles (no segfault) the situation
       (rsync '[a]') that caused a need for this patch.
  - added patch rsync-2.5.6-sign.patch, which is a working
    subset of patches (that still apply) included in the original
    rsync-2.5.4-moresignage.patch


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-15
changelog:
  - add rsync-2.5.6-signal.patch to fix kernel warnings that
    appear because socket.c sets SIGCHLD to SIG_IGN and then
    calls wait.  This is in response to bug#98740.  This patch
    *has* been committed to CVS upstream and will be in
    upstream rsync-2.5.7.


author: Jay Fenlason <fenlason@redhat.com> 2.6.1-1
changelog:
  - Rsync 2.6.1 final.
  - Add a patch from Wayne Davison <wayned@samba.org> that fixes a
    use of uninitilized memory in the map_uid and map_gid functions.
  - Add another patch from Wayne Davidson that fixes the -R option.
  - Add a patch (extracted from a patch by Sami Farin
    <safari-rsync@safari.iki.fi>) to not ignore the return value
    of close().


author: Jay Fenlason <fenlason@redhat.com> 2.6.2-0
changelog:
  - New upstream version to correct the problems with 2.6.1.
    This obsoletes all the patches to 2.6.1


author: Jay Fenlason <fenlason@redhat.com> 2.6.3-0.pre1
changelog:
  - New upstream version with security fix for CAN-2004-0792
  - This obsoletes the -lastdir-corruption patch.


author: Jay Fenlason <fenlason@redhat.com> 2.6.4-3
changelog:
  - Include the -address patch from upstream, to close
    bz#154752 Unable to use --address in client mode


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-2
changelog:
  - New upstream release
  - Use the upstream xattr patch instead of mine.  This closes
    bz#190208 CVE-2006-2083 rsync buffer overflow issue


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-3
changelog:
  - Add my xattrs_bug patch to fix a bug where xattrs don't get sent correctly.
  - Add BuildRequires to make sure libattr-devel and libacl-devel are avaliable
  - replace --with... with --enable... so they actually work
  - Add make, autoconf and gcc to BuildRequires


author: Simo Sorce <ssorce@redhat.com> 3.0.0-0.pre8.fc9
changelog:
  - Eight prerelease
  - Add second source, now patches are in a separate file
  - Add temporary fix to the xattrs.diff patch line as, in this version
    the patch contains one extra humk already contained in acls.diff


author: Michal Luscon <mluscon@redhat.com> 3.0.9-4
changelog:
  - Fixed: #823088 - rsync loses track of files with different directory prefixes
  - Fixed: #495310 - rsync contains forked copy of zlib


author: Michal Luscon <mluscon@redhat.com> - 3.1.0-1pre1
changelog:
  - Upstream 3.1.0 pre release
  - Fixed: #495310 - rsync contains forked copy of zlib
  - Fixed: #926459 - building aarch64
  - Fixed: bogus dates in changelog


author: Michal Luscon <mluscon@redhat.com> - 3.1.0-3
changelog:
  - Fixed: CVE-2014-2855 - denial of service
  - Reverted: compilation with system provided zlib (#1043965)


author: Jakub Martisko <jamartis@redhat.com> - 4.4-4
changelog:
  - When editing file inplace, the SELinux context should
    be based on the link instead of the target file itself.
    --follow-symlinks option remains unchanged
  - Resolves: #1401442


author: Jakub Martisko <jamartis@redhat.com> - 4.5-2
changelog:
  - fix "in-place edits on FUSE filesystems create files with all-zero mode bits"
  - Resolves: #1835761


author: Jakub Martisko <jamartis@redhat.com> - 4.5-5
changelog:
  - Minor cleanup - remove unused patch from the spec file too (related to 4.5-3)
  - Resolves: rhbz#1869253


author: Mahailiang <mahailiang@openanolis.org> - 4.5-5.0.1
changelog:
  - fix testsuite/inplace-selinux.sh check error
  - Sync from https://debbugs.gnu.org/cgi/bugreport.cgi?bug=35997


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-132
changelog:
  - Allow sudodomain read var auth files
  Resolves: RHEL-16567
  - Update cifs interfaces to include fs_search_auto_mountpoints()
  Resolves: RHEL-14072
  - Allow systemd-localed create Xserver config dirs
  Resolves: RHEL-16715
  - Label /var/run/auditd.state as auditd_var_run_t
  Resolves: RHEL-14376
  - Allow auditd read all domains process state
  Resolves: RHEL-14471
  - Allow sudo userdomain to run rpm related commands
  Resolves: RHEL-1679
  - Remove insights_client_watch_lib_dirs() interface
  Resolves: RHEL-16185


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-133
changelog:
  - Label /dev/acpi_thermal_rel char device with acpi_device_t
  Resolves: RHEL-18027
  - Allow sysadm execute traceroute in sysadm_t domain using sudo
  Resolves: RHEL-9947
  - Allow sysadm execute tcpdump in sysadm_t domain using sudo
  Resolves: RHEL-15398
  - Add support for syslogd unconfined scripts
  Resolves: RHEL-10087
  - Label /dev/wmi/dell-smbios as acpi_device_t
  Resolves: RHEL-18027
  - Make named_zone_t and named_var_run_t a part of the mountpoint attribute
  Resolves: RHEL-1954
  - Dontaudit rhsmcertd write memory device
  Resolves: RHEL-17721


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-134
changelog:
  - Allow syslog to run unconfined scripts conditionally
  Resolves: RHEL-10087
  - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t
  Resolves: RHEL-10087
  - Allow collectd connect to statsd port
  Resolves: RHEL-19482
  - Allow collectd_t read network state symlinks
  Resolves: RHEL-19482
  - Allow collectd_t domain to create netlink_generic_socket sockets
  Resolves: RHEL-19482
  - Allow opafm search nfs directories
  Resolves: RHEL-19426
  - Allow mdadm list stratisd data directories
  Resolves: RHEL-21374


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-135
changelog:
  - Label /tmp/libdnf.* with user_tmp_t
  Resolves: RHEL-11249
  - Allow su domains write login records
  Resolves: RHEL-2606
  - Allow gpg read rpm cache
  Resolves: RHEL-11249
  - Allow unix dgram sendto between exim processes
  Resolves: RHEL-21903
  - Allow hypervkvp_t write access to NetworkManager_etc_rw_t
  Resolves: RHEL-17687
  - Add interface for write-only access to NetworkManager rw conf
  Resolves: RHEL-17687
  - Allow conntrackd_t to use sys_admin capability
  Resolves: RHEL-22276


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-136
changelog:
  - Transition from sudodomains to crontab_t when executing crontab_exec_t
  Resolves: RHEL-1388
  - Fix label of pseudoterminals created from sudodomain
  Resolves: RHEL-1388
  - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files
  Resolves: RHEL-22500
  - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t
  Resolves: RHEL-23442
  - Allow admin user read/write on fixed_disk_device_t
  Resolves: RHEL-23434
  - Only allow confined user domains to login locally without unconfined_login
  Resolves: RHEL-1628
  - Add userdom_spec_domtrans_confined_admin_users interface
  Resolves: RHEL-1628
  - Only allow admindomain to execute shell via ssh with ssh_sysadm_login
  Resolves: RHEL-1628
  - Add userdom_spec_domtrans_admin_users interface
  Resolves: RHEL-1628
  - Move ssh dyntrans to unconfined inside unconfined_login tunable policy
  Resolves: RHEL-1628
  - Allow utempter_t use ptmx
  Resolves: RHEL-25002
  - Dontaudit subscription manager setfscreate and read file contexts
  Resolves: RHEL-21639
  - Don't audit crontab_domain write attempts to user home
  Resolves: RHEL-1388
  - Add crontab_domtrans interface
  Resolves: RHEL-1388
  - Add dbus_manage_session_tmp_files interface
  Resolves: RHEL-22500
  - Allow httpd read network sysctls
  Resolves: RHEL-22748
  - Allow keepalived_unconfined_script_t dbus chat with init
  Resolves: RHEL-22843


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-137
changelog:
  - Differentiate between staff and sysadm when executing crontab with sudo
  Resolves: RHEL-1388
  - Allow su domains write login records
  Resolves: RHEL-2606
  - Revert "Allow su domains write login records"
  Resolves: RHEL-2606
  - Add crontab_admin_domtrans interface
  Resolves: RHEL-1388
  - Allow gpg manage rpm cache
  Resolves: RHEL-11249


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-138
changelog:
  - Allow wdmd list the contents of the sysfs directories
  Resolves: RHEL-27507
  - Allow linuxptp configure phc2sys and chronyd over a unix domain socket
  Resolves: RHEL-27394


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-139.1
changelog:
  - Allow setsebool_t relabel selinux data files
  Resolves: RHEL-55432
  - Allow dirsrv-snmp map dirsv_tmpfs_t files
  Resolves: RHEL-32441
  - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files
  Resolves: RHEL-32441


author: Ondrej Vasik <ovasik@redhat.com> - 2.12.2-2
changelog:
  - do not ship /etc/hosts.allow and /etc/hosts.deny (no need for them
    as we don't allow tcp_wrappers in RHEL8, #1663556)


author: Martin Osvald <mosvald@redhat.com> - 2.12.2-3
changelog:
  - add pcp user to /etc/aliases (#1744089)
  - set PATH if it is empty in csh.login (#1744104)
  - lang.csh: prevent grep from failing so scripts do not end
    prematurely when tcsh -e option in use (#1678706)
  - use full path for non-builtins (#1688302)
  - add nrpe tcp port 5666 to /etc/services (#1730396)


author: Martin Osvald <mosvald@redhat.com> - 2.12.2-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2044589)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#1945400)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#1917934)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.44-3
changelog:
  - Fix sg_turs help invocation in an old mode (#1683343)
  - Fix sg_raw printing error about device not specified on version request (#1627657)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-15
changelog:
  - Creation of subid and subid-devel subpackages (#2013009)
  - libsubid: creation and nsswitch support
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - libsubid: make shadow_logfd not extern
  - useradd: fix SUB_UID_COUNT=0
  - man: mention NSS in new[ug]idmap manpages
  - man: clarify subid delegation


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-16
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013016
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #1986782


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-17
changelog:
  - subordinateio: also compare the owner ID. Resolves: #2093311
  - Fix release sources
  - Add subid requirement for subid-devel


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-18
changelog:
  - Update patch to close label to reset libselinux state. Resolves: #1984740
  - useradd: check if subid range exists for user. Resolves: #2012929
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #1994269


author: Čestmír Kalina <ckalina@redhat.com> - 1.6.0-3
changelog:
  - Patch stats.c to fix overruns
  - Patch stats.c to fix leaks
  - Patch stats.c to fix fallback counter values
  - Resolves: #1993469


author: Čestmír Kalina <ckalina@redhat.com> - 1.8.1-1
changelog:
  - Upgrade smc-tools to latest version
  - Add User-defined EID (Enterprise ID) Support
  - Resolves: #1919228
  - Resolves: #2043841


author: Čestmír Kalina <ckalina@redhat.com> - 1.8.3-1
changelog:
  - Resolves: RHEL-11417 Upgrade smc-tools to latest version
  - smc_stats: Fix man page name
  - Bump version.


author: Xiaoping Liu <liuxiaoping@alibaba-inc.com> - 1.8.3-1.0.1
changelog:
  - Add doc sub package
  - Support smc-ebpf (alibuda@linux.alibaba.com)
  - fix spec on smc-ebpf, fix issues where smc-ebpf can not works (alibuda@linux.alibaba.com)


author: Wen Gu <guwen.gu@alibaba-inc.com> - 1.8.3-1.0.4
changelog:
  - Fix segmentation fault in concurrent socket creation
  - Add statistics for ringbuf usage of conns and LGRs
  - Remove stats cache file if it is corrupted
  - Add smc_monitor_ex tool
  - Add tools for smc traffic capture


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.1.8-1
changelog:
  - Rebase to latest github version Snappy-1.1.8
  - Also change the URL to reflect to the updated github location.


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-10
changelog:
  - Fixed CVE-2020-13632 (#1845572)
  - Fixed CVE-2020-13631 (#1845474)
  - Fixed CVE-2020-13630 (#1845153)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-14
changelog:
  - Fixed CVE-2019-5827 (#1710184)
  - Fixed CVE-2019-13750 (#1786510)
  - Fixed CVE-2019-13751 (#1786522)
  - Fixed CVE-2019-19603 (#1792013)
  - Fixed CVE-2020-13435 (#1841233)


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: Panu Matilainen <pmatilai@redhat.com> - 3.5.9-2
changelog:
  - Remove references to temporary registers from cache on release (#463061)
  - Enable loading of external extensions (#457433)


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.6.2-2
changelog:
  - require tcl(abi) in sqlite-tcl subpackage (#474034)
  - move tcl extensions to arch-specific location
  - enable dependency extraction on the tcl dso
  - require pkgconfig in sqlite-devel


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.12-2
changelog:
  - disable strict aliasing to work around brokenness on 3.6.12 (#494266)
  - run test-suite on build but let it fail for now


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.23-1
changelog:
  - update to 3.6.23 (http://www.sqlite.org/releaselog/3_6_23.html)
  - drop the lemon sprintf patch, upstream doesn't want it
  - make test-suite errors fail build finally


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.4-1
changelog:
  - update to 3.7.4 (http://www.sqlite.org/releaselog/3_7_4.html)
  - deal with upstream source naming, versioning and format changing
  - fixup wal2-test expections wrt SQLITE_DISABLE_DIRSYNC use


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.7.1-1
changelog:
  - update to 3.7.7.1 (http://www.sqlite.org/releaselog/3_7_7_1.html)
  - autoconf no longer needed for build, libdl check finally upstreamed


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.13-1
changelog:
  - update to 3.7.13 (http://www.sqlite.org/releaselog/3_7_13.html)
  - drop no longer needed savepoint relase patch


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.15-1
changelog:
  - update to 3.7.15 (http://www.sqlite.org/releaselog/3_7_15.html)
  - fix an old incorrect date in spec changelog


author: Jan Stanek <jstanek@redhat.com> - 3.7.16.2-1
changelog:
  - update to 3.7.16.2 (http://www.sqlite.org/releaselog/3_7_16_2.html)
  - add support for aarch64 (rerunning autoconf) (#926568)


author: Jan Stanek <jstanek@redhat.com> 3.8.3-1
changelog:
  - Update to 3.8.3 (http://www.sqlite.org/releaselog/3_8_3.html)
  - Dropped man-page patch - included upstream


author: Honza Horak <hhorak@redhat.com> - 3.8.4.2-3
changelog:
  - Revert part of the upstream commit dca1945aeb3fb005, since it causes
    nautilus to crash
    Related: #1075889


author: Jan Stanek <jstanek@redhat.com> - 3.8.4.3-1
changelog:
  - Update to version 3.8.4.3 (http://www.sqlite.org/releaselog/3_8_4_3.html)
  - Changed patch for rhbz#1075889 to upstream version
    Related: #1075889


author: Jan Stanek <jstanek@redhat.com> - 3.8.5-1
changelog:
  - Update to version 3.8.5 (http://www.sqlite.org/releaselog/3_8_5.html)
  - Dropped patch already included upstream


author: Jan Stanek <jstanek@redhat.com> - 3.8.7-1
changelog:
  - Updated to version 3.8.7 (http://sqlite.org/releaselog/3_8_7.html)
  - Dropped patch for problem fixed upstream


author: Jan Stanek <jstanek@redhat.com> - 3.8.8-1
changelog:
  - Updated to version 3.8.8 (https://sqlite.org/releaselog/3_8_8.html)
  - Recreated patches to work on current version.


author: Jan Stanek <jstanek@redhat.com> - 3.10.2-1
changelog:
  - Updated to version 3.10.2 (http://sqlite.org/releaselog/3_10_2.html)
  - Enabled JSON1 Extension (rhbz#1277387)
  - Made test failure nonfatal on MIPS (rhbz#1294888)


author: Nils Philippsen <nils@redhat.com> - 3.11.0-2
changelog:
  - add obsoletes/conflicts to make updates on multi-lib systems work (#1310441)
  - make -devel package depend on arch-specific -libs (not main) package


author: Petr Kubat <pkubat@redhat.com> - 3.18.0-1
changelog:
  - Updated to version 3.18.0 (https://sqlite.org/releaselog/3_18_0.html)
  - Modify sync2.test to pass with DIRSYNC turned off


author: Petr Kubat <pkubat@redhat.com> - 3.19.3-1
changelog:
  - Updated to version 3.19.3 (https://sqlite.org/releaselog/3_19_3.html)
  - Better detection of CVE-2017-10989 (#1469673)


author: Petr Kubat <pkubat@redhat.com> - 3.22.0-1
changelog:
  - Fixed issue with some e_expr tests failing i686
  - Fixed issue with a fts3rank test failing on big-endian systems


author: Petr Kubat <pkubat@redhat.com> - 3.26.0-1
changelog:
  - Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
    Fixes fts3/4 corrupt database exploit (#1659684)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-5
changelog:
  - Fixed CVE-2019-13752 (#1786529) 
  - Fixed CVE-2019-13753 (#1786535) 
  - Fixed CVE-2019-13734 (#1786509) 
  - Fixed CVE-2019-19924 (#1789776)
  - Fixed CVE-2019-19923 (#1789812)
  - Fixed CVE-2019-19925 (#1789808)
  - Fixed CVE-2019-19959 (#1789823)


author: Abhi Das <adas@redhat.com> - 4.3-19
changelog:
  - rhbz#1602698 - Fix coverity issues
    rhbz#1624173 - Fix annocheck failures
    rhbz#1716278 - limit max cpus in mksquashfs
    Resolves: rhbz#1602698, rhbz#1624173, rhbz#1716278


author: Abhi Das <adas@redhat.com> - 4.3-20
changelog:
  - rhbz#1895017 - unsquashfs does not preserve file capabilities
    rhbz#1754815 - Kdump: Building kdump initramfs img may fail with 'dracut: Failed making squash image' occasionally
    Resolves: rhbz#1895017, rhbz#1754815


author: wuxiat <nijie@wwxiat.com> -4.3-20.0.2
changelog:
  * Mon Dec 13 2021 Weitao Zhou <zhouwt@linux.alibaba.com> - 4.3-20.0.1
  - use extern in header files when declaring global variables for compatible gcc10 build


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-1
changelog:
  - Rebase to v5.13; drop upstream patches on top of 5.7 (#2015917).
  - Address some issues reported by covscan.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.18-2
changelog:
  - Fix the issues reported by covscan (#2103068).
  - Fix SELinux context matching for the deleted paths (#2087693).
  - Fix sloppy FD usage in the bpf test (#2103137).


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.18-2.1
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-8570).
  - Update net-yy-inet*, linkat--secontext_mismatch, and prctl-sve tests.


author: Hangbo Fan <fanhangbo.fhb@alibaba-inc.com> - 5.18-2.1.0.1
changelog:
  - Add doc sub package
  - Improve support for loongarch64 (lihui@loongson.cn)
  - cherry-pick `add sw patch #757f9ac5303eba4f95fb2221cae6eb2688b4bc3e`. (nijie@wuxiat.com)
  - Handle failed testsuite strace-k for loongarch64 (lihui@loongson.cn)


author: Sahana Prasad <sahana@redhat.com> - 5.56-5
changelog:
  - Fixes CVE-2021-20230 stunnel: client certificate not
    correctly verified when redirect and verifyChain options are used.


author: Clemens Lang <cllang@redhat.com> - 5.71-1
changelog:
  - New upstream release 5.71
    Resolves: RHEL-2340
  - Enable socket activation support
  - verify upstream source in %prep
  - clean up stale conditionals


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.6-2
changelog:
  - remove absolute path names from the PAM configuration, ensuring that the
    right modules get used for whichever arch we're built for
  - don't try to install the FAQ, which isn't there any more


author: Colin Walters <walters@redhat.com> 1.6.7p5-24
changelog:
  - Enhance sesh.c to fork/exec children itself, to avoid
    having sudo reap all domains.
  - Only reinstall default signal handlers immediately before
    exec of child with SELinux patch


author: Karel Zak <kzak@redhat.com> 1.6.8p9-1
changelog:
  - new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)


author: Dan Walsh <dwalsh@redhat.com> 1.6.8p12-3
changelog:
  - Remove selinux patch.  It has been decided that the SELinux patch for sudo is
  - no longer necessary.  In tageted policy it had no effect.  In strict/MLS policy
  - We require the person using sudo to execute newrole before using sudo.


author: Karel Zak <kzak@redhat.com> 1.6.8p12-7
changelog:
  - fix #198755 - make login processes (sudo -i) initialise session keyring
    (thanks for PAM config files to David Howells)
  - add IPv6 support (patch by Milan Zazrivec)


author: Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-2
changelog:
  - adjust audit patch, do not scream when kernel is
    compiled without audit netlink support (#401201)


author: Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-6
changelog:
  - fixed building with new libtool
  - fix for incorrect handling of groups in Runas_User
  - added /usr/local/sbin to secure-path


author: Daniel Kopecek <dkopecek@redhat.com> 1.7.1-4
changelog:
  - moved the closefrom() call before audit_help_open() (sudo-1.7.1-auditfix.patch)
  - epoch number sync


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-1
changelog:
  - new upstream version 1.7.2p2-1
  - commented out unused aliases in sudoers to make visudo happy (#550239)


author: Ville Skyttä <ville.skytta@iki.fi> - 1.7.2p2-2
changelog:
  - Add /etc/sudoers.d dir and use it in default config (#551470).
  - Drop *.pod man page duplicates from docs.


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-4
changelog:
  - audit related Makefile.in and configure.in corrections
  - added --with-audit configure option
  - removed call to libtoolize


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p6-1
changelog:
  - update to new upstream version
  - merged .audit and .libaudit patch
  - added sudoers.ldap.5* to files


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-1
changelog:
  - update to new upstream version
  - new command available: sudoreplay
  - use native audit support
  - corrected license field value: BSD -> ISC


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-5
changelog:
  - anybody in the wheel group has now root access (using password) (rhbz#656873)
  - sync configuration paths with the nss_ldap package (rhbz#652687)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.1p2-1
changelog:
  - rebase to 1.8.1p2
  - removed .sudoi patch
  - fixed typo: RELPRO -> RELRO
  - added -devel subpackage for the sudo_plugin.h header file
  - use default ldap configuration files again


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.5-4
changelog:
  - added patches that fix & improve SSSD support (thanks to pbrezina@redhat.com)
  - re-enabled SSSD support
  - removed libsss_sudo dependency


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-2
changelog:
  - added upstream patch for a regression
  - don't include arch specific files in the -devel subpackage
  - ship only one sample plugin in the -devel subpackage


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-1
changelog:
  - update to 1.8.6p7
  - fixes CVE-2013-1775 and CVE-2013-1776
  - fixed several packaging issues (thanks to ville.skytta@iki.fi)
    - build with system zlib.
    - let rpmbuild strip libexecdir/*.so.
    - own the %{_docdir}/sudo-* dir.
    - fix some rpmlint warnings (spaces vs tabs, unescaped macros).
    - fix bogus %changelog dates.


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.8-1
changelog:
  - update to 1.8.8
  - major changes & fixes:
    - LDAP SASL support now works properly with Kerberos
    - root may no longer change its SELinux role without entering a password
    - user messages are now always displayed in the user's locale, even when
      the same message is being logged or mailed in a different locale.
    - log files created by sudo now explicitly have the group set to group
      ID 0 rather than relying on BSD group semantics
    - sudo now stores its libexec files in a sudo subdirectory instead of in
      libexec itself
    - system_group and group_file sudoers group provider plugins are now
      installed by default
    - the paths to ldap.conf and ldap.secret may now be specified as arguments
      to the sudoers plugin in the sudo.conf file
    - ...and many new features and settings. See the upstream ChangeLog for the
      full list.
  - several sssd support fixes
  - added patch to make uid/gid specification parsing more strict (don't accept
    an invalid number as uid/gid)
  - use the _pkgdocdir macro
    (see https://fedoraproject.org/wiki/Changes/UnversionedDocdirs)
  - fixed several bugs found by the clang static analyzer
  - added %post dependency on chmod


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.8-3
changelog:
  - remove bundled copy of zlib before compilation
  - drop the requiretty Defaults setting from sudoers


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.11-1
changelog:
  - update to 1.8.11
  - major changes & fixes:
    - when running a command in the background, sudo will now forward
      SIGINFO to the command
    - the passwords in ldap.conf and ldap.secret may now be encoded in base64.
    - SELinux role changes are now audited. For sudoedit, we now audit
      the actual editor being run, instead of just the sudoedit command.
    - it is now possible to match an environment variable's value as well as
      its name using env_keep and env_check
    - new files created via sudoedit as a non-root user now have the proper group id
    - sudoedit now works correctly in conjunction with sudo's SELinux RBAC support
    - it is now possible to disable network interface probing in sudo.conf by
      changing the value of the probe_interfaces setting
    - when listing a user's privileges (sudo -l), the sudoers plugin will now prompt
      for the user's password even if the targetpw, rootpw or runaspw options are set.
    - the new use_netgroups sudoers option can be used to explicitly enable or disable
      netgroups support
    - visudo can now export a sudoers file in JSON format using the new -x flag
  - added patch to read ldap.conf more closely to nss_ldap
  - require /usr/bin/vi instead of vim-minimal
  - include pam.d/system-auth in PAM session phase from pam.d/sudo
  - include pam.d/sudo in PAM session phase from pam.d/sudo-i


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.11p2-1
changelog:
  - update to 1.8.11p2
  - added patch to fix upstream bug #671 -- exiting immediately
    when audit is disabled


author: Radovan Sroka <rsroka@redhat.com> 1.8.12-2
changelog:
  - add patch3 sudo.1.8.14b4-passexpire.patch that makes change in documentation about timestamp_time
  - Resolves: rhbz#1162070


author: Radovan Sroka <rsroka@redhat.com> 1.8.14p1-1
changelog:
  - update to 1.8.14p1-1
  - rebase sudo-1.8.14b3-ldapconfpatch.patch -> sudo-1.8.14p1-ldapconfpatch.patch
  - rebase sudo-1.8.14b4-docpassexpire.patch -> sudo-1.8.14p1-docpassexpire.patch


author: Radovan Sroka <rsroka@redhat.com> 1.8.14p3-2
changelog:
  - add patch that resolves initialization problem before sudo_strsplit call
  - add patch that resolves deadcode in visudo.c
  - add patch that removes extra while in visudo.c and sudoers.c


author: Radovan Sroka <rsroka@redhat.com> 1.8.18rc2-1
changelog:
  - update to 1.8.18rc2
  - dropped sudo-1.8.14p1-ldapconfpatch.patch
    upstreamed --> https://www.sudo.ws/pipermail/sudo-workers/2016-September/001006.html


author: Radovan Sroka <rsroka@redhat.com> 1.8.19-0.1.20160923git90e4538
changelog:
  - we were not able to update from rc and beta versions to stable one
  - so this is a new snapshot package which resolves it


author: Jiri Vymazal <jvymazal@redhat.com> - 1.8.20-0.1.b1
changelog:
  - update to latest development version 1.8.20b1
  - added sudo to dnf/yum protected packages
    Resolves: rhbz#1418756


author: Matthew Miller <mattdm@fedoraproject.org> - 1.8.20p2-4
changelog:
  - replace file-based requirements with package-level ones:
  - /etc/pam.d/system-auth to 'pam'
  - /bin/chmod to 'coreutils' (bug #1488934)
  - /usr/bin/vi to vim-minimal
  - ... and make vim-minimal "recommends" instead of "requires", because
    other editors can be configured.


author: Radovan Sroka <rsroka@redhat.com> - 1.8.25-1
changelog:
  - rebase to the new upstream version 1.8.25p1
  - sync patches with rhel-7.6
  - sync sudoers with rhel-7.6
    resolves: rhbz#1633144


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.25-2
changelog:
  - Depend explicitly on /usr/sbin/sendmail instead of sendmail (rhel-7 sync)
  - Simplified pam configuration file by removing duplicate pam stack entries
  Resolves: rhbz#1633144


author: Radovan Sroka <rsroka@redhat.com> - 1.8.25-5
changelog:
  - RHEL 8.1 ERRATUM
  - Fixed problem with sudo-1.8.23 and 'who am i'
  Resolves: rhbz#1673886
  - Backporting sudo bug with expired passwords
  Resolves: rhbz#1676819


author: Radovan Sroka <rsroka@redhat.com> - 1.8.25-6
changelog:
  - RHEL 8.1 ERRATUM
  - Fixed The LDAP backend which is not properly parsing sudoOptions,
    resulting in selinux roles not being applied
  Resolves: rhbz#1738326


author: Radovan Sroka <rsroka@redhat.com> - 1.8.28p1-1
changelog:
  - RHEL 8.2 ERRATUM
  - rebase to 1.8.28p1
  Resolves: rhbz#1733961
  - fixed man page for always_set_home
  Resolves: rhbz#1576880
  - sudo does not work with notbefore/after
  Resolves: rhbz#1679508
  - NOTBEFORE showing value of sudoNotAfter Ldap attribute
  Resolves: rhbz#1715516
  - CVE-2019-14287 sudo
  - Privilege escalation via 'Runas' specification with 'ALL' keyword
  Resolves: rhbz#1760697


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29-7
changelog:
  - RHEL 8.4 ERRATUM
  - CVE-2021-3156
  Resolves: rhbz#1917734
  - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhzb#1916434
  - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917038
  - updated upstream url
  Resolves: rhbz#1923825


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29-8
changelog:
  RHEL 8.6.0 ERRATUM
  - sudoedit does not work with selinux args
  Resolves: rhbz#2029551
  - Make sure SIGCHLD is not ignored when sudo is executed
  Resolves: rhbz#1999751
  - [RFE] pass KRB5CCNAME to pam_authenticate environment if available
  Resolves: rhbz#1917379
  - utmp resource leak in sudo
  Resolves: rhbz#1986572


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29.9
changelog:
  RHEL 8.8.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161221
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2114576


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-1
changelog:
  RHEL 8.9.0.Z ERRATUM
  - Rebase to 1.9.5p2
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21825
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21831
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21820


author: guo chuang <guo.chuang@zte.com.cn> - 1.9.5p2-1.0.1.1
changelog:
  - add patch for CVE-2022-43955
  - cherry-pick `add sw arch #67f107f94b2ae4b6376e750103f8f5fd1f3e6b31`.


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Jan Tulak <jtulak@redhat.com> - 1.2-1
changelog:
  - Upstream release 1.2 which fixes:
  - use pwquality to test password strength for cryptsetup (#1141871)
  - add multipath detection support (#1309729)
  - add migrate command (#1014708)


author: Jan Tulak <jtulak@redhat.com> - 1.2-3:
changelog:
  - Gating tests implementation, which meant adding few more changes
    to the existing patches (#1681969)
  - sphinx patch was merged to python3 change
  - add seq numbers to patch files


author: Jan Tulak <jtulak@redhat.com> - 1.4-1:
changelog:
  - Bring changes from upstream 1.4 (mostly bugfixes)
  - Remove multipath from the list of default backends (rhbz#1685019)
  - Fix locale issue (rhbz#1679587)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-77
changelog:
  - ci: update permissions for source-git automation workflows (#2179309)
  - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932)
  - parse-util: in parse_permille() check negative earlier (#2178179)
  - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179)
  - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846)
  - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846)
  - libsystemd: ignore both EINTR and EAGAIN (#2172846)
  - sd-bus: handle -EINTR return from bus_poll() (#2172846)
  - stdio-bridge: don't be bothered with EINTR (#2172846)
  - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846)
  - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846)
  - utmp-wtmp: fix error in case isatty() fails (#2172846)
  - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846)
  - journal-vacuum: count size of all journal files (#2180380)
  - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751)
  - resolved: close UDP socket when we received a network error on it (#2156751)
  - ci: allow RHEL-only labels to mark downstream-only commits (#2179309)
  - man: tweak markup in systemd-pstore.service(8) (#2217786)
  - man: add .service suffix to systemd-pstore(8) (#2217786)
  - presets: enable systemd-pstore.service by default (#2217786)
  - logind: simplify code (#2209328)
  - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786)
  - loginctl: shorten variable name (#2156786)
  - loginctl: use bus_map_all_properties (#2156786)
  - loginctl: show session idle status in list-sessions (#2156786)
  - loginctl: list-sessions: fix timestamp for idle hint (#2156786)
  - loginctl: also show idle hint in session-status (#2156786)
  - core/timer: Always use inactive_exit_timestamp if it is set (#1719364)
  - timer: Use dual_timestamp_is_set() in one more place (#1719364)
  - ci: drop systemd-stable from advanced-commit-linter config (#2179309)
  - core/mount: escape invalid UTF8 char in dbus reply (#2158724)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-78
changelog:
  - login: add a missing error check for session_set_leader() (#2158167)
  - logind: reset session leader if we know for a fact that it is gone (#2158167)
  - test-login: skip consistency checks when logind is not active (#2223582)
  - sd-event: remove dead code and use _cleanup_ (#2211358)
  - sd-event: don't destroy inotify data structures from inotify event handler (#2211358)
  - sd-event: add sd_event_add_inotify_fd() call (#2211358)
  - test: add test case for self-destroy inotify handler (#2211358)
  - doc: add downstream CONTRIBUTING document (#2179309)
  - doc: use link with prefilled Jira issue (#2179309)
  - docs: link downstream CONTRIBUTING in README (#2179309)
  - unit drop-in: Fix ordering of special type.d drop-ins (#2156620)
  - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620)
  - test: set indentation to 4 spaces (#2156620)
  - test/TEST-15: remove all created unit files (#2156620)
  - test: use quotes where necessary (#2156620)
  - tree-wide: drop manually-crafted message for missing variables (#2156620)
  - manager: reformat boolean expression in unit_is_pristine() (#2156620)
  - manager: allow transient units to have drop-ins (#2156620)
  - TEST-15: allow helper functions to accept other unit types (#2156620)
  - TEST-15: also test hierarchical drop-ins for slices (#2156620)
  - TEST-15: add test for transient units with drop-ins (#2156620)
  - TEST-15: add one more test for drop-in precedence (#2156620)
  - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846)
  - meson: remove libdw dependency from pstore (#2211416)
  - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416)
  - tmpfiles: don't complain if we can't enable pstore in containers (#2211416)
  - pstore: don't enable crash_kexec_post_notifiers by default (#2211416)
  - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925)
  - man: link Delegate= documentation up with the markdown docs (#2215925)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-79
changelog:
  - ci: Extend source-git-automation (RHEL-1087)
  - ci: add missing configuration for commit linter (RHEL-1087)
  - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087)
  - ci: enable source-git automation to validate reviews and ci results (RHEL-1087)
  - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087)
  - ci: enable auto-merge GH Action (RHEL-1087)
  - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087)
  - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087)
  - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087)
  - resolved: actually check authenticated flag of SOA transaction (RHEL-6213)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-80
changelog:
  - fd-util: rework how we determine highest possible fd (RHEL-18302)
  - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302)
  - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302)
  - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302)
  - ci: use source-git-automation composite Action (RHEL-1087)
  - ci: increase the cron interval to 45 minutes (RHEL-1087)
  - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087)
  - tree-wide: always declare bitflag enums the same way (RHEL-2857)
  - login: Add KEY_RESTART handling (RHEL-2857)
  - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991)
  - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991)
  - analyze-security: include an actual syscall name in the message (RHEL-5991)
  - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426)
  - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426)
  - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-82
changelog:
  - ci: add configuration for regression sniffer GA (RHEL-1087)
  - coredump: actually store parsed unit in the context (RHEL-18302)
  - resolved: limit the number of signature validations in a transaction (RHEL-26644)
  - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-82.1
changelog:
  - pid1: by default make user units inherit their umask from the user manager (RHEL-28048)
  - pam: add call to pam_umask (RHEL-28048)
  - ci: deploy systemd man to GitHub Pages (RHEL-32494)
  - ci(src-git): update list of supported products (RHEL-32494)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-82.3
changelog:
  - ci: update actions/upload-artifact to `v4` (RHEL-32494)
  - ci: drop unused variable (RHEL-32494)
  - core: add possibility to not track certain unit types (RHEL-5877)
  - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215)
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215)
  - ci: point C8S containers to the Vault (RHEL-1087)


author: Yuanhong Peng <yummypeng@linux.alibaba.com> - 239-82.0.3.3
changelog:
  - core: fix a null reference case in load_from_path()
  - sysctl: Don't pass null directive argument to '%s'
  - exit-status: introduce EXIT_EXCEPTION mapping to 255
  - main: don't freeze PID 1 in containers, exit with non-zero instead
  - Do not go into freeze when systemd crashd
  - mount-setup: change the system mount propagation to shared by default only at bootup
  - cgroup-util: make definition of CGROUP_CONTROLLER_TO_MASK() unsigned
  - cgroup: update only siblings that got realized once
  - core: add a config item to support setting the value of cpuset.clone_children when systemd is starting
  - support loongarch for systemd
  - test-catalog: Fix coredump when compiled under GCC10
  - add Iluvatar CoreX pci id (Liwei Ge)
  - seccomp: add loongarch64 support (Liwei Ge)
  - seccomp: remove loongarch64 switch(Liwei Ge)
  - umount: check LO_FLAGS_AUTOCLEAR after LOOP_CLR_FD claimed success(yuanhui)
  - fileio: when reading a full file into memory, refuse inner NUL bytes (Guorui Yu)
  - util: introduce explicit_bzero_safe for explicit memset (Guorui Yu)
  - util: introduce erase_and_free() helper (Guorui Yu)
  - util: introduce READ_FULL_FILE_SECURE flag for reading secure data (Guorui Yu)
  - fileio: introduce warn_file_is_world_accessible() (Guorui Yu)
  - fileio: read_full_file_full() also warns when file is world readable and secure flag is set (Guorui Yu)
  - basic/fileio: Fix memory leak if READ_FULL_FILE_SECURE flag is used (Guorui Yu)
  - fileio: add explicit flag for generating world executable warning when reading file (Guorui Yu)
  - fileio: add 'dir_fd' parameter to read_full_file_full() (Guorui Yu)
  - fileio: add support for read_full_file() on AF_UNIX stream sockets (Guorui Yu)
  - fileio: beef up READ_FULL_FILE_CONNECT_SOCKET to allow setting sender socket name (Guorui Yu)
  - fileio: teach read_full_file_full() to read from offset/with maximum size (Guorui Yu)
  - cryptsetup: port cryptsetup's main key file logic over to read_full_file_full() (Guorui Yu)
  - Update upstream parse_hwdb.py to fix parse-hwdb error (Zhongling He)
  - cgroup: do not refresh cgroup devices config when daemon-reload (Zhongling He)
  - core: introduce cgroup full delegation for compability (Zhongling He)
  - Update vendor ids for ieisystem 0750 (wangkaiyuan@inspur.com)
  - LifseaOS: Add back hostnamectl (yuanhui@linux.alibaba.com)
  - LifseaOS: Add back timedatectl (yuanhui@linux.alibaba.com)
  - LifseaOS: shared: Remove dependency of libcryptsetup if HAVE_LIBCRYPTSETUP is not defined (yuanhui@linux.alibaba.com)
  - LifseaOS: analyze: show information from hostnamed in plot even when user mode (yuanhui@linux.alibaba.com)
  - LifseaOS: configure: Disable smack (yuanhui@linux.alibaba.com)
  - LifseaOS: Remove nss module provided by systemd (yuanhui@linux.alibaba.com)
  - LifseaOS: configure: Remove multiple non-essential features (yuanhui@linux.alibaba.com)
  - LifseaOS: configure: Disable firstboot (yuanhui@linux.alibaba.com)
  - LifseaOS: Remove user-runtime-dir binary and service file (yuanhui@linux.alibaba.com)
  - LifseaOS: Remove the dependency of acl package (yuanhui@linux.alibaba.com)
  - LifseaOS: Remove locale and hostname related tools (yuanhui@linux.alibaba.com)
  - LifseaOS: Remove multiple unnecessary modules (yuanhui@linux.alibaba.com)
  - LifseaOS: Remove compression algorithm (yuanhui@linux.alibaba.com)
  - LifseaOS: Remove many tools of little use (yuanhui@linux.alibaba.com)
  - LifseaOS: Remove coredump tools (yuanhui@linux.alibaba.com)
  - LifseaOS: configure: Disable cryptsetup (yuanhui@linux.alibaba.com)
  - LifseaOS: configure: Disable polkit (yuanhui@linux.alibaba.com)
  - LifseaOS: configure: Disable logind (yuanhui@linux.alibaba.com)
  - LifseaOS: Remove systemd-pam module (yuanhui@linux.alibaba.com)
  - LifseaOS: configure: Remove manpage and bash/zsh completion (yuanhui@linux.alibaba.com)
  - LifseaOS: cgroup: Do not remove cgroup path which not created by systemd (yuanhui@linux.alibaba.com)
  - Remove patch 20002 as it inhibits systemd device cgroup slice creation (zhonglingh@linux.alibaba.com)
  - Add patch 20005 to enable device cgroup full delegation by default (zhonglingh@linux.alibaba.com)
  - cherry-pick `add sw patch #20ead624ed837d467ff4c9607d46c027bbc84ac3`. (nijie@wxiat.com)
  - add seccomp support for sw_64. (Weisson@alinux.alibaba.com)
  - add test-seccomp support for sw_64. (Weisson@alinux.alibaba.com)
  - core: Fix subcgroup deletion caused by full delegation (zhonglingh@linux.alibaba.com)
  - core: Fix cgroups members mask cache propagation problem (zhonglingh@linux.alibaba.com)
  - core, udev: remove old device on move event (zhonglingh@linux.alibaba.com)
  - bugfix: sw8a machine seems not to support getxpid syscall any more, replace it with getpid. (Weisson@linux.alibaba.com)


author: Lennart Poettering <lpoetter@redhat.com> - 0-0.7.20100629git4176e5
changelog:
  - New snapshot
  - Split off -units package where other packages can depend on without pulling in the whole of systemd


author: Lennart Poettering <lpoetter@redhat.com> - 8-3
changelog:
  - Reexecute after installation, take ownership of /var/run/user
  - https://bugzilla.redhat.com/show_bug.cgi?id=627457
  - https://bugzilla.redhat.com/show_bug.cgi?id=627634


author: Lennart Poettering <lpoetter@redhat.com> - 10-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=630401
  - https://bugzilla.redhat.com/show_bug.cgi?id=630225
  - https://bugzilla.redhat.com/show_bug.cgi?id=626966
  - https://bugzilla.redhat.com/show_bug.cgi?id=623456


author: Lennart Poettering <lpoetter@redhat.com> - 14-1
changelog:
  - Upstream update
  - Enable hwclock-load by default
  - Obsolete readahead
  - Enable /var/run and /var/lock on tmpfs


author: Lennart Poettering <lpoetter@redhat.com> - 24-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=694079
  - https://bugzilla.redhat.com/show_bug.cgi?id=693289
  - https://bugzilla.redhat.com/show_bug.cgi?id=693274
  - https://bugzilla.redhat.com/show_bug.cgi?id=693161


author: Lennart Poettering <lpoetter@redhat.com> - 25-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=694788
  - https://bugzilla.redhat.com/show_bug.cgi?id=694321
  - https://bugzilla.redhat.com/show_bug.cgi?id=690253
  - https://bugzilla.redhat.com/show_bug.cgi?id=688661
  - https://bugzilla.redhat.com/show_bug.cgi?id=682662
  - https://bugzilla.redhat.com/show_bug.cgi?id=678555
  - https://bugzilla.redhat.com/show_bug.cgi?id=628004


author: Lennart Poettering <lpoetter@redhat.com> - 26-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=699394
  - https://bugzilla.redhat.com/show_bug.cgi?id=698198
  - https://bugzilla.redhat.com/show_bug.cgi?id=698674
  - https://bugzilla.redhat.com/show_bug.cgi?id=699114
  - https://bugzilla.redhat.com/show_bug.cgi?id=699128


author: Lennart Poettering <lpoetter@redhat.com> - 26-2
changelog:
  - Bugfix release
  - https://bugzilla.redhat.com/show_bug.cgi?id=707507
  - https://bugzilla.redhat.com/show_bug.cgi?id=707483
  - https://bugzilla.redhat.com/show_bug.cgi?id=705427
  - https://bugzilla.redhat.com/show_bug.cgi?id=707577


author: Michal Schmidt <mschmidt@redhat.com> - 28-3
changelog:
  - Apply patches from current upstream
  - https://bugzilla.redhat.com/show_bug.cgi?id=709909
  - https://bugzilla.redhat.com/show_bug.cgi?id=710839
  - https://bugzilla.redhat.com/show_bug.cgi?id=711015


author: Michal Schmidt <mschmidt@redhat.com> - 28-4
changelog:
  - Apply patches from current upstream.
  - Fixes memory size detection on 32-bit with >4GB RAM (BZ712341)


author: Lennart Poettering <lpoetter@redhat.com> - 35-1
changelog:
  - New upstream release
  - Update post scripts
  - Resolves: #726683, #713384, #698198, #722803, #727315, #729997, #733706, #734611


author: Michal Schmidt <mschmidt@redhat.com> - 37-2
changelog:
  - A couple of fixes from upstream:
  - Fix a regression in bash-completion reported in Bodhi.
  - Fix a crash in isolating.
  - Resolves: #717325


author: Michal Schmidt <mschmidt@redhat.com> - 38-5
changelog:
  - Build against libgee06. Reenable gtk tools.
  - Delete unused patches.
  - Add easy building of git snapshots.
  - Remove legacy spec file elements.
  - Don't mention implicit BuildRequires.
  - Configure with --disable-static.
  - Merge -units into the main package.
  - Move section 3 manpages to -devel.
  - Fix unowned directory.
  - Run ldconfig in scriptlets.
  - Split systemd-analyze to a subpackage.


author: Lennart Poettering <lpoetter@redhat.com> - 42-1
changelog:
  - New upstream release
  - Save a bit of entropy during system installation (#789407)
  - Don't own /etc/os-release anymore, leave that to fedora-release


author: Dennis Gilmore <dennis@ausil.us> - 43-2
changelog:
  - don't conflict with fedora-release systemd never actually provided
  - /etc/os-release so there is no actual conflict


author: Dennis Gilmore <dennis@ausil.us> - 44-3
changelog:
  - apply patch from upstream so we can build systemd on arm and ppc
  - and likely the rest of the secondary arches


author: Michal Schmidt <mschmidt@redhat.com> - 44-4
changelog:
  - Add triggers from Bill Nottingham to correct the damage done by
    the obsoleted systemd-units's preun scriptlet (#807457).


author: Kay Sievers - 185-1
changelog:
  - New upstream release
    - udev selinux labeling fixes
    - new man pages
    - systemctl help <unit name>


author: Michal Schmidt <mschmidt@redhat.com> - 185-4.gita2368a3
changelog:
  - Update to current git snapshot
    - Add systemd-readahead-analyze
    - Drop upstream patch
  - Split systemd-libs
  - Drop duplicate doc files
  - Fixed License headers of subpackages


author: Lennart Poettering <lpoetter@redhat.com> - 188-1
changelog:
  - New upstream release
  - Enable gdm and avahi by default via the preset file
  - Convert /etc/sysconfig/desktop to display-manager.service symlink
  - Enable hardened build


author: Lennart Poettering <lpoetter@redhat.com> - 188-3
changelog:
  - Remount file systems MS_PRIVATE before switching roots
  - https://bugzilla.redhat.com/show_bug.cgi?id=847418


author: Ray Strode <rstrode@redhat.com> 188-4
changelog:
  - more scriptlet fixes
    (move dm migration logic to %posttrans so the service
     files it's looking for are available at the time
     the logic is run)


author: Lennart Poettering <lpoetter@redhat.com> - 189-3
changelog:
  - Update preset policy
  - Rename preset policy file from 99-default.preset to 90-default.preset so that people can order their own stuff after the Fedora default policy if they wish


author: Lennart Poettering <lpoetter@redhat.com> - 190-1
changelog:
  - New upstream release
  - Take possession of /etc/localtime, and remove /etc/sysconfig/clock
  - https://bugzilla.redhat.com/show_bug.cgi?id=858780
  - https://bugzilla.redhat.com/show_bug.cgi?id=858787
  - https://bugzilla.redhat.com/show_bug.cgi?id=858771
  - https://bugzilla.redhat.com/show_bug.cgi?id=858754
  - https://bugzilla.redhat.com/show_bug.cgi?id=858746
  - https://bugzilla.redhat.com/show_bug.cgi?id=858266
  - https://bugzilla.redhat.com/show_bug.cgi?id=858224
  - https://bugzilla.redhat.com/show_bug.cgi?id=857670
  - https://bugzilla.redhat.com/show_bug.cgi?id=856975
  - https://bugzilla.redhat.com/show_bug.cgi?id=855863
  - https://bugzilla.redhat.com/show_bug.cgi?id=851970
  - https://bugzilla.redhat.com/show_bug.cgi?id=851275
  - https://bugzilla.redhat.com/show_bug.cgi?id=851131
  - https://bugzilla.redhat.com/show_bug.cgi?id=847472
  - https://bugzilla.redhat.com/show_bug.cgi?id=847207
  - https://bugzilla.redhat.com/show_bug.cgi?id=846483
  - https://bugzilla.redhat.com/show_bug.cgi?id=846085
  - https://bugzilla.redhat.com/show_bug.cgi?id=845973
  - https://bugzilla.redhat.com/show_bug.cgi?id=845194
  - https://bugzilla.redhat.com/show_bug.cgi?id=845028
  - https://bugzilla.redhat.com/show_bug.cgi?id=844630
  - https://bugzilla.redhat.com/show_bug.cgi?id=839736
  - https://bugzilla.redhat.com/show_bug.cgi?id=835848
  - https://bugzilla.redhat.com/show_bug.cgi?id=831740
  - https://bugzilla.redhat.com/show_bug.cgi?id=823485
  - https://bugzilla.redhat.com/show_bug.cgi?id=821813
  - https://bugzilla.redhat.com/show_bug.cgi?id=807886
  - https://bugzilla.redhat.com/show_bug.cgi?id=802198
  - https://bugzilla.redhat.com/show_bug.cgi?id=767795
  - https://bugzilla.redhat.com/show_bug.cgi?id=767561
  - https://bugzilla.redhat.com/show_bug.cgi?id=752774
  - https://bugzilla.redhat.com/show_bug.cgi?id=732874
  - https://bugzilla.redhat.com/show_bug.cgi?id=858735


author: Lennart Poettering <lpoetter@redhat.com> - 194-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=859614
  - https://bugzilla.redhat.com/show_bug.cgi?id=859655


author: Lennart Poettering <lpoetter@redhat.com> - 195-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=831665
  - https://bugzilla.redhat.com/show_bug.cgi?id=847720
  - https://bugzilla.redhat.com/show_bug.cgi?id=858693
  - https://bugzilla.redhat.com/show_bug.cgi?id=863481
  - https://bugzilla.redhat.com/show_bug.cgi?id=864629
  - https://bugzilla.redhat.com/show_bug.cgi?id=864672
  - https://bugzilla.redhat.com/show_bug.cgi?id=864674
  - https://bugzilla.redhat.com/show_bug.cgi?id=865128
  - https://bugzilla.redhat.com/show_bug.cgi?id=866346
  - https://bugzilla.redhat.com/show_bug.cgi?id=867407
  - https://bugzilla.redhat.com/show_bug.cgi?id=868603


author: Michal Schmidt <mschmidt@redhat.com> - 195-4
changelog:
  - add dmraid-activation.service to the default preset
  - add yum protected.d fragment
  - https://bugzilla.redhat.com/show_bug.cgi?id=869619
  - https://bugzilla.redhat.com/show_bug.cgi?id=869717


author: Michal Schmidt <mschmidt@redhat.com> - 195-6
changelog:
  - Fix cyclical dep between systemd and systemd-libs.
  - Avoid broken build of test-journal-syslog.
  - https://bugzilla.redhat.com/show_bug.cgi?id=873387
  - https://bugzilla.redhat.com/show_bug.cgi?id=872638


author: Michal Schmidt <mschmidt@redhat.com> - 195-7
changelog:
  - Revert udev killing cgroup patch for F18 Beta.
  - https://bugzilla.redhat.com/show_bug.cgi?id=873576


author: Lennart Poettering <lpoetter@redhat.com> - 195-8
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=873459
  - https://bugzilla.redhat.com/show_bug.cgi?id=878093


