# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-1
changelog:
  - Bump version to 1.4.0.20-1
  - Resolves: Bug 1631461 - Python installer doesn't label ports with ldap_port_t
  - Resolves: Bug 1653165 - certmap fails when Issuer DN has comma in name
  - Resolves: Bug 1653469 - Customer requesting -y option for ds-replcheck
  - Resolves: Bug 1654101 - dscreate related issues
  - Resolves: Bug 1654116 - dsctl related issues
  - Resolves: Bug 1654134 - 389 web UI gives error when try to do backup management
  - Resolves: Bug 1654281 - RHDS webui console is not loading other instances apart
  - Resolves: Bug 1654451 - dscreate permissions and SELinux labels "too relaxed/open", "incorrect" 
  - Resolves: Bug 1654518 - While creating instance getting error "ERR - createprlistensockets - PR_Bind() on All Interfaces port 392 failed: Netscape Portable Runtime error -5966
  - Resolves: Bug 1654566 - dsctl db2ldif: Failing with error AttributeError: DirSrv has no attribute '_instance'
  - Resolves: Bug 1654577 - Cockpit create backup should perform backup name check
  - Resolves: Bug 1654581 - dsidm: User creation failing with error AttributeError: module 'sys' has no attribute 'ext' 
  - Resolves: Bug 1654693 - dsconfig doesn't have option to pass password as an argument
  - Resolves: Bug 1658613 - Bind password change for replica agreement breaks replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-2
changelog:
  - Bump version to 1.4.0.20-2
  - Resolves: Bug 1648937 - python3-lib389 pulls dependencies required only by tests


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-3
changelog:
  - Bump version to 1.4.0.20-3 
  - Resolves: Bug 1654105 - RHDS 11: dsconf related issues
  - Resolves: Bug 1623634 - Add backend functionality to UI's Plugin Tab
  - Resolves: Bug 1648971 - ssca needs to be removed after dirsrv instance is removed
  - Resolves: Bug 1654430 - cockpit does not validate Directory Manager password change operation
  - Resolves: Bug 1654241 - Add backend functionality to UI's Server Tab No. 2 (CLI and UI)
  - Resolves: Bug 1658622 - Information disclosure while using WebUI


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-5
changelog:
  - Bump version to 1.4.0.20-5
  - Resolves: Bug 1654566 - dsctl db2ldif: Failing with error AttributeError: DirSrv has no attribute '_instance'


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-6
changelog:
  - Bump version to 1.4.0.20-6
  - Resolves: Bug 1654101 - dscreate - suffix create root node option
  - Resolves: Bug 1671505 - ns-slapd crashes with k5_mutex_lock: Assertion `r == 0' failed


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-7
changelog:
  - Bump version to 1.4.0.20-7
  - Resolves: Bug 1671735 - dscreate interactive fails when the suffix contains spaces 
  - Resolves: Bug 1654101 - Fix cherry-pick error in setup.py


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-8
changelog:
  - Bump version to 1.4.0.20-8
  - Resolves: Bug 1690024 - ipa role-mod DatabaseError changing cn (entry cache corruption)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-9
changelog:
  - Bump version to 1.4.0.20-9
  - Resolves: Bug 1690024 - ipa role-mod DatabaseError changing cn (missing commit from last release)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-10
changelog:
  - Bump version to 1.4.0.20-10
  - Resolves: Bug 1690024 - rebase lib389 to pull in all the dscreate fixes


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.19-1
changelog:
  - Bump version to 1.4.0.19-1
  - Resolves: Bug 1648924 - during MODRDN referential integrity can fail erronously while updating large groups
  - Resolves: Bug 1631461 - Python installer doesn't label ports with ldap_port_t


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.19-2
changelog:
  - Bump version to 1.4.0.19-2
  - Resolves: Bug 1631461 - Python installer doesn't label ports with ldap_port_t


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-1
changelog:
  - Bump version to 1.4.1.3-1
  - Resolves: Bug 1633718 - 389-ds module: Switched Requires from "python3" to "platform-python"
  - Resolves: Bug 1654059 - 389-ds-base: dscreate and dsconf print DM's password in verbose mode
  - Resolves: Bug 1712467 - Rebase 389-ds-base on RHEL 8.1


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-2
changelog:
  - Bump version to 1.4.1.3-2
  - Resolves: Bug 1544973 - [RFE] IPA replica stuck at last update status: Error (18) Replication error acquiring replica: Incremental update transient error.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-3
changelog:
  - Bump verison to 1.4.1.3-3
  - Resolves: Bug 1654056 - /usr/lib/systemd/system/dirsrv@.service:40: .include directives are deprecated
  - Resolves: Bug 1706224 - Protocol setting is inconsistent in FIPS mode
  - Resolves: Bug 1715675 - Fix potential ipv6 issues
  - Resolves: Bug 1717540 - Address covscan warnings


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-4
changelog:
  - Bump verison to 1.4.1.3-4
  - Resolves: Bug 1712467 - Fix schema OID issue that came over from rebase


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-5
changelog:
  - Bump verison to 1.4.1.3-5
  - Resolves: Bug 1720331 - Log the actual base DN when the search fails with "invalid attribute request"
  - Resolves: Bug 1725815 - consistency in the replication error codes while setting nsds5replicaid=65535
  - Resolves: Bug 1592228 - CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default
  - Resolves: Bug 1699043 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections 
  - Resolves: Bug 1444876 - Add new keyword to access logging when buffer capacity is exceeded


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-7
changelog:
  - Bump version to 1.4.1.3-7
  - Resolves: Bug 1748201 - EMBARGOED CVE-2019-14824 389-ds:1.4/389-ds-base: 389-ds and IDM: allows authenticated unprivileged user to retrieve content of userPassword field for any user


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-3
changelog:
  - Bump version to 1.4.2.4-3
  - Issue 50712 - Version comparison doesn't work correctly on git builds (relates to #1748994)


author: Mark Reynolkds <mreynolds@redhat.com> - 1.4.2.4-5
changelog:
  - Bump version to 1.4.2.4-5
  - Resolves: Bug 1676699 - dsconf allows to set an empty password for Directory Manager
  - Resolves: Bug 1714688 - dscontainer executable should be placed under /usr/libexec/dirsrv/
  - Resolves: Bug 1773115 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1790979 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1790981 - Entry cache contention during base search
  - Resolves: Bug 1790984 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-6
changelog:
  - Resolves: Bug 1776227 - Error: 'PwPolicyManager' object has no attribute 'get_attr_list'
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10(fix regression)
  - Resolves: Bug 1758473 - AddressSanitizer: heap-use-after-free in log_get_loglist
  - Resolves: Bug 1790259 - Change the default behavior of 'nsslapd-verify-filter-schema'
  - Resolves: Bug 1773114 - ns-slapd hangs during CleanAllRUV tests


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-7
changelog:
  - Bump version to 1.4.2.4-7
  - Resolves: Bug 1744662 - DB Deadlock on modrdn appears to corrupt database and entry cache
  - Resolves: Bug 1779216 - dsctl doesn't work with 'slapd-' in the instance name
  - Resolves: Bug 1790984 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
  - Resolves: Bug 1793060 - dsctl healthcheck issues error : type object 'datetime.date' has no attribute 'fromisoformat'
  - Resolves: Bug 1758494 - LeakSanitizer: detected memory leaks in do_add 
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-8
changelog:
  - Bump version to 1.4.2.4-8
  - Resolves: Bug 1807971 - dsctl healthcheck fails at checking replica when conflict entries are present


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-9
changelog:
  - Bump version to 1.4.2.4-9
  - Resolves: Bug 1867097 - Memory leak in ACI using IP subject
  - Resolves: Bug 1862170 - python3-lib389 pulls unnecessary bash-completion package
  - Resolves: Bug 1867988 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-4
changelog:
  - Bump version to 1.4.3.16-4
  - Resolves: Bug 1843517 - Using ldifgen with --start-idx option fails with unsupported operand
  - Resolves: Bug 1801086 - [RFE] Generate dsrc file using dsconf
  - Resolves: Bug 1843838 - heap-use-after-free in slapi_be_getsuffix


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-5
changelog:
  - Bump version to 1.4.3.16-5
  - Resolves: Bug 1879386 - cli dsconf replication monitor fails to retrieve database RUV
  - Resolves: Bug 1887449 - Sync repl: missing update because operation are erroneously stated as nested
  - Resolves: Bug 1887415 - Sync repl - if a series of updates target the same entry then the cookie get wrong changenumber
  - Resolves: Bug 1851978 - SyncRepl plugin provides a wrong cookie


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-6
changelog:
  - Bump version to 1.4.3.16-6
  - Resolves: Bug 1879386 - cli dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) State (green) Reason (error (0)
  - Resolves: Bug 1904991 - Unexpected info returned to ldap request
  - Resolves: Bug 1843838 - heap-use-after-free in slapi_be_getsuffix
  - Resolves: Bug 1903133 - Server-Cert.crt created using dscreate has Subject:CN =localhost instead of hostname.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-7
changelog:
  - Bump version to 1.4.3.16-7
  - Resolves: Bug 1890118 - SIGFPE crash in rhds disk monitoring routine
  - Resolves: Bug 1904991 - 389-ds:1.4/389-ds-base: information disclosure during the binding of a DN
  - Resolves: Bug 1627645 - ldif2db does not change exit code when there are skipped entries


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-8
changelog:
  - Bump version to 1.4.3.16-8
  - Resolves: Bug 1903539 - cn=monitor is throwing err=32 with scope: -s one
  - Resolves: Bug 1893870 - PR_WaitCondVar() issue causes replication delay when clock jumps backwards


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-9
changelog:
  - Bump version to 1.4.3.16-9
  - Resolves: Bug 1924130 - RHDS11: “write” permission of ACI changes ns-slapd’s behavior on search operation
  - Resolves: Bug 1916677 - A failed re-indexing leaves the database in broken state.
  - Resolves: Bug 1912822 - sync_repl: when completing an operation in the pending list, it can select the wrong operation


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-10
changelog:
  - Bump version to 1.4.3.16-10
  - Resolves: Bug 1924130 - RHDS11: “write” permission of ACI changes ns-slapd’s behavior on search operation(part 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-11
changelog:
  - Bump version to 1.4.3.16-11
  - Resolves: Bug 1924130 - RHDS11: “write” permission of ACI changes ns-slapd’s behavior on search operation(remove patch as it breaks DogTag, will add this patch back after DogTag is fixed)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-12
changelog:
  - Bump version to 1.4.3.16-12
  - Resolves: Bug 1929067 - PKI instance creation failed with new 389-ds-base build


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-13
changelog:
  - Bump version to 1.4.3.16-13
  - Resolves: Bug 1930188 - crash in sync_repl when a MODRDN create a cenotaph


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-14
changelog:
  - Bump version to 1.4.3.16-14
  - Resolves: Bug 1968588 - ACIs are being evaluated against the Replication Manager account in a replication context
  - Resolves: Bug 1960720 - sync_repl NULL pointer dereference in sync_create_state_control()


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-15
changelog:
  - Bump version to 1.4.3.16-15
  - Resolves: Bug 1970791 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-16
changelog:
  - Bump version to 1.4.3.16-16
  - Resolves: Bug 1972738 - Changelog cache can upload updates from a wrong starting point (CSN)
  - Resolves: Bug 1972721 - Large updates can reset the CLcache to the beginning of the changelog


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-17
changelog:
  - Bump version to 1.4.3.16-17
  - Resolve: Bug 1983095 - Internal unindexed searches in syncrepl
  - Resolve: Bug 1980063 - IPA installation fails on s390x with 389-ds-base-1.4.3.8-4.module+el8.3.0+7193+dfd1e8ad.s390x


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-18
changelog:
  - Bump version to 1.4.3.16-18
  - Resolve: Bug 1983121 - CRYPT password hash with asterisk allows any bind attempt to succeed


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-19
changelog:
  - Bump version to 1.4.3.16-19
  - Resolve: Bug 1984091 - persistent search returns entries even when an error is returned by content-sync-plugin


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-1
changelog:
  - Bump version to 1.4.3.23-1
  - Resolves: Bug 1947044 - Rebase 389 DS with 389-ds-base-1.4.3.23 for RHEL 8.5
  - Resolves: Bug 1850664 - RFE - Add an option for the Retro Changelog to ignore some attributes
  - Resolves: Bug 1903221 - Memory leak in 389ds backend (Minor)
  - Resolves: Bug 1898541 - Changelog cache can upload updates from a wrong starting point (CSN)
  - Resolves: Bug 1889562 - client psearch with multiple threads hangs if nsslapd-maxthreadsperconn is under sized
  - Resolves: Bug 1924848 - Negative wtime on ldapcompare
  - Resolves: Bug 1895460 - RFE - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  - Resolves: Bug 1897614 - Performance search rate: change entry cache monitor to recursive pthread mutex
  - Resolves: Bug 1939607 - hang because of incorrect accounting of readers in vattr rwlock
  - Resolves: Bug 1626633 - [RFE] DS - Update the password policy to support a Temporary Password with expiration
  - Resolves: Bug 1952804 - CVE-2021-3514 389-ds:1.4/389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-2
changelog:
  - Bump version to 1.4.3.23-2
  - Resolves: Bug 1812286 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  - Resolves: Bug 1748441 - RFE - Schedule execution of "compactdb" at specific date/time
  - Resolves: Bug 1938239 - RFE - Extend DNA plugin to support intervals sizes for subuids


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-3
changelog:
  - Bump version to 1.4.3.23-3
  - Resolves: Bug 1944494 - support for RFC 4530 entryUUID attribute
  - Resolves: Bug 1967839 - ACIs are being evaluated against the Replication Manager account in a replication context
  - Resolves: Bug 1970259 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
  - Resolves: Bug 1972590 - Large updates can reset the CLcache to the beginning of the changelog
  - Resolves: Bug 1903221 - Memory leak in 389ds backend (Minor)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-4
changelog:
  - Bump version to 1.4.3.23-4
  - Resolves: Bug 1976906 - Instance crash at restart after changelog configuration
  - Resolves: Bug 1480323 - ns-slapd crash at startup - Segmentation fault in strcmpi_fast() when the Referential Integrity log is manually edited
  - Resolves: Bug 1967596 - Temporary password - add CLI and fix compiler errors


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-5
changelog:
  - Bump version to 1.4.3.23-5
  - Resolves: Bug 1951020 - Internal unindexed searches in syncrepl
  - Resolves: Bug 1978279 - ds-replcheck state output message has 'Master' instead of 'Supplier'


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-6
changelog:
  - Bump version to 1.4.3.23-6
  - Resolves: Bug 1982787 - CRYPT password hash with asterisk allows any bind attempt to succeed


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-7
changelog:
  - Bump version to 1.4.3.23-7
  - Resolves: Bug 1983921 - persistent search returns entries even when an error is returned by content-sync-plugin


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-8
changelog:
  - Bump version to 1.4.3.23-8
  - Resolves: Bug 1947044 - add missing patch for import result code
  - Resolves: Bug 1944494 - support for RFC 4530 entryUUID attribute


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-9
changelog:
  - Bump version to 1.4.3.23-9
  - Resolves: Bug 1947044 - remove unsupported GOST password storage scheme


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-10
changelog:
  - Bump version to 1.4.3.23-10
  - Resolves: Bug 1997138 - LDAP server crashes when dnaInterval attribute is set to 0


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-11
changelog:
  - Bump version to 1.4.3.23-11
  - Resolves: Bug 2022005 - ipa user-add fails with "gecos: invalid per syntax: Invalid syntax"
  - Resolves: Bug 2021998 - IPA server is very slow in execution of some searches


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-12
changelog:
  - Bump version to 1.4.3.23-12
  - Resolves: Bug 2024697 - DB corruption "_entryrdn_insert_key - Same DN (dn: nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,<SUFFIX>) is already in the entryrdn file"


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.23-13
changelog:
  - Bump version to 1.4.3.23-13
  - Resolves: Bug 2056488 - Paged search lookthroughlimit counter doesnt take read ahead into account
  - Resolves: Bug 2047166 - Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing
  - Resolves: Bug 2056481 - double-free of the virtual attribute context in persistent search


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.23-14
changelog:
  - Bump version to 1.4.3.23-14
  - Resolves: Bug 2059893 - Paged search lookthroughlimit counter doesnt take read ahead into account
  - Resolves: Bug 2060106 - Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing
  - Resolves: Bug 2060110 - double-free of the virtual attribute context in persistent search


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-1
changelog:
  - Bump version to 1.4.3.28-1
  - Resolves: Bug 2016014 - rebase RHEL 8.6 with 389-ds-base-1.4.3
  - Resolves: Bug 1990002 - monitor displays wrong date for connection
  - Resolves: Bug 1950335 - upgrade password hash on bind also causes passwordExpirationtime to be updated
  - Resolves: Bug 1916292 - Indexing a single backend actually processes all configured backends
  - Resolves: Bug 1780842 - [RFE] set db home directory to /dev/shm by default
  - Resolves: Bug 2000975 - Retro Changelog does not trim changes


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-2
changelog:
  - Bump version to 1.4.3.28-2
  - Resolves: Bug 2024695 - DB corruption "_entryrdn_insert_key - Same DN (dn: nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,<SUFFIX>) is already in the entryrdn file"
  - Resolves: Bug 1859210 - systemd-tmpfiles warnings
  - Resolves: Bug 1913199 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
  - Resolves: Bug 1974236 - automatique disable of virtual attribute checking
  - Resolves: Bug 1976882 - logconv.pl -j: Use of uninitialized value $first in numeric gt (>)
  - Resolves: Bug 1981281 - ipa user-add fails with "gecos: value invalid per syntax: Invalid syntax"
  - Resolves: Bug 2015998 - Log the Auto Member invalid regex rules in the LDAP errors log


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-3
changelog:
  - Bump version to 1.4.3.28-3
  - Resolves: Bug 2030367 - EMBARGOED CVE-2021-4091 389-ds:1.4/389-ds-base: double-free of the virtual attribute context in persistent search
  - Resolves: Bug 2033398 - PBKDF2 hashing does not work in FIPS mode


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-4
changelog:
  - Bump version to 1.4.3.28-4
  - Resolves: Bug 2045223 - ipa-restore command is failing when restore after uninstalling the server


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-5
changelog:
  - Bump version to 1.4.3.28-5
  - Resolves: Bug 2045223 - ipa-restore command is failing when restore after uninstalling the server (aprt 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-6
changelog:
  - Bump version to 1.4.3.28-6
  - Resolves: Bug 2047171 - Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.28-7
changelog:
  - Bump version to 1.4.3.28-7
  - Resolves: Bug 2081008 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
  - Resolves: Bug 2081014 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.20-5
changelog:
  - Bump version to 1.4.3.30-5
  - Resolves: Bug 2113002 - ipa-replica-manage --connect --winsync fails with traceback


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.20-6
changelog:
  - Bump version to 1.4.3.30-6
  - Resolves: Bug 2113002 - ipa-replica-manage --connect --winsync fails with traceback
  - Resolves: Bug 2118763 - SIGSEGV in sync_repl


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-1
changelog:
  - Bump version to 1.4.3.32-1
  - Resolves: Bug 2098138 - broken nsslapd-subtree-rename-switch option in rhds11
  - Resolves: Bug 2119063 - entryuuid fixup tasks fails because entryUUID is not mutable
  - Resolves: Bug 2136610 - [RFE] Add 'cn' attribute to IPA audit logs 
  - Resolves: Bug 2142638 - pam mutex lock causing high etimes, affecting red hat internal sso
  - Resolves: Bug 2096795 - [RFE] Support ECDSA private keys for TLS


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-2
changelog:
  - Bump version to 1.4.3.32-2
  - Resolves: Bug 2149956 - ipa-server-install displays mdd failure Server is unwilling to perform


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-3
changelog:
  - Bump version to 1.4.3.32-3
  - Resolves: Bug 2149956 - change default password storage scheme to be backwards compatible with RHEL 7


author: Mark Reynolds <mreynolds@rehdat.com> - 1.4.3.34-1
changelog:
  - Bump version to 1.4.3.34-1
  - Resolves: Bug 2177234 - pam mutex lock causing high etimes, affecting red hat internal sso


author: David Sloboda <david.x.sloboda@oracle.com> - 1.4.3.35-2
changelog:
  - Resolves: rhbz#2232420 - Paged search impacts performance
  - Resolves: rhbz#2235330 - dtablesize being set to soft maxfiledescriptor limit causing massive slowdown in large enviroments.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.36-2
changelog:
  - Bump version to 1.4.3.36-2
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.37-1
changelog:
  - Bump versionto 1.4.3.37-1
  - Resolves: rhbz#2224505 - Paged search impacts performance
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme
  - Resolves: rhbz#2218235 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2210491 - dtablesize being set to soft maxfiledescriptor limit causing massive slowdown in large enviroments.
  - Resolves: rhbz#2149967 - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG


author: David Sloboda <david.x.sloboda@oracle.com> - 1.4.3.37-2
changelog:
  - Resolves: JIRA:RHEL-12710 - bdb_start - Detected Disorderly Shutdown directory server is not starting.
  - Resolves: JIRA:RHEL-16822 - ns-slapd crash in slapi_attr_basetype


author: Simon Pichugin <spichugi@redhat.com> - 1.4.3.39-1
changelog:
  - Bump version to 1.4.3.39-1
  - Resolves: RHEL-19028 - Rebase 389-ds-base in RHEL 8.10 to 1.4.3.39
  - Resolves: RHEL-19240 - [RFE] Add PROXY protocol support to 389-ds-base
  - Resolves: RHEL-5143  - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG.
  - Resolves: RHEL-5107  - bdb_start - Detected Disorderly Shutdown directory server is not starting
  - Resolves: RHEL-16338 - ns-slapd crash in slapi_attr_basetype
  - Resolves: RHEL-14025 - After an upgrade the LDAP server won't start if nsslapd-conntablesize is present in the dse.ldif file.


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.39-2
changelog:
  - Bump version to 1.4.3.39-2
  - Resolves: RHEL-23209 - CVE-2024-1062 389-ds:1.4/389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
  - Resolves: RHEL-5390  - schema-compat-plugin expensive with automember rebuild
  - Resolves: RHEL-5135  - crash in sync_update_persist_op() of content sync plugin


author: Simon Pichugin <spichugi@redhat.com> - 1.4.3.39-3
changelog:
  - Bump version to 1.4.3.39-3
  - Resolves: RHEL-19240 - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix


author: James Chapman <jachapma@redhat.com> - 1.4.3.39-4
changelog:
  - Bump version to 1.4.3.39-4
  - Resolves: RHEL-34818 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-34824 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-5
changelog:
  - Bump version to 1.4.3.39-5
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-6
changelog:
  - Bump version to 1.4.3.39-6
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-7
changelog:
  - Bump version to 1.4.3.39-7
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-8
changelog:
  - Bump version to 1.4.3.39-8
  - Resolves: RHEL-40943 - CVE-2024-5953 389-ds:1.4/389-ds-base: Malformed userPassword hash may cause Denial of Service [rhel-8.10.z]
  - Resolves: RHEL-58069 - perf search result investigation for many large static groups and members [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-10
changelog:
  - Resolves: RHEL-69822 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-8.10.z]
  - Resolves: RHEL-71215 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-11
changelog:
  - Resolves: RHEL-72487 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-12
changelog:
  - Resolves: RHEL-85499 - [RFE] defer memberof nested updates [rhel-8.10.z]
  - Resolves: RHEL-65663 - dsconf incorrectly setting up Pass-Through Authentication
  - Resolves: RHEL-80704 - Increased memory consumption caused by NDN cache [rhel-8.10.z]
  - Resolves: RHEL-81127 - nsslapd-idletimeout is ignored [rhel-8.10.z]
  - Resolves: RHEL-81136 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-8.10.z]
  - Resolves: RHEL-81143 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index [rhel-8.10.z]
  - Resolves: RHEL-81152 - AddressSanitizer: double-free [rhel-8.10.z]
  - Resolves: RHEL-81176 - Verbose option for dsctl is not shown in help of actions [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-13
changelog:
  - Resolves: RHEL-89749 - Nested group does not receive memberOf attribute [rhel-8.10.z]
  - Resolves: RHEL-89758 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-8.10.z]
  - Resolves: RHEL-89765 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-8.10.z]
  - Resolves: RHEL-89778 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-14
changelog:
  - Reverts: RHEL-80704 - Increased memory consumption caused by NDN cache [rhel-8.10.z]
  - Resolves: RHEL-95442 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-8.10.z]


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.4-1
changelog:
  - Bump version to 1.4.3.4
  - Issue 50954 - Port buildnum.pl to python(part 2)
  - Issue 50955 - Fix memory leaks in chaining plugin
  - Issue 50954 - Port buildnum.pl to python
  - Issue 50947 - change 00core.ldif objectClasses for openldap migration
  - Issue 50755 - setting nsslapd-db-home-directory is overriding db_directory
  - Issue 50937 - Update CLI for new backend split configuration
  - Issue 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  - Issue 50945 - givenname alias of gn from openldap
  - Issue 50935 - systemd override in lib389 for dscontainer
  - Issue 50499 - Fix npm audit issues
  - Issue 49761 - Fix CI test suite issues
  - Issue 50618 - clean compiler warning and log level
  - Issue 50889 - fix compiler issues
  - Issue 50884 - Health check tool DSEldif check fails
  - Issue 50926 - Remove dual spinner and other UI fixes
  - Issue 50928 - Unable to create a suffix with countryName
  - Issue 50758 - Only Recommend bash-completion, not Require
  - Issue 50923 - Fix a test regression
  - Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  - Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  - Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  - Issue 50919 - Backend delete fails using dsconf
  - Issue 50872 - dsconf can't create GSSAPI replication agreements
  - Issue 50912 - RFE - add password policy attribute pwdReset
  - Issue 50914 - No error returned when adding an entry matching filters for a non existing automember group
  - Issue 50889 - Extract pem files into a private namespace
  - Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  - Issue 50686 - Port fractional replication test cases from TET to python3 final
  - Issue 49845 - Remove pkgconfig check for libasan
  - Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  - Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  - Issue 50786 - connection table freelist
  - Issue 50618 - support cgroupv2
  - Issue 50900 - Fix cargo offline build
  - Issue 50898 - ldclt core dumped when run with -e genldif option


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.5-1
changelog:
  - Bump version to 1.4.3.5
  - Issue 50994 - Fix latest UI bugs found by QE
  - Issue 50933 - rfc2307compat.ldif
  - Issue 50337 - Replace exec() with setattr()
  - Issue 50984 - Memory leaks in disk monitoring
  - Issue 50984 - Memory leaks in disk monitoring
  - Issue 49731 - dscreate fails in silent mode because of db_home_dir
  - Issue 50975 - Revise UI branding with new minimized build
  - Issue 49437 - Fix memory leak with indirect COS
  - Issue 49731 - Do not add db_home_dir to template-dse.ldif
  - Issue 49731 - set and use db_home_directory by default
  - Issue 50971 - fix BSD_SOURCE
  - Issue 50744 - -n option of dbverify does not work
  - Issue 50952 - SSCA lacks basicConstraint:CA
  - Issue 50976 - Clean up Web UI source directory from unused files
  - Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  - Issue 50966 - UI - Database indexes not using typeAhead correctly
  - Issue 50974 - UI - wrong title in "Delete Suffix" popup
  - Issue 50972 - Fix cockpit plugin build
  - Issue 49761 - Fix CI test suite issues
  - Issue 50971 - Support building on FreeBSD.
  - Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  - Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  - Issue 50963 - We should bundle *.min.js files of Console
  - Issue 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  - Issue 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  - Issue 50954 - buildnum.py - fix date formatting issue


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.6-1
changelog:
  - Bump version to 1.4.3.6
  - Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  - Issue 50931 - RFE AD filter rewriter for ObjectCategory
  - Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  - Issue 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  - Issue 51008 - dbhome in containers
  - Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  - Issue 51014 - slapi_pal.c possible static buffer overflow
  - Issue 50545 - remove dbmon "incr" option from arg parser
  - Issue 50545 - Port dbmon.sh to dsconf
  - Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  - Issue 49731 - Fix additional issues with setting db home directory by default
  - Issue 50337 - Replace exec() with setattr()
  - Issue 50905 - intermittent SSL hang with rhds
  - Issue 50952 - SSCA lacks basicConstraint:CA
  - Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  - Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.7-1
changelog:
  - Bump version to 1.4.3.7
  - Issue 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  - Issue 51035 - Heavy StartTLS connection load can randomly fail with err=1
  - Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  - Issue 51031 - UI - transition between two instances needs improvement


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-0
changelog:
  - Bump version to 1.4.3.8-0
  - Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  - Issue 51054 - Revise ACI target syntax checking
  - Issue 51068 - deadlock when updating the schema
  - Issue 51060 - unable to set sslVersionMin to TLS1.0
  - Issue 51064 - Unable to install server where IPv6 is disabled
  - Issue 51051 - CLI fix consistency issues with confirmations
  - Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  - Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  - Issue 51047 - React deprecating ComponentWillMount
  - Issue 50499 - fix npm audit issues
  - Issue 50545 - Port dbgen.pl to dsctl


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-1
changelog:
  - Bump version to 1.4.3.8-1
  - Resolves: Bug 1833350 - Rebase 389-ds-base for RHEL 8.3
  - Resolves: Bug 1728943 - [RFE] Advance options in RHDS Disk Monitoring Framework
  - Resolves: Bug 1775285 - [RFE] Implement the Password Policy attribute "pwdReset"
  - Resolves: Bug 1638875 - [RFE] extract key/certs pem file into a private namespace
  - Resolves: Bug 1758478 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  - Resolves: Bug 1795943 - Port dbmon.sh from legacy tools package
  - Resolves: Bug 1798394 - Port dbgen from legacy tools package
  - Resolves: Bug 1800529 - Memory leaks in disk monitoring
  - Resolves: Bug 1807419 - Unable to create a suffix with countryName either via dscreate or the admin console
  - Resolves: Bug 1816848 - Database links: get_monitor() takes 1 positional argument but 2 were given
  - Resolves: Bug 1816854 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  - Resolves: Bug 1816857 - Searches on cn=config takes values with spaces and makes multiple attributes out of them
  - Resolves: Bug 1816859 - lib389 - Replace exec() with setattr()
  - Resolves: Bug 1816862 - Memory leak in indirect COS
  - Resolves: Bug 1829071 - Installation of RHDS 11 fails on RHEL8 server with IPv6 disabled
  - Resolves: Bug 1833515 - set 'nsslapd-enable-upgrade-hash: off' as this raises warnings in IPA
  - Resolves: Bug 1790986 - cenotaph errors on modrdn operations
  - Resolves: Bug 1769734 - Heavy StartTLS connection load can randomly fail with err=1
  - Resolves: Bug 1758501 - LeakSanitizer: detected memory leaks in changelog5_init and perfctrs_init


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-2
changelog:
  - Bump version to 1.4.3.8-2
  - Resolves: Bug 1833350 - Remove cockpit dependancies that are breaking builds


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-3
changelog:
  - Bump version to 1.4.3.8-3
  - Resolves: Bug 1835619 - Healthcheck with --json option reports "Object of type 'bytes' is not JSON serializable" when mapping tree is deleted 
  - Resolves: Bug 1836428 - Directory Server ds-replcheck RFE to add a timeout command-line arg/value to wait longer when connecting to a replica server
  - Resolves: Bug 1843090 - abort when a empty valueset is freed
  - Resolves: Bug 1843156 - Prevent unnecessarily duplication of the target entry
  - Resolves: Bug 1843157 - Check for clock errors and time skew
  - Resolves: Bug 1843159 - RFE AD filter rewriter for ObjectCategory
  - Resolves: Bug 1843162 - Creating Replication Manager fails if uid=repman is used
  - Resolves: Bug 1816851 - Add option to healthcheck to list all the lint reports
  - Resolves: Bug 1748227 - Instance name length is not enforced
  - Resolves: Bug 1748244 - dscreate doesn't sanitize instance name


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-4
changelog:
  - Bump version to 1.4.3.8-4
  - Resolves: Bug 1806978 - ns-slapd crashes during db2ldif
  - Resolves: Bug 1450863 - Log warning when tuning of nsslapd-threadnumber above or below the optimal value
  - Resolves: Bug 1647017 - A distinguished value of a single valued attribute can be missing in an entry
  - Resolves: Bug 1806573 - Dsctl healthcheck doesn't work when using instance name with 'slapd-'
  - Resolves: Bug 1807773 - dsctl healthcheck : typo in DSREPLLE0002 Lint error suggested resolution commands
  - Resolves: Bug 1843567 - Healthcheck to find notes=F
  - Resolves: Bug 1845094 - User/Directory Manager can modify Password Policy attribute "pwdReset"
  - Resolves: Bug 1850275 - Add new access log keywords for time spent in work queue and actual operation time
  - Resolves: Bug 1442386 - Recreating an index while changing case will create an indexfile with the old name (different case) and after restart the indexfile is abandoned
  - Resolves: Bug 1672574 - nsIndexIDListScanLimit accepts any value
  - Resolves: Bug 1800529 - Memory leaks in disk monitoring


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-5
changelog:
  - Bump version to 1.4.3.8-5
  - Resolves: Bug 1841086 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  - Resolves: Bug 1800529 - Memory leaks in disk monitoring
  - Resolves: Bug 1748227 - Instance name length is not enforced
  - Resolves: Bug 1849418 - python3-lib389 pulls unnecessary bash-completion package


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-6
changelog:
  - Bump version to 1.4.3.8-6
  - Resolves: Bug 1851973 - Duplicate entryUSN numbers for different LDAP entries in the same backend
  - Resolves: Bug 1888863 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1859228 - do not add referrals for masters with different data generation
  - Resolves: Bug 1859227 - create keep alive entry after on line init
  - Resolves: Bug 1896850 - NULL dereference in revert_cache()
  - Resolves: Bug 1861504 - ds-replcheck crashes in offline mode
  - Resolves: Bug 1898850 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-6
changelog:
  - Bump version to 1.4.3.8-6
  - Resolves: Bug 1904348 - Duplicate entryUSN numbers for different LDAP entries in the same backend
  - Resolves: Bug 1904349 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1904350 - do not add referrals for masters with different data generation
  - Resolves: Bug 1904351 - create keep alive entry after on line init
  - Resolves: Bug 1904352 - NULL dereference in revert_cache()
  - Resolves: Bug 1904353 - ds-replcheck crashes in offline mode
  - Resolves: Bug 1904347 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-7
changelog:
  - Bump version to 1.4.3.8-7
  - Resolves: Bug 1908705 - CVE-2020-35518 389-ds:1.4/389-ds-base: information disclosure during the binding of a DN
  - Resolves: Bug 1936461 - A failed re-indexing leaves the database in broken state.
  - Resolves: Bug 1912481 - Server-Cert.crt created using dscreate has Subject:CN =localhost instead of hostname.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-8
changelog:
  - Add %_isa to -devel base package dependency.
  - Headers get installed by "make install", copying them from the HTML
    doc headers dir is not necessary.
  - Configure build with --disable-static.
  - Drop unneeded spec stuff (buildroot def, removal, clean, pkgconfig dep).
  - Using %defattr is not needed anymore.
  - Deduplicate documentation files in unversioned docdir (#1001276).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Charalampos Stratakis <cstratak@redhat.com> - 0.28.1-6
changelog:
  - Replace GCC's attribute optimize("Os") by the better supported and similar (cold).
  - Resolves: rhbz#1658621


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.6-15
changelog:
  - Fix source URL and switch to xz tarball (the only one available)
  - Do not own %{_localstatedir}/lib/rpm-state (#907618)
  - Ship gsettings-schema-convert manpage only in -devel (#893767)
  - Install COPYING as %license where available
  - Fix bogus dates in %changelog


author: Severin Gehwolf <sgehwolf@redhat.com> - 2.1.9-6
changelog:
  - Add explicit requirement on javapackages-tools for script which
    uses java-functions. See RHBZ#1600426.


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Debarshi Ray <rishi@fedoraproject.org> - 0.19.0-1
changelog:
  - 0.19.0
  - Fix License
  - Explicitly enable JPEG and OpenMP support to avoid surprises
  - Tighten %files, mostly so api/soname changes will no longer be a surpise
  - Use %make_build %ldconfig_scriptlets
  Resolves: #1633708


author: Thomas Haller <thaller@redhat.com> - 1:1.22.0-0.2
changelog:
  - Update to 1.22-rc1 (1.21.90)
  - large internal rework of libnm's NMClient
  - dhcp: switch implementation of "internal" DHCP to nettools' n-dhcp4
  - add support for carrier state of devices on D-Bus/libnm (rh #1722024)
  - cloud-setup: add initial and experimental tool for configuring in cloud (rh #1642461)
  - dhcp: support configuring FQDN hostname flags (rh #1649368)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.2-1
changelog:
  - Update to 1.22.2
  - core,libnm: expose capability for OVS support (rh #1785147)
  - dhcp: various bugfixes for nettools n-dhcp4 plugin


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.22.4-1
changelog:
  - Update to 1.22.4
  - dhcp: fix behavior of internal DHCP client when the server sends a NAK (rh #1787219)


author: Antonio Cardace <acardace@redhat.com> - 1:1.22.6-1
changelog:
  - Update to 1.22.6
  - nm-device: add new pending action to keep the device busy when in between states (rh #1759956)
  - cloud-setup: avoid unsupported settings in systemd service unit (rh #1791758)
  - do not create virtual device if master is not present (rh #1795919)
  - allow IPv6 RA timeout to be set to a value higher than 120 seconds (rh #1795957)
  - fix behaviour when 'ipv4.dhcp-timeout' option is set to 'infinity' (rh #1791378)


author: Antonio Cardace <acardace@redhat.com> - 1:1.22.8-1
changelog:
  - Update to 1.22.8
  - Added configuration option to customize IPv6 RA timeout (rh #1801158)
  - Removed length limitation for OVS Bridge, Patches and Interfaces (only Patch types) names (rh #1788432)
  - Reworked asynchronous deactivation of OVS interfaces (rh #1787989, rh #1782701)
  - Fixed failure when creating team interfaces (rh #1798947)
  - ifcfg-rh: fix clearing ovs slave type from ifcfg-rh file (rh #1804167)
  - Fixed bug causing virtual devices to not be available after AddConnection()/Update() (rh #1804350)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.22.8-3
changelog:
  - dhcp: keep trying after a send failure (rh #1806516)
  - ovs: fail port enslavement when the bridge is not found (rh #1797696)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.8-4
changelog:
  - core: fix leaking device state files in /run (rh #1810153)
  - dhcp: fix crash in nettools client when leaking GSource (rh #1810188)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.8-5
changelog:
  - dhcp: fix handling IO error in nettools DHCPv4 client (rh #1843357)
  - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1843360, CVE-2020-10754)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-4
changelog:
  - bond: fix Reapply does not update bond options (rh #1847814)
  - dhcp: support DHCPv6 fqdn_fqdn option for hostname (rh #1858344)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-7
changelog:
  - dhcp: add dhcp-vendor-class-identifier option (rh #1871042)
  - initrd: parse 'rd.net.dhcp.vendor-class' kernel cmdline arg (rh #1872299)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.26.0-8
changelog:
  - initrd: accept mac address as interface specifier (rh #1879795)
  - initrd: fix parsing IPv6 prefix length (rh #1879795)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-11
changelog:
  - initrd: disable ipv4 and ipv6 by default for vlan parent connection (rh #1903698)
  - initrd: fix parsing of ip= argument with dotted interface name (rh #1903695)
  - initrd: fix parsing with empty token (rh #1902791)


author: EL Errata <el-errata_ww@oracle.com> - 1.26.0-12.0.1
changelog:
  - add connectivity check via Oracle servers [Orabug: 32051972]
  - Disable the build of NetworkManager-config-connectivity-* subpackage for 8.3


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.26.0-0.2.1
changelog:
  - device: restart DHCP only for devices that are active or activating (rh #1852612)
  - initrd: fix generating default BOOTIF= connection (rh #1853277)
  - ovs: fix race condition when setting MAC address for ovs interfaces (rh #1852106)


author: Thomas Haller <thaller@redhat.com> - 1:1.26.0-1
changelog:
  - update to 1.26.0
  - device: reset SR-IOV parameters on activation failure (rh #1819587)
  - initrd: enable ipv6.method=auto with ip=dhcp6 (rh #1854323)
  - core: add "nm-shared" zone for firewalld for shared mode (rh #1834907)
  - ppp: fix taking control of link (rh #1849386)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-2
changelog:
  - core: fix generation of local routes for VRF devices (rh #1857133)
  - team: fix crash on failure to connect to teamd (rh #1856723)
  - core: fix detecting failure of master active-connection (rh #1845018)
  - core: fix warning about setting active_slave of bond when activating master (rh #1858326)
  - import translations (rh #1820552)


author: Thomas Haller <thaller@redhat.com> - 1:1.26.0-3
changelog:
  - core: fix managing devices after resuming from sleep (rh #1855563)
  - dhcp: fix BPF filter for internal client on big endian arch (rh #1861488)
  - core: support warning log setting IPv6 MTU with IPv6 disabled (rh #1840989)
  - wifi: fix crash parsing incomplete BSS info (rh #1866395)


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-3
changelog:
  - Increase LimitNOFILE to allow more than 1024 file descriptors (rh #1926599).
    This requires a suitable libndp version that can handle many file descriptors (rh #1933041).


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-6
changelog:
  - core: fix handling local routes generated by kernel (rh #1907661)
  - initrd: fix crash with rd.znet= argument (rh #1941106)
  - core: fix crash handling path match (rh #1942741)


author: Wen Liang <wenliang@redhat.com> - 1:1.30.0-8
changelog:
  - core: fix finding active connection for controller (rh #1965337)
  - bond: support 'tlb_dynamic_lb' in 'balance-alb' mode (rh #1965948)
  - manager: delete default connection when veth removed (rh #1965336)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.30.0-11
changelog:
  - platform: preserve IPv6 multicast route added by kernel (rh #2007264)
  - cloud-setup: don't interfere with other subnets (rh #2007341)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.30.0-12
changelog:
  - initrd: set an IPv4 required-timeout of 20 seconds, to prefer IPv4
    over IPv6 for default connections (rh #1961666)


author: Antonio Cardace <acardace@redhat.com> - 1:1.30.0-0.9
changelog:
  - Update to 1.29.11 (development)
  - bond: fix changing mode when the device is created externally (rh #1870691)
  - ovs: fix firewalld configuration for ovs-ports (rh #1921107)
  - ovs: avoid race condition when system interface is removed from ovsdb (rh #1923248)
  - doc: mention NETMASK as alternative to PREFIX for addresses in `man nm-settings-ifcfg-rh` (rh #1925123)


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-0.10
changelog:
  - Update to 1.30-rc1 (1.29.90-dev) (development)
  - cloud-setup: fix removing IPv4 address (rh #1920838)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.0-1
changelog:
  - update to 1.32.0 release
  - veth: fix null error when deleting the device (rh #1915278)
  - veth: fix crash when deleting the device profile (rh #1915276)
  - firewall: add new "nftables" firewall-backend (rh #1548825)
  - DNS: fix lookup of hostname via DNS (rh #1970335)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.2-1
changelog:
  - update to 1.32.2 release
  - device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
  - docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
  - cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
  - daemon: performance improvements (rh #1847125)
  - dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
  - Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)


author: Gris Ge <fge@redhat.com> - 1:1.32.4-1
changelog:
  - Upgrade to 1.32.4 with fixes of:
  - nmcli: show DNS SEARCH field in device information. (rh #1852317)
  - device: avoid crash setting VPN config during unrealize. (rh #1912423)
  - core: send ARP announcements when there is carrier. (rh #1956793)
  - core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
  - core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
  - ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
  - cloud-setup: add support for Aliyun cloud. (rh #1823315)


author: Gris Ge <fge@redhat.com> - 1:1.32.6-1
changelog:
  - Upgrade to 1.32.6 release
  - core: fix adding stale local routes when address changes (rh #1979192)
  - dhcp: handle filename/bootfile_name DHCP option and write it to device state
    file for initrd/kickstart (rh #1979387)
  - initrd: add "ib.pkey=" command line option (rh #1805708)
  - core: introduce "keep-configuration" device option to forcefully activate a
    profile on start (rh #1934122)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.32.8-1
changelog:
  - Upgrade to 1.32.8 release
  - firewalld: configure zones on "Reloaded" signal (rh #1982403)
  - ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
  - core: fix wrong MTU for bridge interfaces (rh #1973536)
  - cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.10-1
changelog:
  - update to 1.32.10 release
  - nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
  - IP: fix the order of IP addresses during service restart (rh #1988751)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.32.10-3
changelog:
  - preserve the IPv6 multicast route added by kernel (rh #2004212)
  - cloud-setup: better handle other route configuration (rh #1977984)


author: Wen Liang <wenliang@redhat.com> - 1:1.36.0-0.4
changelog:
  - Upgrade to 1.35.4 release (development)
  - ipv4ll: fix assert on external LL address removal (rh #2028404)
  - openvswitch: add DPDK n_rxq configuration option (rh #2001563)
  - device: ignore ndisc signal if device has no ifindex (rh #2013266)
  - bluetooth: fix invalid assertion in NMBluezManager:dispose() (rh #2028427)
  - supplicant: enable SAE-H2E (rh #2019396)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.6
changelog:
  - Upgrade to 1.35.6 release (development)
  - Move ifup/ifdown scripts to new NetworkManager-initscripts-updown package (rh #2022418)
  - wwan: fix assertion failure in modem/ppp code (rh #2028385)
  - core: fix performance regression with 500vlans test (rh #2028849)
  - core: drop defective BPF filter for netlink sockets that caused hangs (rh #2037411)
  - initrd: add support for rd.znet_ifnames (rh #1980387)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.7
changelog:
  - Upgrade to 1.35.7 release (development)
  - core: fix crash related to DHCPv6 leases (rh #2028849)
  - wifi: fix stale ActiveAccessPoint in D-Bus (rh #1983747)
  - libnm: fix dangling pointer in NMObject (rh #2039331)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.8
changelog:
  - Upgrade to 1.35.91 release (release candidate)
  - bond: fix duplicate IPv4 address detection (rh #2028751)
  - core: add support for blackhole routes (rh #1937823) (rh #2013587)
  - core: re-assess IP configuration if one IP family times out (rh #2051904)
  - ovs: remove ovsdb entry on interface removal (rh #2047302)
  - ovs: properly clean up devices on daemon shutdown (rh #2029937)
  - core: avoid losing addresses on handover from initrd to ral root (rh #2047302)
  - core: fix a possibe assertion failure in ACD (rh #2047788)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.9
changelog:
  - revert: generate docs during build instead of using pre-generated (rh #1995915)
  - Upgrade to 1.35.92 (release candidate)
  - ppp: increase disconnect timeout (rh #2049596)
  - core: finish activation after all objects are committed (rh #2043133)
  - ipv6: add support for multipath routes (rh #1837254)
  - keyfile: do not write empty string list properties (rh #2022623)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-1
changelog:
  - Upgrade to 1.36.0 release
  - core: avoid losing L3 configuration the second time it's applied (rh #2043514)
  - ovs: avoid removing OVSDB entries on daemon shutdown (rh #2055665)
  - nmcli: fix defaults for some properties on interactive add (rh #2053603)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-3
changelog:
  - core: preserve external bridge ports during checkpoint rollback (rh #2035519)
  - ovs-port: fix removal of ovsdb entry if the interface goes away (rh #1935026)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.36.0-8
changelog:
  - dhcp: fix "selecting lease failed" problem after receiving a NAK (rh #2105088)
  - core: fix memory leak when removing devices (rh #2105974)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.7-1
changelog:
  - Update to 1.39.7 release (development)
  - core: cancel the IP check on deactivation (rh #2080928)
  - core: ensure DHCP is restarted every time the link goes up (rh #2079406)
  - core: fix a leak of L3 configuration memory (rh #2083453)
  - ppp: fix a race with pppd when removing addresses (rh #2085382)
  - wifi: fix a crash when checking WEP supplicant capability (rh #2092782)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.8-1
changelog:
  - Update to 1.39.8 release (development)
  - core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
  - dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
  - core: add connection.wait-activation-delay property (rh #2008337)


author: Vojtech Bubela <vbubela@redhat.com> - 1:1.39.10-1
changelog:
  - Update to 1.39.10 release (development)
  - initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
  - dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
  - libnm: support wait-activation-delay property (rh #2008337)
  - veth: fix veth activation on booting (rh #2105956)
  - support a ipv6.addr-gen-mode knob in the global config (rh #208268)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.39.11-1
changelog:
  - Update to 1.39.11 release (development)
  - dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
  - ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.90-1
changelog:
  - Update to 1.39.90 release (release candidate)
  - bridge: fix reapply of non-bridge properties (rh #2092762)
  - bridge: fix wired.mtu reapply (rh #2076131)


author: EL Errata <el-errata_ww@oracle.com> - 1.40.0-2.0.1
changelog:
  - Disable regeneration of the documentation [Orabug: 34712048]
  - add connectivity check via Oracle servers [Orabug: 32051972]
  - Disable the build of NetworkManager-config-connectivity-* subpackage for 8.3


author: Fernando Fernandez Mancera <ferferna@redhat.com> 1:1.40.0-5
changelog:
  - ovs: wait that links disappear during initial cleanup (rh #2153429)
  - core: wait for carrier before resolving hostname via DNS (rh #2152891)


author: EL Errata <el-errata_ww@oracle.com> - 1.40.0-6.0.1
changelog:
  - disable MPTCP handling by default [Orabug: 35081472]
  - Fix ignore-carrier logic [Orabug: 34956744]
  - Disable regeneration of the documentation [Orabug: 34712048]
  - add connectivity check via Oracle servers [Orabug: 32051972]
  - Disable the build of NetworkManager-config-connectivity-* subpackage for 8.3


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.40.2-1
changelog:
  - Update to 1.40.2 release
  - core: fix persisting Infiniband partition connections (rh #2122703)
  - core: wait for carrier before resolving hostname via DNS (rh #2118817)
  - core: fix handling of autoconnect-retries with multiconnect (rh #2039734)
  - nmcli: allow removing a port connection from a bond (rh #2126262)
  - initrd: decrease autoconnect priority for initrd connections (rh #2089707)
  - dhcp: wait DAD completion for DHCPv6 addresses (send decline) (rh #2096386, rh #2099794)
  - ovs: wait that links disappear during initial cleanup (rh #2060031)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.40.10-1
changelog:
  - Update to 1.40.10 release
  - cloud-setup: preserve addresses added externally (rh #2132754)
  - veth: fix detection of existing interface and peer (rh #2129829)
  - dns: ensure dnsmasq is stopped after disabling it and a restart (rh #2120763)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.40.12-1
changelog:
  - Update to 1.40.12 release
  - core: retry if a rtnetlink socket runs out of buffer space (rh #2154350)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.40.16-5
changelog:
  - support bond port prio property (rh #1920398)
  - team: don't try to connect to teamd in update_connection() (rh #2182029)


author: Craig Guiller <craig.guiller@oracle.com> - 1.40.16-15.0.1
changelog:
  - disable MPTCP handling by default [Orabug: 35081472]
  - Fix ignore-carrier logic [Orabug: 34956744]
  - Disable regeneration of the documentation [Orabug: 34712048]
  - add connectivity check via Oracle servers [Orabug: 32051972]
  - Disable the build of NetworkManager-config-connectivity-* subpackage for 8.3
  - Revert "infiniband: avoid normalizing the p-key when reading from ifcfg"


author: Wen Liang <wenliang@redhat.com> - 1:1.40.16-18
changelog:
  - vpn: fix routing rules support in vpn conenctions (RHEL-73052)
  - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051)


author: EL Errata <el-errata_ww@oracle.com> - 1:1.40.16-19.0.1
changelog:
  - Drop 777 permissions from Networkmanager-dispatcher drop-in directory [Orabug: 37581862]
  - Add a dropin file to make Networkmanager-dispatcher persistent [Orabug: 36989910]
  - disable MPTCP handling by default [Orabug: 35081472]
  - Fix ignore-carrier logic [Orabug: 34956744]
  - Disable regeneration of the documentation [Orabug: 34712048]
  - add connectivity check via Oracle servers [Orabug: 32051972]
  - Disable the build of NetworkManager-config-connectivity-* subpackage for 8.3
  - Revert "infiniband: avoid normalizing the p-key when reading from ifcfg"


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 1.40.16-3.0.1
changelog:
  - don't fail when the IPv6 link-local address is removed
  - Revert "infiniband: avoid normalizing the p-key when reading from ifcfg"


author: Francesco Giudici <fgiudici@redhat.com> - 1.2.8-0.1
changelog:
  - Update to latest development snapshot of NetworkManager-libreswan 1.2.8
  - Introduced IKEv2 support (rh #1557035)
  - Introduced support to more Libreswan properties (rh #1557035)
  - Updated translations


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.12-6
changelog:
  - Python 2 binary package renamed to python2-pyyaml
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.12-9
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-23
changelog:
  - Enable setting gamma by programing palette as supported by xorg-server
    1.19.0 again (bug #891973)


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-38
changelog:
  - fix CVEs
  - Resolves: rhbz#1716209, rhbz#1716210, rhbz#1716211, rhbz#1716212,
              rhbz#1716213, rhbz#1716214, rhbz#1716215, rhbz#1716216,
  	    rhbz#1716217, rhbz#1716218, rhbz#1716219


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.18-2.el7
changelog:
  - wa-Add-show-configuration-option.patch [bz#1508340]
  - Resolves: bz#1508340
    ([WALA] WALA usage prompt lack of " waagent -show-configuration")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.26-4.el8
changelog:
  - Fix unit file location [bz#1637545]
  - Resolves: bz#1637545
    (Wrong macro used for systemd unit file location)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.26-5.el8
changelog:
  - wala-Switch-to-platform-python-in-systemd-unit-file.patch [bz#1639775]
  - Resolves: bz#1639775
    (WALinuxAgent: Systemd unit file will fail to execute)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.26-6.el8
changelog:
  - wala-Use-sys.executable-to-find-system-python.patch [bz#1639775]
  - Resolves: bz#1639775
    (WALinuxAgent: Systemd unit file will fail to execute)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.32-1.el8
changelog:
  - Rebase to 2.2.32 [bz#1639498]
  - Resolves: bz#1639498]
    (walinuxagent 2.2.32 packaging request for RHEL 8)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.32-1.el8_0.1
changelog:
  - wla-Add-fixes-for-handling-swap-file-and-other-nit-fixes.patch [bz#1711338]
  - Resolves: bz#1711338
    (CVE-2019-0804 WALinuxAgent: swapfile created with weak permissions [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.14-1.el7
changelog:
  - Rebase to 2.2.14 [bz#1451172]
  - wla-Remove-FIPS-setting-from-the-default-config.patch [bz#1467553]
  - Resolves: bz#1451172
    ([WALA] Request to package WALA 2.2.14 into RHEL 7 Repo)
  - Resolves: bz#1467553
    ([WALA] Remove FIPS from default config in WALA-2.2.14)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.18-1.el7
changelog:
  - Rebase to 2.2.18 [bz#1491873]
  - Resolves: bz#1491873
    ([WALA]Request to package WALA 2.2.18 into RHEL 7 Repo)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.2.32-2.el8
changelog:
  - wla-Add-fixes-for-handling-swap-file-and-other-nit-fixes.patch [bz#1684181 bz#1688276]
  - Resolves: bz#1684181
    (CVE-2019-0804 WALinuxAgent: swapfile created with weak permissions)
  - Resolves: bz#1688276
    (CVE-2019-0804 WALinuxAgent: swapfile created with weak permissions [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.32-3.el8
changelog:
  - wla-Switch-from-platform-python-to-python36.patch [bz#1720373]
  - wla-Stop-packaging-legacy-waagent2.0.patch [bz#1720373]
  - Resolves: bz#1720373
    ([RHEL 8.1] [Azure] Change WALinuxAgent spec to depend on Python3.6 package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.38-1
changelog:
  - Rebase to 2.2.38 [bz#1722848]
  - Resolves: bz#1722848
    ([Azure]walinuxagent 2.2.38 rebase [8.1.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-1.el8.4
changelog:
  - Rebase to 2.2.46 [bz#1806685]
  - Resolves: bz#1806685
    (Rebase WALinuxAgent to 2.2.46 for RHEL 8.2.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-1.el8.5
changelog:
  - wla-Update-Provisioning-options-1853.patch [bz#1827792]
  - Resolves: bz#1827792
    ([Azure][RHEL-8.2.1]Some parameter changes are not in waagent.conf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-5.el8
changelog:
  - Rebase to 2.2.46 [bz#1791069]
  - Resolves: bz#1791069
    ([Azure][RHEL-8.3]Ask to increase the WALA version available for RHEL 8.0 to 2.2.46)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-6.el8
changelog:
  - wala-Update-Provisioning-options-1853.patch [bz#1827792]
  - Resolves: bz#1822882
    ([Azure][RHEL-8]Some parameter changes are not in waagent.conf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-7.el8
changelog:
  - wla-Mark-logrotate-configs-with-config-noreplace.patch [bz#1838254]
  - Resolves: bz#1838254
    ([Azure]WALinuxAgent RPM update clobbers waagent.logrotate log rotation changes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-8.el8
changelog:
  - wla-Fix-handling-of-gen2-disks-with-udev-rules-1954.patch [bz#1859037]
  - Resolves: bz#1859037
    ([Azure][WALA]Cannot create /dev/disk/azure/resource softlinks in Gen2 VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.49.2-2.el8
changelog:
  - wla-Fixed-faulty-check-for-run_command-2093.patch [bz#1903074]
  - Resolves: bz#1903074
    ([Azure][WALA] Miss report "hostnamectl set-hostname --static] failed, attempting fallback")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.49.2-3.el8
changelog:
  - wla-Provide-udev-rules-as-a-separate-subpackage.patch [bz#1913074]
  - Resolves: bz#1913074
    ([Azure][RFE] please provide the WALinuxAgent-udev subpackage)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-1
changelog:
  - Rebase to 2.3.0.2 [bz#1972102]
  - Resolves: bz#1972102
    ([Azure][RHEL-8]Rebase WALinuxAgent to 2.3.0.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2
changelog:
  - wla-Require-iptables-for-setting-up-persistent-firewall-.patch [bz#1985198]
  - Resolves: bz#1985198
    ([Azure][WALA][RHEL-8] WALA needs iptables package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2.el8_6.1
changelog:
  - wla-Fix-if-hangs-2283.patch [bz#2092753]
  - wla-Implement-restart_if-for-RedHat-OS.patch [bz#2092753]
  - Resolves: bz#2092753
    ([Azure][WALA][RHEL-8] [8.6.z] walinuxagent kills network during boot [rhel-8.6.0.z])


author: Camilla Conte <cconte@redhat.com> - 2.3.0.2-2.el8_6.2
changelog:
  - wla-redhat-Implement-restart_if-correctly-to-eliminate-w.patch [bz#2092753]
  - Resolves: bz#2092753
    ([Azure][WALA][RHEL-8] [8.6.z] walinuxagent kills network during boot [rhel-8.6.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 2.3.0.2-2.el8_6.3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2133446]
  - Resolves: bz#2133446
    ([Azure][WALA][RHEL-8.7] Provisioning failed if no ifcfg-eth0 [rhel-8.6.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6 [bz#2083465]
  - Adding restart_if implementation for RHEL [bz#2085578]
  - Resolves: bz#2083465
    ([Azure][RHEL-8][8.7] Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2085578
    ([Azure][WALA][8.6] WALA provisions VM failed because of no "ifdown")


author: Camilla Conte <cconte@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2080826]
  - Resolves: bz#2080826
    ([Azure][WALA][RHEL-8] [8.7] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2092002]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2114824]
  - Resolves: bz#2092002
    ([Azure][WALA][RHEL-8.7] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2114824
    ([Azure][WALA][RHEL-8.7] The description of "Logs.Collect" is incorrect)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-7.el8_8
changelog:
  - wla-redhat-Fix-frh.py-to-not-skip-valid-patches-to-init-.patch [bz#2170104]
  - wla-Use-platform-python-in-waagent.service.patch [bz#2170104]
  - Resolves: bz#2170104
    ([Azure][WALA][RHEL-8] systemd service should not use python3)


author: Nicolas Chauvet <kwizart@gmail.com> - 0.7.4-24
changelog:
  - Multilibs support - rhbz#1433758
  - Simplify description
  - Convert AUTHORS to UTF-8
  - Drop Groups
  - Add Obsoletes/Provides for a52dec-devel


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-21
changelog:
  - do not specify infra_image in containers.conf
  - needed to resolve gating test failures
  - Related: #2001445


author: EL Errata <el-errata_ww@oracle.com> - 1-27.0.1
changelog:
  - Updated removed references [Orabug: 33473101] (Alex Burmashev)
  - Adjust registries.conf (Nikita Gerasimov)
  - remove references to RedHat registry (Nikita Gerasimov)


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-22
changelog:
  - build rust packages with RUSTFLAGS set to make ExecShield happy
  - bump release tag by 3 for easier cherry-picking from rhel8 stream
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:1-36
changelog:
  - fix podman container got global IPv6 address unexpectedly even when macvlan
    network is created for pure IPv4 network
  - Resolves: #2133391


author: Jindrich Novy <jnovy@redhat.com> - 2:1.1.0-5
changelog:
  - fix "Two aardvark-dns instances trying to use the same port
    on the same interface"
  - Resolves: #2130234


author: Jindrich Novy <jnovy@redhat.com> - 2:1.8.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
  - Related: Jira:RHEL-2110


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.9.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.10.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0
  - Related: Jira:RHEL-2110


author: Akira TAGOH <tagoh@redhat.com> - 0.0.25-6
changelog:
  - Backport fontconfig config file from Fedora.
  - Add System UI generic family alias
    Resolves: rhbz#1865788


author: Martin Kutlak <mkutlak@redhat.com> - 2.10.9-9
changelog:
  - spec: turn on --enable-native-unwinder aarch64
  - spec: enable addon-vmcore on aarch64
  - daemon: Fix double closed fd race condition
  - dbus: Add configuration for Python3
  - Add autogen.sh
  - Resolves: #1646569, #1651676, #1650619, #1650622, #1652676


author: Martin Kutlak <mkutlak@redhat.com> - 2.10.9-10
changelog:
  - spec: Add-explicit-package-version-requirement-of-abrt-libs
  - cli: get list of possible workflows for problem_data_t
  - cli: mark the suggestion text for translation
  - cli list: show a hint about creating a case in RHTS
  Resolves: #1649753


author: Michal Židek <mzidek@redhat.com> - 2.10.9-13
changelog:
  - Resolves: rhbz#1658685
  - shellcheck: Use command instead of type
  - shellcheck: Check exit code directly with if mycmd
  - shellcheck: Suppress shellcheck warning SC1090
  - shellcheck: Use $(...) instead of legacy backticked
  - cli: Add a shebang


author: - Michal Židek <mzidek@redhat.com> - 2.10.9-18
changelog:
  - Resolves: rhbz#1835388
  - This is seccond commit to fix som mess with one missing patch and synchronize
    the internal gitlab patch numbers with this spec file


author: EL Errata <el-errata_ww@oracle.com> - 2.10.9-20.0.1
changelog:
  - Add orabug32082455-Upstream_reference_in_python3-abrt-addon.patch [Orabug: 32082455]
  - Add bug29870394-fix-redhat-reference.patch [Orabug: 29870394]
  - Drop libreport-rhel and libreport-plugin-rhtsupport requires


author: EL Errata <el-errata_ww@oracle.com> - 2.10.9-21.0.1
changelog:
  - Disable autoreporting on Oracle Linux [Orabug: 32890748]
  - Add orabug32082455-Upstream_reference_in_python3-abrt-addon.patch [Orabug: 32082455]
  - Add bug29870394-fix-redhat-reference.patch [Orabug: 29870394]
  - Drop libreport-rhel and libreport-plugin-rhtsupport requires


author: Shaleen Bathla <shaleen.bathla@oracle.com> - 2.10.9-21.0.2
changelog:
  - abrt-dump-oops-Fix-vmcore-call-trace-parsing-x86 [Orabug: 33880955]
  - abrt-dump-oops-Fix-vmcore-call-trace-parsing-arm [Orabug: 34184473]


author: EL Errata <el-errata_ww@oracle.com> - 2.10.9-24.0.1
changelog:
  - abrt-dump-oops-Fix-vmcore-call-trace-parsing-arm [Orabug: 34184473]
  - Disable autoreporting on Oracle Linux [Orabug: 32890748]
  - Add orabug32082455-Upstream_reference_in_python3-abrt-addon.patch [Orabug: 32082455]
  - Add bug29870394-fix-redhat-reference.patch [Orabug: 29870394]
  - Drop libreport-rhel and libreport-plugin-rhtsupport requires


author: Ernestas Kulik <ekulik@redhat.com> - 1.1.0-16
changelog:
  - Add patch for #1721393
  - Add patch for https://github.com/abrt/abrt-java-connector/commit/ae2144f1674f163517f0aa18b5f1b4784c143572


author: Ray Strode <rstrode@redhat.com> - 0.6.55-4
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations
    Resolves: #1919300


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.28-6
changelog:
  - Switched kacpimon to dynamic connections (increased max connections
    from 20 to 1024)
    Resolves: rhbz#1450980
  - Consolidated new line delimiters


author: Radovan Sroka <rsroka@redhat.com> - 0.16-6
changelog:
  - ported syslog format from rhel7
    resolves: rhbz#1584136
  - fixed crypto problem with libgcrypt
    resolves: rhbz#1584120


author: Radovan Sroka <rsroka@redhat.com> - 0.16-8
changelog:
  - fixed wrong line wrapping of messages in the syslog format
    resolves: rhbz#1628153
  - fixed coverity issues
    resolves: rhbz#1602441
  - fixed crash when processing .dynamic section
    resolves: rhbz#1597250


author: Radovan Sroka <rsroka@redhat.com> - 0.16-9
changelog:
  - Null pointer dereference fix spotted by coverity
    resolves: rhbz#1676487
  - aide.conf needs updates for RHEL 8
    resolves: rhbz#1708015


author: Attila Lakatos <alakatos@redhat.com> - 0.16-12
changelog:
  - RHEL 8.3
  - minor edit of aide.conf
    resolves: rhbz#1740754
  - do not generate false warnings when report_ignore_e2fsattrs is specified in aide.conf
    resolves: rhbz#1806323


author: Radovan Sroka <rsroka@redhat.com> - 0.16-1
changelog:
  - rebase to stable v0.16
  - specfile cleanup
  - make doc readable 
    resolves: #1421355
  - make aide binary runable for any user
    resolves: #1421351


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.6-3
changelog:
  - Sync with the RHEL 7
  - Add Dell WD15/WD19 Dock to USB-Audio.conf and create UCM configs
  - Resolves: rhbz#1664247


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.0.36-1
changelog:
  - Pass nosmt boot option to installed system. (rvykydal)
    Resolves: rhbz#1677411
  - Use unformatted DASDs for the partitioning (vponcova)
    Resolves: rhbz#1676630


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.0.37-1
changelog:
  - Update the SMT warning message (rvykydal)
    Related: rhbz#1684056
  - Detect and warn if SMT is enabled (vponcova)
    Resolves: rhbz#1684056


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.0.39-1
changelog:
  - Make SMT warning message smaller (jkonecny)
    Related: rhbz#1684056
  - Remove blank line in the SMT warning (jkonecny)
    Related: rhbz#1684056


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 29.19.0.40-1.0.1
changelog:
  - Use OL8 for the kickstart version [Orabug: 29373077]
  - Remove python3-syspurpose requirement. [Orabug 29443881]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Remove UI components related to system purpose and RHN subscription. [Orabug: 29373275]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [bug 27116016]


author: Fred Herard <fred.herard@oracle.com> - 29.19.0.40-1.0.2
changelog:
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153]
  - Honor the --noverifyssl option to the url kickstart command when
    the url references the root of an ISO [Orabug: 29478041] (kevin.x.lyons@oracle.com)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 29.19.0.40-1.0.3
changelog:
  - Increase the buffer added to the download space required when determining
    the dnf download cache location to avoid hangs on Virtual Box
    [Orabug: 29889830]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 29.19.0.41-1.0.2
changelog:
  - Increase the buffer added to the download space required when determining
    the dnf download cache location to avoid hangs on Virtual Box
    [Orabug: 29889830]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153]
    (fred.herard@oracle.com)


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.0.42-1
changelog:
  - Require blivet with flags.protect_cdrom support (rvykydal)
    Resolves: rhbz#1715344
  - Do not try to mount cdrom source also if it has been mounted in dracut.
    (rvykydal)
    Resolves: rhbz#1715344
  - Be more strict when checking for mounted dvd source. (rvykydal)
    Resolves: rhbz#1715344
  - Protect cdroms during tree population for image installs. (rvykydal)
    Resolves: rhbz#1715344
  - Use rhel-8.0 zanata version. (rvykydal)
    Related: rhbz#1715344
  - Rename zanata rhel-devel version (rvykydal)
    Related: rhbz#1715344


author: Jingdong Lu <jingdong.lu@oracle.com> - 29.19.0.43-1.0.1
changelog:
  - Increase the buffer added to the download space required when determining
    the dnf download cache location to avoid hangs on Virtual Box
    [Orabug: 29889830]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153]
    (fred.herard@oracle.com)
  - Use OL8 for the kickstart version [Orabug: 29373077]
  - Remove python3-syspurpose requirement. [Orabug 29443881]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Remove UI components related to system purpose and RHN subscription. [Orabug: 29373275]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [bug 27116016]


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.6-1
changelog:
  - Require blivet with flags.protect_cdrom support (rvykydal)
    Related: rhbz#1671713
  - Be more strict when checking for mounted dvd source. (rvykydal)
    Resolves: rhbz#1671713
  - Protect cdroms during tree population for image installs. (rvykydal)
    Resolves: rhbz#1671713


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.7-1
changelog:
  - Add support for disabling modules via module --disable (mkolman)
    Resolves: rhbz#1655523
    Related: rhbz#1719347


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.8-1
changelog:
  - Respect changesok password policy for root password (mkolman)
    Resolves: rhbz#1584145
  - Fix default value for pwpolicy emptyok (mkolman)
    Resolves: rhbz#1664704


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.9-1
changelog:
  - Adjust the exclude arguments for livepayloads (bcl)
    Related: rhbz#1684542
  - Recreate the BLS entries when using liveimg (bcl)
    Resolves: rhbz#1684542
  - Cache the liveimg tar kernel list (bcl)
    Related: rhbz#1684542
  - Add common function for creating rescue images (bcl)
    Related: rhbz#1684542
  - Re-generate BLS loader file snippets on live installs (awilliam)
    Related: rhbz#1684542


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.10-1
changelog:
  - Do not try to mount cdrom source also if it has been mounted in dracut.
    (rvykydal)
    Resolves: rhbz#1733507


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.11-1
changelog:
  - Fix noverifyssl when downloading .treeinfo file (jkonecny)
    Resolves: rhbz#1726156
    Resolves: rhbz#1723811


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.12-1
changelog:
  - Add the install class for Red Hat Virtualization (vponcova)
    Resolves: rhbz#1753316
  - Extend support for custom storage checking (vponcova)
    Related: rhbz#1753316
  - Enable to define the autopart type in an install class (vponcova)
    Related: rhbz#1753316


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 29.19.1.13-1.0.1
changelog:
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Don't automatically insert UEK into package set if it exists in repo.
    Changes to comps file should take care of addition [Orabug: 30284307]
  - Alter search for packages that provide 'kernel' to also find kernel-uek
    [Orabug: 30284307]
  - Honor the --noverifyssl option to the url kickstart command when
    the url references the root of an ISO [Orabug: 29478041] (kevin.x.lyons@oracle.com)
  - Increase the buffer added to the download space required when determining
    the dnf download cache location to avoid hangs on Virtual Box
    [Orabug: 29889830]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153]
    (fred.herard@oracle.com)
  - Use OL8 for the kickstart version [Orabug: 29373077]
  - Remove python3-syspurpose requirement. [Orabug 29443881]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Remove UI components related to system purpose and RHN subscription. [Orabug: 29373275]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [bug 27116016]


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.2.9-1
changelog:
  - Fix RHSM HTTP proxy configuration clearing (mkolman)
    Resolves: rhbz#1789814
  - Add scrolling for the registration tab (mkolman)
    Resolves: rhbz#1788422


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.2.10-1
changelog:
  - Log exceptions raised in subscription data fetching method (mkolman)
    Related: rhbz#1788036
  - Fix subscription status not being displayed in some cases (mkolman)
    Resolves: rhbz#1788036
  - Make sure syspurpose is set before registration in GUI (mkolman)
    Resolves: rhbz#1788207
    Related: rhbz#1788036
  - Update pep8speaks checker configuration for the branch (rvykydal)
    Related: rhbz#1788036


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.2.11-1
changelog:
  - Fix DBus error detection (mkolman)
    Related: rhbz#1794767
  - Make sure RHSM HTTP proxy port from kickstart is an integer (mkolman)
    Resolves: rhbz#1794025


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.2.14-1
changelog:
  - Do not allow selecting ignored disk in GUI even if it is the only one
    (rvykydal)
    Resolves: rhbz#1786561


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.2.15-1
changelog:
  - Fix installation source switching to/from CDN (mkolman)
    Resolves: rhbz#1788487
    Resolves: rhbz#1790383
    Resolves: rhbz#1791376


author: EL Errata <el-errata_ww@oracle.com> - 29.19.2.17-1.0.1.el8
changelog:
  - Display quit message properly [Orabug: 31075436]
  - Fix crash when writing bootloader
  - Remove integration with CDN [Orabug: 30902364]
  - Remove additional non-Oracle installclass to prevent installer failure [Orabug: 30530690]
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Don't automatically insert UEK into package set if it exists in repo.
    Changes to comps file should take care of addition [Orabug: 30284307]
  - Alter search for packages that provide 'kernel' to also find kernel-uek
    [Orabug: 30284307]
  - Honor the --noverifyssl option to the url kickstart command when
    the url references the root of an ISO [Orabug: 29478041] (kevin.x.lyons@oracle.com)
  - Increase the buffer added to the download space required when determining
    the dnf download cache location to avoid hangs on Virtual Box
    [Orabug: 29889830]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153]
    (fred.herard@oracle.com)
  - Use OL8 for the kickstart version [Orabug: 29373077]
  - Remove python3-syspurpose requirement. [Orabug 29443881]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Remove UI components related to system purpose and RHN subscription. [Orabug: 29373275]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [bug 27116016]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 29.19.2.17-1.0.2.el8
changelog:
  - Make sure both BaseOS and Appstream repo are initialized when supplied by user.
    [Orabug: 31298070]


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.9.5-1
changelog:
  - [ja_JP] - Need to update string on anaconda screen for installation completed
    Resolves: rhbz#2216746


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.10.1-1
changelog:
  - timezone: for kickstart allow also timezones not offered by GUI (rvykydal)
    Resolves: RHEL-13151
    Resolves: RHEL-4795
  - Rename Organization to Organization ID on subscription screen (mkolman)
    Resolves: RHEL-11168


author: Martin Kolman <mkolman@redhat.com> - 33.16.10.2-1
changelog:
  - Propagate a lazy proxy of the storage model (vponcova)
    Resolves: RHEL-16276
  - rescue: Don't allow to mount systems without a root device (vponcova)
    Resolves: RHEL-4784


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.10.4-1
changelog:
  - Lower log file permission in /tmp (jkonecny)
    Resolves: RHEL-23344
  - Add utility function to set file mode (jkonecny)
    Related: RHEL-23344


author: Kevin Lyons <el-errata_ww@oracle.com> - 33.16.10.5-1.0.1
changelog:
  - Remove missed upstream references [Orabug 36528360]
  - When using the minimal or UEK boot ISOs, use public YUM as the install source.
    [OLDIS: 2397]
  - For fresh ISO installs, enable the UEK R7 repo.
    [Orabug: 34743550]
  - Switch to BLS kernel rescue generation script
  - Fix exception when searching for existing installations in rescue mode
    (herbert.van.den.bergh@oracle.com) [Orabug: 32795730]
  - Fix the path to the rescue image in the BLS config file [Orabug: 31988381]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - Fix syntax error in bug21957916-use-bls-set-default-kernel.patch [Orabug: 31877077]
  - Remove CDN from install source screen [Orabug: 31839682]
  - Fix work-around-filesystem-full-error-on-btrfs.patch to work around
    filesystem out of space error when installing to BTRFS [Orabug: 31845104]
  - Update add-oracle-linux-product.d-conf.patch to fix [Orabug: 31863588]
  - Updated bug18177078-install-UEK-and-set-as-default.patch due to code change
  - Fix oracle efi dir in add-oracle-linux-product.d-conf.patch
  - Fix crash when re-creating rescue image.
  - Disable rhsm and syspurpose kickstart commands
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Use UEK for the rescue image on x86_64
    [Orabug: 31587690]
  - Don't create separate mount point for /home when autopartitioning with btrfs
    [Orabug: 31192722]
  - Work around filesystem full error when / is on btrfs.
  - Enable support of /boot on btrfs and make it the default option.
  - Make sure both BaseOS and Appstream repo are initialized when supplied by user.
    [Orabug: 31298070]
  - Display quit message properly [Orabug: 31075436]
  - Fix crash when writing bootloader
  - Remove integration with CDN [Orabug: 30902364]
  - Remove additional non-Oracle installclass to prevent installer failure [Orabug: 30530690]
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Don't automatically insert UEK into package set if it exists in repo.
    Changes to comps file should take care of addition [Orabug: 30284307]
  - Alter search for packages that provide 'kernel' to also find kernel-uek
    [Orabug: 30284307]
  - Increase the buffer added to the download space required when determining
    the dnf download cache location to avoid hangs on Virtual Box
    [Orabug: 29889830]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153]
    (fred.herard@oracle.com)
  - Use OL8 for the kickstart version [Orabug: 29373077]
  - Remove python3-syspurpose requirement. [Orabug 29443881]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Remove UI components related to system purpose and RHN subscription. [Orabug: 29373275]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [bug 27116016]


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.18-1
changelog:
  - subscription: Only restart payload when needed (mkolman)
    Resolves: rhbz#1861351
  - Reset the state of the custom partitioning spoke (vponcova)
    Resolves: rhbz#1868330
  - network: fix parsing of hostname from ip= if mac is defined in dhcp
    (rvykydal)
    Resolves: rhbz#1852560


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.20-1
changelog:
  - network: do not try to activate connection that has not been found (rvykydal)
    Resolves: rhbz#1869323
  - network: add timeout for synchronous activation of a connection (rvykydal)
    Related: rhbz#1869323


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.21-1
changelog:
  - Fix traceback when removing additional repository (jkonecny)
    Resolves: rhbz#1871037
  - Do not mount as RW in Dracut (jkonecny)
    Resolves: rhbz#1871049
  - Clean up s390 partitioning check (vslavik)
    Resolves: rhbz#1855724


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.22-1
changelog:
  - network: fix inst.dhcpclass boot option (rvykydal)
    Resolves: rhbz#1870692
  - network: fix kickstart network --dhcpclass option (rvykydal)
    Resolves: rhbz#1869224


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.23-1
changelog:
  - subscription: Assure payload restart on DVD install after registration
    (mkolman)
    Resolves: rhbz#1873164
  - Document the restart_payload argument of subscription helper functions
    (mkolman)
    Related: rhbz#1873164


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.24-1
changelog:
  - network: do not add superfluous quotes to inst.dhcpclass identifier
    (rvykydal)
    Related: rhbz#1870692


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.25-1
changelog:
  - Root password is mandatory if there is *not* admin user. (rvykydal)
    Related: rhbz#1876727
  - Make locked root be completed only for kickstart (vslavik)
    Resolves: rhbz#1876727


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 33.16.3.26-1.0.1.el8
changelog:
  - Fix the path to the rescue image in the BLS config file [Orabug: 31988381]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - Fix syntax error in bug21957916-use-bls-set-default-kernel.patch [Orabug: 31877077]
  - Remove CDN from install source screen [Orabug: 31839682]
  - Fix work-around-filesystem-full-error-on-btrfs.patch to work around 
    filesystem out of space error when installing to BTRFS [Orabug: 31845104]
  - Update add-oracle-linux-product.d-conf.patch to fix [Orabug: 31863588]
  - Updated bug18177078-install-UEK-and-set-as-default.patch due to code change
  - Fix oracle efi dir in add-oracle-linux-product.d-conf.patch
  - Fix crash when re-creating rescue image.
  - Disable rhsm and syspurpose kickstart commands
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Use UEK for the rescue image on x86_64
    [Orabug: 31587690]
  - Don't create separate mount point for /home when autopartitioning with btrfs
    [Orabug: 31192722]
  - Work around filesystem full error when / is on btrfs.
  - Enable support of /boot on btrfs and make it the default option.
  - Make sure both BaseOS and Appstream repo are initialized when supplied by user.
    [Orabug: 31298070]
  - Display quit message properly [Orabug: 31075436]
  - Fix crash when writing bootloader
  - Remove integration with CDN [Orabug: 30902364]
  - Remove additional non-Oracle installclass to prevent installer failure [Orabug: 30530690]
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Don't automatically insert UEK into package set if it exists in repo.
    Changes to comps file should take care of addition [Orabug: 30284307]
  - Alter search for packages that provide 'kernel' to also find kernel-uek
    [Orabug: 30284307]
  - Increase the buffer added to the download space required when determining
    the dnf download cache location to avoid hangs on Virtual Box
    [Orabug: 29889830]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153]
    (fred.herard@oracle.com)
  - Use OL8 for the kickstart version [Orabug: 29373077]
  - Remove python3-syspurpose requirement. [Orabug 29443881]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Remove UI components related to system purpose and RHN subscription. [Orabug: 29373275]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [bug 27116016]


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.26-2
changelog:
  - network: do not crash on infiniband devices activated in initramfs
    (rvykydal)
    Resolves: rhbz#1890261


author: EL Errata <el-errata_ww@oracle.com> - 33.16.3.26-2.0.1
changelog:
  - Fix the path to the rescue image in the BLS config file [Orabug: 31988381]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - Fix syntax error in bug21957916-use-bls-set-default-kernel.patch [Orabug: 31877077]
  - Remove CDN from install source screen [Orabug: 31839682]
  - Fix work-around-filesystem-full-error-on-btrfs.patch to work around
    filesystem out of space error when installing to BTRFS [Orabug: 31845104]
  - Update add-oracle-linux-product.d-conf.patch to fix [Orabug: 31863588]
  - Updated bug18177078-install-UEK-and-set-as-default.patch due to code change
  - Fix oracle efi dir in add-oracle-linux-product.d-conf.patch
  - Fix crash when re-creating rescue image.
  - Disable rhsm and syspurpose kickstart commands
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Use UEK for the rescue image on x86_64
    [Orabug: 31587690]
  - Don't create separate mount point for /home when autopartitioning with btrfs
    [Orabug: 31192722]
  - Work around filesystem full error when / is on btrfs.
  - Enable support of /boot on btrfs and make it the default option.
  - Make sure both BaseOS and Appstream repo are initialized when supplied by user.
    [Orabug: 31298070]
  - Display quit message properly [Orabug: 31075436]
  - Fix crash when writing bootloader
  - Remove integration with CDN [Orabug: 30902364]
  - Remove additional non-Oracle installclass to prevent installer failure [Orabug: 30530690]
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Don't automatically insert UEK into package set if it exists in repo.
    Changes to comps file should take care of addition [Orabug: 30284307]
  - Alter search for packages that provide 'kernel' to also find kernel-uek
    [Orabug: 30284307]
  - Increase the buffer added to the download space required when determining
    the dnf download cache location to avoid hangs on Virtual Box
    [Orabug: 29889830]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153]
    (fred.herard@oracle.com)
  - Use OL8 for the kickstart version [Orabug: 29373077]
  - Remove python3-syspurpose requirement. [Orabug 29443881]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Remove UI components related to system purpose and RHN subscription. [Orabug: 29373275]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [bug 27116016]


author: Martin Kolman <mkolman@redhat.com> - 33.16.4.7-1
changelog:
  - Allow to disable the Security module (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Services module (vponcova)
    Resolves: rhbz#1913689
  - Support should_run for standalone GUI spokes (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Localization module (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Timezone module (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the network installation (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Users module (vponcova)
    Resolves: rhbz#1913689
  - Always show pykickstart parse warnings (vslavik)
    Resolves: rhbz#1897663


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.9-1
changelog:
  - Change warning messages of missing prefix for RH products (jkonecny)
    Resolves: rhbz#1897657
  - Do not use cache for container build (jkonecny)
    Related: rhbz#1885635
  - Fix missing inst. prefixes for bootloader options in documentation (jkonecny)
    Related: rhbz#1897657
  - Fix show missing inst. prefix warning appropriately (jkonencny)
    Related: rhbz#1897657
  - Remove docs where we tell users that inst. prefix is not required (jkonecny)
    Related: rhbz#1897657
  - Print warning for boot options without inst. prefix (jkonecny)
    Related: rhbz#1897657
  - Add missing dracut commands as missing inst. prefix warning (jkonecny)
    Related: rhbz#1897657
  - Enable warning when inst. prefix is not used (jkonecny)
    Related: rhbz#1897657


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.10-1
changelog:
  - Mark the rhsm and syspurpose kickstart commands as useless (vponcova)
    Resolves: rhbz#1921787
  - Fix getting kernel version list for liveimg (rvykydal)
    Resolves: rhbz#1919463


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.11-1
changelog:
  - Take dnf substitutions from installer environment configuration (rvykydal)
    Resolves: rhbz#1920735
  - Fix exclude arguments of tar payload extracting. (rvykydal)
    Resolves: rhbz#1924118


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.14-1
changelog:
  - Fix crash in NTP servers GUI dialog on late network configuration (rvykydal)
    Resolves: rhbz#1938168


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.15-1
changelog:
  - network: clone connections from intramfs to persistent config (rvykydal)
    Resolves: rhbz#1910438
  - network: match also connections named by MAC created by NM in initramfs
    (rvykydal)
    Related: rhbz#1910438
  - network: do not reset ipv6.addr-gen-mode in tui network configuration
    (rvykydal)
    Related: rhbz#1873021
  - network: set addr-gen-mode of Anaconda default connections to eui64
    (rvykydal)
    Related: rhbz#1873021
  - network: default to addr-gen-mode eui64 (rvykydal)
    Resolves: rhbz#1873021


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 33.16.4.15-1.0.1
changelog:
  - Fix exception when searching for existing installations in rescue mode
    (herbert.van.den.bergh@oracle.com) [Orabug: 32795730]
  - Fix the path to the rescue image in the BLS config file [Orabug: 31988381]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - Fix syntax error in bug21957916-use-bls-set-default-kernel.patch [Orabug: 31877077]
  - Remove CDN from install source screen [Orabug: 31839682]
  - Fix work-around-filesystem-full-error-on-btrfs.patch to work around
    filesystem out of space error when installing to BTRFS [Orabug: 31845104]
  - Update add-oracle-linux-product.d-conf.patch to fix [Orabug: 31863588]
  - Updated bug18177078-install-UEK-and-set-as-default.patch due to code change
  - Fix oracle efi dir in add-oracle-linux-product.d-conf.patch
  - Fix crash when re-creating rescue image.
  - Disable rhsm and syspurpose kickstart commands
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Use UEK for the rescue image on x86_64
    [Orabug: 31587690]
  - Don't create separate mount point for /home when autopartitioning with btrfs
    [Orabug: 31192722]
  - Work around filesystem full error when / is on btrfs.
  - Enable support of /boot on btrfs and make it the default option.
  - Make sure both BaseOS and Appstream repo are initialized when supplied by user.
    [Orabug: 31298070]
  - Display quit message properly [Orabug: 31075436]
  - Fix crash when writing bootloader
  - Remove integration with CDN [Orabug: 30902364]
  - Remove additional non-Oracle installclass to prevent installer failure [Orabug: 30530690]
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Don't automatically insert UEK into package set if it exists in repo.
    Changes to comps file should take care of addition [Orabug: 30284307]
  - Alter search for packages that provide 'kernel' to also find kernel-uek
    [Orabug: 30284307]
  - Increase the buffer added to the download space required when determining
    the dnf download cache location to avoid hangs on Virtual Box
    [Orabug: 29889830]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153]
    (fred.herard@oracle.com)
  - Use OL8 for the kickstart version [Orabug: 29373077]
  - Remove python3-syspurpose requirement. [Orabug 29443881]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Remove UI components related to system purpose and RHN subscription. [Orabug: 29373275]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [bug 27116016]


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.1-1
changelog:
  - subscription: allow dates in ISO 8601 format (ptoscano)
    Resolves: rhbz#1947445
  - Add RHEL-specific advice to X timeout message (vslavik)
    Related: rhbz#1918702
  - Fix AskVNCSpoke call (vslavik)
    Related: rhbz#1918702
  - Improve X startup error messages (vslavik)
    Related: rhbz#1918702
  - Terminate X server after timeout and restore crash test handler (vslavik)
    Related: rhbz#1918702
  - Reorganize control flow in startX (vslavik)
    Related: rhbz#1918702
  - Handle SIGUSR1 correctly after Xorg timeout (vslavik)
    Resolves: rhbz#1918702
  - Refactor minor details in startX (vslavik)
    Related: rhbz#1918702
  - Add base repo name for CentOS Stream after repository renaming (jkonecny)
    Resolves: rhbz#1946347
  - Avoid a race condition during Connect to Red Hat spoke initialization
    (mkolman)
    Resolves: rhbz#1950053


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.2-1
changelog:
  - Use modinfo to check ko before modprobe (t.feng94)
    Resolves: rhbz#1577544
  - network: do not crash on team without IP config (rvykydal)
    Resolves: rhbz#1929008
  - Add the "Encrypt my data" checkbox to the custom partitioning spoke
    (vponcova)
    Resolves: rhbz#1903786
  - Allow encryption of thin logical volumes (vponcova)
    Resolves: rhbz#1877777
  - Don't automatically execute the default partitioning (vponcova)
    Resolves: rhbz#1954408
  - Don't run the execute method in the kickstart installation in TUI by default
    (vponcova)
    Related: rhbz#1954408
  - Don't run the execute method in the kickstart installation in GUI by default
    (vponcova)
    Related: rhbz#1954408
  - Enable closest mirror in CentOS Stream config (carl)
    Resolves: rhbz#1953698
  - Add CentOS Stream config (riehecky)
    Resolves: rhbz#1953698


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.3-1
changelog:
  - Check source type directly, not via DBus (mkolman)
    Resolves: rhbz#1941578
  - Remove autostep functionality (vslavik)
    Resolves: rhbz#1976913
  - Make it possible to skip install time Insights errors (mkolman)
    Resolves: rhbz#1931069
  - Fix CDN button visibility (mkolman)
    Resolves: rhbz#1903178
  - network: do not bind virtual devices to mac (rvykydal)
    Resolves: rhbz#1963834
  - Add a log message for successful installation (vslavik)
    Resolves: rhbz#1949487


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.4-1
changelog:
  - Disable anaconda-core's requirement on subscription-manager on CentOS (carl)
    Resolves: rhbz#1984958
  - Show suggestions for an error caused by inconsistent sector sizes (vponcova)
    Resolves: rhbz#1935722
  - Use a custom stylesheet to define CentOS-specific stylesheet data (carl)
    Related: rhbz#1974149
  - Use RHEL help content for RHV/Ovirt (mkolman)
    Resolves: rhbz#1915910
  - Move post installation scripts to the end of queue (lveyde)
    Resolves: rhbz#1970879
  - Do not generate dracut arguments multiple times for some storage devices
    (rvykydal)
    Related: rhbz#1937208
  - Make failure in generating of dracut arguments for iSCSI device non-fatal.
    (rvykydal)
    Resolves: rhbz#1937208


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.5-1
changelog:
  - Remove misleading warning about inst.ks.device replacing ksdevice (rvykydal)
    Resolves: rhbz#2001913


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 33.16.5.6-1.0.1
changelog:
  - Switch to BLS kernel rescue generation script
  - Fix exception when searching for existing installations in rescue mode
    (herbert.van.den.bergh@oracle.com) [Orabug: 32795730]
  - Fix the path to the rescue image in the BLS config file [Orabug: 31988381]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - Fix syntax error in bug21957916-use-bls-set-default-kernel.patch [Orabug: 31877077]
  - Remove CDN from install source screen [Orabug: 31839682]
  - Fix work-around-filesystem-full-error-on-btrfs.patch to work around
    filesystem out of space error when installing to BTRFS [Orabug: 31845104]
  - Update add-oracle-linux-product.d-conf.patch to fix [Orabug: 31863588]
  - Updated bug18177078-install-UEK-and-set-as-default.patch due to code change
  - Fix oracle efi dir in add-oracle-linux-product.d-conf.patch
  - Fix crash when re-creating rescue image.
  - Disable rhsm and syspurpose kickstart commands
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Use UEK for the rescue image on x86_64
    [Orabug: 31587690]
  - Don't create separate mount point for /home when autopartitioning with btrfs
    [Orabug: 31192722]
  - Work around filesystem full error when / is on btrfs.
  - Enable support of /boot on btrfs and make it the default option.
  - Make sure both BaseOS and Appstream repo are initialized when supplied by user.
    [Orabug: 31298070]
  - Display quit message properly [Orabug: 31075436]
  - Fix crash when writing bootloader
  - Remove integration with CDN [Orabug: 30902364]
  - Remove additional non-Oracle installclass to prevent installer failure [Orabug: 30530690]
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Don't automatically insert UEK into package set if it exists in repo.
    Changes to comps file should take care of addition [Orabug: 30284307]
  - Alter search for packages that provide 'kernel' to also find kernel-uek
    [Orabug: 30284307]
  - Increase the buffer added to the download space required when determining
    the dnf download cache location to avoid hangs on Virtual Box
    [Orabug: 29889830]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153]
    (fred.herard@oracle.com)
  - Use OL8 for the kickstart version [Orabug: 29373077]
  - Remove python3-syspurpose requirement. [Orabug 29443881]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Remove UI components related to system purpose and RHN subscription. [Orabug: 29373275]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [bug 27116016]


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.1-1
changelog:
  - Payload should wait for all storage related threads to finish (mkolman)
    Resolves: rhbz#2007615
  - Remove misleading warning about inst.ks.device replacing ksdevice (rvykydal)
    Resolves: rhbz#2002722


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.2-1
changelog:
  - Make network spoke GUI more robust in cases of missing NM Client. (rvykydal)
    Resolves: rhbz#2003115
  - Do not crash on missing NM Client on --vnc installations (rvykydal)
    Related: rhbz#2003115
  - In installer environment set static, not transient hostname (rvykydal)
    Resolves: rhbz#1975349
  - Add product config for AlmaLinux (andrew.lukoshko)
    Resolves: rhbz#2003692
  - Fix creation of user account with empty password (mkolman)
    Resolves: rhbz#1687315


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.3-1
changelog:
  - Fix application of network --mtu kickstart option in Anaconda (rvykydal)
    Resolves: rhbz#2018301
  - Configure the multilib policy of the target system (vponcova)
    Resolves: rhbz#1571727
  - network: apply kickstart network --nodefroute also from stage2 (rvykydal)
    Resolves: rhbz#1990145


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.4-1
changelog:
  - Wait for all background threads to finish before filling installation task
    queue (mkolman)
    Resolves: rhbz#1824422


author: Martin Kolman <mkolman@redhat.com> - 33.16.6.5-1
changelog:
  - Fix the status of the root configuration screen (vponcova)
    Related: rhbz#1981807
  - Fix the condition for entering the root configuration (vponcova)
    Related: rhbz#1981807
  - Fix the condition for completing the root configuration (vponcova)
    Resolves: rhbz#1981807


author: Vendula Poncova <vponcova@redhat.com> - 33.16.6.6-1
changelog:
  - Bump subscription-manager version (mkolman)
    Related: rhbz#1968574
  - Improve UX in Simple Content Access mode (mkolman)
    Resolves: rhbz#1968574
  - Add IsSimpleContentAccessEnabled property (mkolman)
    Related: rhbz#1968574
  - Add support for SCA mode detection from registration data (mkolman)
    Related: rhbz#1968574


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.7-1
changelog:
  - ovirt: move /var/tmp and /var/crash to own partition (sbonazzo)
    Resolves: rhbz#2057475
  - Tier 0 Localization
    Resolves: rhbz#2016918


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.7.5-1
changelog:
  - Report registration errors from kickstart (mkolman)
    Resolves: rhbz#2000650
  - GUI: Show the dialog for a missing passphrase in an enlight box (vponcova)
    Related: rhbz#2029101
  - GUI: Ask for a missing passphrase during automated installations (vponcova)
    Resolves: rhbz#2029101
  - Create functions for a missing passphrase in pyanaconda.ui.lib (vponcova)
    Related: rhbz#2029101
  - Add missing period when concatenating password error strings (jkonecny)
    Resolves: rhbz#2075419


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.7.6-1
changelog:
  - dnf: apply the /etc/dnf/dnf.conf configuration file in the installer
    (rvykydal)
    Resolves: rhbz#1899494


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.7.7-1
changelog:
  - bootloader: do not consider non-ibft iscsi disk as usable for bootloader
    (rvykydal)
    Resolves: rhbz#2002629


author: Martin Kolman <mkolman@redhat.com> - 33.16.7.8-1
changelog:
  - Allow to omit WWPN and LUN for NPIV-enabled zFCP devices (jstodola)
    Resolves: rhbz#1497086
  - Reduce the width of the zFCP dialog (jstodola)
    Related: rhbz#1497086


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.7.9-1
changelog:
  - Add tooltip to the Insights checkbox (jkonecny)
    Resolves: rhbz#2069178
  - Increase the minimal suggested size for /boot (vslavik)
    Resolves: rhbz#1844423


author: Vladimir Slavik <vslavik@redhat.com> - 33.16.7.10-1
changelog:
  - Disable the Unregister button during unregistration (mkolman)
    Resolves: rhbz#2068195
  - Install rdma-core if infiniband network device is found (rvykydal)
    Resolves: rhbz#2050356


author: Martin Kolman <mkolman@redhat.com> - 33.16.8.2-1
changelog:
  - network: remove activate_connection_sync (rvykydal)
    Related: rhbz#2127057
  - network: use new NM client in ConsolidateInitramfsConnetionsTask (rvykydal)
    Related: rhbz#2127057
  - network: use new NM client instance in SetRealOnbootValuesTask (rvykydal)
    Related: rhbz#2127057
  - network: add tests for sync_call_glib (rvykydal)
    Related: rhbz#2127057
  - network: use separate main conext for NM client in threads (rvykydal)
    Related: rhbz#2127057
  - network: split add_and_activate_connection_sync function (rvykydal)
    Related: rhbz#2127057
  - network: add NM connections synchronously (rvykydal)
    Related: rhbz#2127057
  - infra: Use the Bugzilla API key in the `makebumpver` script (vponcova)
  - infra: Remove Jenkins from makebumpver (vslavik)


author: Martin Kolman <mkolman@redhat.com> - 33.16.8.3-1
changelog:
  - network: commit changes synchronously when dumping autoconnections (rvykydal)
    Related: rhbz#2127057
  - Initialize empty disks on the Manual Partitioning screen (vponcova)
    Resolves: rhbz#2094977
  - infra: Set test vars from templates (vslavik)
  - infra: Port check for matching templates from master (vslavik)
  - infra: Port templating mechanism from master (vslavik)
  - dracut: read filename dhcp option from dhcpopts file (rvykydal)
    Related: rhbz#1991516


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.8.4-1
changelog:
  - Disable the concurrency check in the error dialog in TUI (vponcova)
    Resolves: rhbz#1807491
  - Support bond device activated in initramfs from kickstart (rvykydal)
    Resolves: rhbz#1940919


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.8.5-1
changelog:
  - Delegate auto-attach handling to RHSM (mkolman)
    Resolves: rhbz#2083318
  - Test the InstallerStorage.copy method (vponcova)
    Related: rhbz#1913035
  - Show multiple bootloader devices on the Manual Partitioning screen (vponcova)
    Resolves: rhbz#1913035
  - Implement the Root.copy method (vponcova)
    Related: rhbz#1913035
  - Redefine the Blivet.roots attribute (vponcova)
    Related: rhbz#1913035
  - Redefine the Blivet.copy method (vponcova)
    Related: rhbz#1913035
  - Use correct hint for VNC password boot option (jstodola)
    Resolves: rhbz#2125679


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.8.6-1
changelog:
  - payload: fix repo --includepkgs option (rvykydal)
    Resolves: rhbz#2014103
  - bootloader/zipl.py: update for zipl >= 2.25.0 (dan)
    Resolves: rhbz#2157917


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.8.7-1
changelog:
  - Report registration errors from kickstart (mkolman)
    Resolves: rhbz#2127072
  - Make text in custom_storage_helper more accurate (ozobal)
    Resolves: rhbz#2063288


author: EL Errata <el-errata_ww@oracle.com> - 33.16.8.9-1.0.1
changelog:
  - When using the minimal or UEK boot ISOs, use public YUM as the install source.
    [OLDIS: 2397]
  - For fresh ISO installs, enable the UEK R7 repo.
    [Orabug: 34743550]
  - Switch to BLS kernel rescue generation script
  - Fix exception when searching for existing installations in rescue mode
    (herbert.van.den.bergh@oracle.com) [Orabug: 32795730]
  - Fix the path to the rescue image in the BLS config file [Orabug: 31988381]
  - When BTRFS autopartitioning type is used, make sure /boot is on BTRFS [Orabug: 31839671]
  - Enable grub2 BLS for XEN guests [Orabug: 31857289]
  - Fix syntax error in bug21957916-use-bls-set-default-kernel.patch [Orabug: 31877077]
  - Remove CDN from install source screen [Orabug: 31839682]
  - Fix work-around-filesystem-full-error-on-btrfs.patch to work around
    filesystem out of space error when installing to BTRFS [Orabug: 31845104]
  - Update add-oracle-linux-product.d-conf.patch to fix [Orabug: 31863588]
  - Updated bug18177078-install-UEK-and-set-as-default.patch due to code change
  - Fix oracle efi dir in add-oracle-linux-product.d-conf.patch
  - Fix crash when re-creating rescue image.
  - Disable rhsm and syspurpose kickstart commands
  - Add product.d config file for Oracle Linux [Orabug: 31863588]
  - Use UEK for the rescue image on x86_64
    [Orabug: 31587690]
  - Don't create separate mount point for /home when autopartitioning with btrfs
    [Orabug: 31192722]
  - Work around filesystem full error when / is on btrfs.
  - Enable support of /boot on btrfs and make it the default option.
  - Make sure both BaseOS and Appstream repo are initialized when supplied by user.
    [Orabug: 31298070]
  - Display quit message properly [Orabug: 31075436]
  - Fix crash when writing bootloader
  - Remove integration with CDN [Orabug: 30902364]
  - Remove additional non-Oracle installclass to prevent installer failure [Orabug: 30530690]
  - Update reference to URL with info about SMT [Orabug: 30390135]
  - Don't automatically insert UEK into package set if it exists in repo.
    Changes to comps file should take care of addition [Orabug: 30284307]
  - Alter search for packages that provide 'kernel' to also find kernel-uek
    [Orabug: 30284307]
  - Increase the buffer added to the download space required when determining
    the dnf download cache location to avoid hangs on Virtual Box
    [Orabug: 29889830]
  - iscsid service should not be running when transition to anaconda.target [Orabug: 29446153]
    (fred.herard@oracle.com)
  - Use OL8 for the kickstart version [Orabug: 29373077]
  - Remove python3-syspurpose requirement. [Orabug 29443881]
  - Prevent rescue bootloader entry from becoming the default [Orabug: 29439753]
  - Use /etc/os-release first when finding the product name [Orabug: 29373100]
  - Remove UI components related to system purpose and RHN subscription. [Orabug: 29373275]
  - Add patch to use bls config file to setup default kernel instead of index [Orabug: 21957916]
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [bug 27116016]


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.9.1-1
changelog:
  - driver_updates: migrate driver_updates.py to pep8 format (jkonecny)
    Related: rhbz#2154904
  - driver_updates: adding tests for the new logging solution (jkonecny)
    Related: rhbz#2154904
  - driver_updates: add lot of debug logs for easier debugging (jkonecny)
    Related: rhbz#2154904
  - driver_updates: extend where we print log messages (jkonecny)
    Resolves: rhbz#2154904
  - Add DNS search and ignore options from kickstart (vslavik)
    Resolves: rhbz#1656662
  - Add DNS search and ignore options from kickstart (vslavik)
    Resolves: rhbz#1656662
  - Add missing documentation about OEMDRV (jkonecny)
    Related: rhbz#1770969
  - oemdrv: wait up to 5 seconds for disks to be handled (rmetrich)
    Resolves: rhbz#1770969


author: Vladimír Slávik <vslavik@redhat.com> - 33.16.9.2-1
changelog:
  - Stop infinite wait for CDROM when KS is processed (jkonecny)
    Resolves: rhbz#2209602
  - Apply --noverifyssl option for liveimg kickstart command (jstodola)
    Resolves: rhbz#1886985
  - Change driver_updates exit info messages to debug (jkonecny)
    Related: rhbz#2154904


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.9.3-1
changelog:
  - Be more indulgent when reclaiming disk space (jstodola)
    Resolves: rhbz#1855371
  - Do not print error on inst.ks=cdrom|hd (jkonecny)
    Resolves: rhbz#2211857


author: Martin Kolman <mkolman@redhat.com> - 8.0.2-1
changelog:
  - add initial RHEL8 help content
    Resolves: rhbz#1634756
  - adapt spec file to new help content
    Related: rhbz#1634756


author: Martin Kolman <mkolman@redhat.com> - 8.2.1-1
changelog:
  - initial help content update for RHEL 8.2
  - add help content for the "Connect to Red Hat" spoke
  - drop content for the superseded "System Purpose" spoke
    Resolves: rhbz#1788855


author: Nick Clifton <nickc@redhat.com> - 10.20-1
changelog:
  - annocheck: Add more glibc function names.  (#2017039)
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.


author: Nick Clifton <nickc@redhat.com> - 10.23-1
changelog:
  - Annocheck: Add a test for unicode characters in identifiers.  (#2017363)
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)


author: Nick Clifton <nickc@redhat.com> - 10.27-1
changelog:
  - Annocheck: Skip missing fortify/warning notes for ARM32.
  - gcc-plugin: Try another fix for ppc64le section grouping.  (#2023437)
  - gcc-plugin: Revert 10.22 change.  (#2023437)
  - Annocheck: Add exception for /usr/sbin/ldconfig.  (#2022973)


author: Nick Clifton <nickc@redhat.com> - 10.28-1
changelog:
  - gcc-plugin: Fix bug creating empty attachments.  (#2026944)
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)


author: David Faust <david.faust@oracle.com> - 10.29-3.0.1
changelog:
  - Backport gcc-plugin: Do not ICE if a section could not be attached to
    a group (upstream commit ef99e2fceeb0ab60a7b72da7968a0df0f3130530).
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Clifton <nickc@redhat.com> - 10.58-1
changelog:
  - Rebase to 10.58.  (#2067148)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Annocheck: Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)
  - Spec File: Use a different method to disable the annobin plugin  (#2054571)
  - Annocheck: Accept static GO binaries.  (#2053606)
  - gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin.  (#2047356)
  - gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.  (#2044897)
  - Annocheck: Skip property note test for GO binaries.  (#204300)
  - Annocheck: Add another glibc static library symbol.  (#2043047)
  - Spec File: Use gcc --print-file-name=rpmver for the gcc version info.
  - GCC Plugin: Do not fail if a section cannot be attached to a group.
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)
  - Annocheck: Add option to disable instrumentation test.
  - GCC Plugin: Fix building with gcc-12.
  - Spec file: Add requirement on cpio for annocheck.  (#2039747)
  - Annocheck: Add even more glibc function names. (#2037333)
  - Annocheck: ARM: Do not fail tests that rely upon annobin notes.
  - Annocheck: Extend list of known glibc functions.  (#2037333)
  - Annocheck: Ignore gaps that contain the _start symbol (for AArch64).  (#1995224)
  - Annocheck: Ignore more glibc special binaries.  (#2037220)
  - Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO.  (#2034946)
  - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries.  (#2033255)
  - Docs: Note that ENDBR is only needed as the landing pad for indirect branches/calls.  (#28705)
  - Spec File: Store full	gcc version release string in plugin info file.  (#2030671)
  - Annocheck: Add special case for x86_64 RHEL-7 gaps.  (#2031133)
  - Annocheck: Do not complaining about missing -mstackrealign notes in LTO mode.  (#2030298)
  - GCC Plugin: Do not record missing -mstackrealign in LTO mode.
  - Tests: Fix gaps and stat tests to use newly built annobin plugin.  (#2028063)
  - Annocheck: Ignore gaps in binaries at least partial built by golang.  (#2028583)
  - Annocheck: Allow spaces in gloang symbols.  (#2028583)
  - Annocheck: Initial deployment of libannocheck.  (#2028063)
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)
  - Annocheck: Skip missing fortify/warning notes for ARM32.


author: Nick Clifton <nickc@redhat.com> - 10.64-1
changelog:
  - Annocheck: Add more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - llvm-plugin: Fix a thinko in the sources.
  - gcc-plugin: Add remap of OPT_Wall.
  - configure: Fix typo in top level configure.ac.
  - Add support for building using meson+ninja.
  - Annocheck: Fix test for AArch64 property notes.  (#2068657)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)


author: Nick Clifton <nickc@redhat.com> - 10.67-1
changelog:
  - Rebuild against LLVM 14.  (#2064521)
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
  - gcc-plugin: Add support for CLVC_INTEGER options.


author: Nick Clifton <nickc@redhat.com> - 10.94-1
changelog:
  - Rebase to 10.94.  (#2151312)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)
  - gcc-plugin: Fix typo in configure.ac.
  - Add support for RISC-V.
  - Annocheck: Add another special case for glibc rpms.  (#2083070)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)
  - Annocheck: Add more glibc exceptions + check PT_TLS segments.  (#2081131)


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Rebase to 11.12.  Brings in:
  - GCC Plugin: Do not run if other plugins are active.  (#2162746)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate debuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not treat object files as if they did not contain any code.  (#2158182)
  - Annocheck: Add more special glibc filenames.
  - Annocheck: Improve handling of tool versions.
  - GCC plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Avoid using debug filename when parsing notes in a debuginfo file.  (#2152280)


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 11.13-2.0.2
changelog:
  - Rebuild to match latest GCC.
    Oracle history:
    October-12-2023 David Faust <david.faust@oracle.com> - 11.13-2.0.1
    - Rebuild to match latest GCC.
    October-04-2023 David Faust <david.faust@oracle.com> - 10.94-1.0.2
    - Rebuild to match latest GCC.
    May-17-2023 Alan Steinberg <alan.steinberg@oracle.com> - 10.94-1.0.1
    - Rebuild to match the latest GCC release. [Orabug: 34882610]


author: David Faust <david.faust@oracle.com> - 11.13-2.0.3
changelog:
  - Rebuild to match latest GCC.
    Oracle history:
    April-18-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 11.13-2.0.2
    - Rebuild to match latest GCC.
    October-12-2023 David Faust <david.faust@oracle.com> - 11.13-2.0.1
    - Rebuild to match latest GCC.
    October-04-2023 David Faust <david.faust@oracle.com> - 10.94-1.0.2
    - Rebuild to match latest GCC.
    May-17-2023 Alan Steinberg <alan.steinberg@oracle.com> - 10.94-1.0.1
    - Rebuild to match the latest GCC release. [Orabug: 34882610]


author: David Faust <david.faust@oracle.com> - 11.13-2.0.4
changelog:
  - Rebuild to match latest GCC.
    Oracle history:
    October-08-2024 David Faust <david.faust@oracle.com> - 11.13-2.0.3
    - Rebuild to match latest GCC.
    April-18-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 11.13-2.0.2
    - Rebuild to match latest GCC.
    October-12-2023 David Faust <david.faust@oracle.com> - 11.13-2.0.1
    - Rebuild to match latest GCC.
    October-04-2023 David Faust <david.faust@oracle.com> - 10.94-1.0.2
    - Rebuild to match latest GCC.
    May-17-2023 Alan Steinberg <alan.steinberg@oracle.com> - 10.94-1.0.1
    - Rebuild to match the latest GCC release. [Orabug: 34882610]


author: David Faust <david.faust@oracle.com> - 11.13-2.0.5
changelog:
  - Rebuild to match latest GCC.
    Oracle history:
    February-11-2025 David Faust <david.faust@oracle.com> 11.13-2.0.4
    - Rebuild to match latest GCC.
    October-08-2024 David Faust <david.faust@oracle.com> - 11.13-2.0.3
    - Rebuild to match latest GCC.
    April-18-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 11.13-2.0.2
    - Rebuild to match latest GCC.
    October-12-2023 David Faust <david.faust@oracle.com> - 11.13-2.0.1
    - Rebuild to match latest GCC.
    October-04-2023 David Faust <david.faust@oracle.com> - 10.94-1.0.2
    - Rebuild to match latest GCC.
    May-17-2023 Alan Steinberg <alan.steinberg@oracle.com> - 10.94-1.0.1
    - Rebuild to match the latest GCC release. [Orabug: 34882610]


author: David Faust <david.faust@oracle.com> - 11.13-2.0.6
changelog:
  - Rebuild to match latest GCC.
    Oracle history:
    March-12-2025 David Faust <david.faust@oracle.com> - 11.13-2.0.5
    - Rebuild to match latest GCC.
    February-11-2025 David Faust <david.faust@oracle.com> 11.13-2.0.4
    - Rebuild to match latest GCC.
    October-08-2024 David Faust <david.faust@oracle.com> - 11.13-2.0.3
    - Rebuild to match latest GCC.
    April-18-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 11.13-2.0.2
    - Rebuild to match latest GCC.
    October-12-2023 David Faust <david.faust@oracle.com> - 11.13-2.0.1
    - Rebuild to match latest GCC.
    October-04-2023 David Faust <david.faust@oracle.com> - 10.94-1.0.2
    - Rebuild to match latest GCC.
    May-17-2023 Alan Steinberg <alan.steinberg@oracle.com> - 10.94-1.0.1
    - Rebuild to match the latest GCC release. [Orabug: 34882610]


author: Nick Clifton <nickc@redhat.com> - 8.73-2
changelog:
  - Release bump in order to allow rebuild against latest version of gcc in RHEL-8 buildroot.  (#1657912)


author: Nick Clifton <nickc@redhat.com> - 8.76-1
changelog:
  - Report a missing -D_FORTIFY_SOUCRE option if -D_GLIBCXX_ASSERTIONS was detected.  (#1703500)
  - Do not report problems with -fstack-protection if the binary was not built by gcc or clang.  (#1703788)    
  - Add tests of clang command line options recorded in the DW_AT_producer attribute.


author: Nick Clifton <nickc@redhat.com> - 8.76-2
changelog:
  - Release bump in order to allow rebuild against latest version of gcc in RHEL-8 buildroot.  (#1720179)


author: Nick Clifton <nickc@redhat.com> - 8.77-1
changelog:
  - Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options.  (#1703500)


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 8.78-1.0.1
changelog:
  - Synchronize with headers from gcc-plugin-devel-8.3.1-4.5.0.5.el8.x86_64
  - [Orabug: 30819564]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Clifton <nickc@redhat.com> - 8.89-1
changelog:
  - Update to version 8.89.  (#1766631)
  - Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
  - Replace address checks with dladdr1.
  - Use libabigail like checking to ensure variable address consistency.
  - Skip generation of global notes for hot/cold sections.
  - Generate FAIL results if -Wall or -Wformat-security are missing.
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.


author: Nick Clifton <nickc@redhat.com> - 8.89-1
changelog:
  - Update to version 8.89.  (#1766631)
  - Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
  - Replace address checks with dladdr1.
  - Use libabigail like checking to ensure variable address consistency.
  - Skip generation of global notes for hot/cold sections.
  - Generate FAIL results if -Wall or -Wformat-security are missing.
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.  (#1743635)


author: Nick Clifton <nickc@redhat.com> - 9.19-1
changelog:
  - Annobin: If option name mismatch occurs, seach for the real option.  (#1817452)
  - Annocheck: Fix a division by zero error when parsing GO binaries.  (#1818863)
  - Annobin: Fix access to the -flto and -fsanitize flags.
  - Annobin: Use offsets stored in gcc's cl_option structure to access the global_options array, thus removing the need to check for changes in the size of this structure.
  - Rename gcc plugin directory to gcc-plugin.
  - Stop annocheck from complaining about missing options when the binary has been built in a mixed environment.
  - Improve builtby tool.
  - Stop annocheck complaining about missing notes when the binary is not compiled by either gcc or clang.
  - Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang.  (#1809656)
  - Fix infinite loop hangup in annocheck.
  - Disable debuginfod support by default.
  - Improve parsing of .comment section.
  - Fix clang plugin to use hidden symbols.
  - Add ability to build clang plugin (disabled by default).
  - Annocheck: Fix error printing out the version number.
  - Annobin: Add checks of the exact location of the examined switches.
  - Annobin: Note when stack clash notes are generated.  (#1803173, #1828797)
  - Annocheck: Handle multiple builder IDs in the .comment section.
  - Add configure option to suppress building annocheck.
  - Fix debuginfod test.
  - Correct the build requirement for building with debuginfod support.
  - Add debuginfod support.
  - Add clang plugin (experimental).
  - Have annocheck ignore notes with an end address of 0.
  - Improve checking of gcc versions.


author: Nick Clifton <nickc@redhat.com> - 9.21-1
changelog:
  - Annobin: Fall back on using the flags if the option cannot be found in cl_options.  (#1817659)
  - Annocheck: Detect Fortran compiled programs.  (#1824393)


author: Nick Clifton <nickc@redhat.com> - 9.29-1
changelog:
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 9.32-1
changelog:
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)


author: Nick Clifton <nickc@redhat.com> - 9.35-2
changelog:
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)


author: Nick Clifton <nickc@redhat.com> - 9.46-1
changelog:
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.


author: Nick Clifton <nickc@redhat.com> - 9.49-1
changelog:
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)(#1904479)
  - gcc plugin: Add support for GCC 11's cl_vars array.


author: Nick Clifton <nickc@redhat.com> - 9.64-1
changelog:
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72.  (#1960299)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.


author: Paul Belanger <pabelanger@redhat.com> - 2.11.2-1
changelog:
  - ansible-core 2.11.2 released.
  - Drop bundled version of resolvelib in favor of
    python38-resolvelib.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.13.1-1
changelog:
  - ansible-core 2.13.1 release (rhbz#2103699)
  - add bundled version of jinja2, markupsafe and resolvelib
  - rebuild with python 3.9


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-3
changelog:
  - rebuild with python 3.11 (rhbz#2169524)
  - remove bundled dependencies from requirements file (rhbz#2143974)
  - use PyPi sources (rhbz#2160277)
  - remove straightplugin


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204511)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.3-1
changelog:
  - ansible-core 2.15.3 release (rhbz#2232431)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.16.3-1
changelog:
  - ansible-core 2.16.3 release (RHEL-23782)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22123)


author: Thomas Woerner <twoerner@redhat.com> - 0.1.8-2
changelog:
  - Updated RPM description for ansible-freeipa 0.1.8
    Related: RHBZ#1748986
  - ipahost: Fix choices of auth_ind parameter, allow to reset parameter
    Resolves: RHBZ#1783992
  - ipauser: Allow reset of userauthtype, do not depend on first,last for mod
    Resolves: RHBZ#1784474
  - ipahost: Enhanced failure msg for member params used without member action
    Resolves: RHBZ#1783948
  - Add missing attributes to ipasudorule
    Resolves: RHBZ#1788168
    Resolves: RHBZ#1788035
    Resolves: RHBZ#1788024
  - ipapwpolicy: Use global_policy if name is not set
    Resolves: RHBZ#1797532
  - ipahbacrule: Fix handing of members with action hbacrule
    Resolves: RHBZ#1787996
  - ansible_freeipa_module: Fix comparison of bool parameters in compare_args_isa
    Resolves: RHBZ#1784514
  - ipahost: Add support for several IP addresses and also to change them
    Resolves: RHBZ#1783979
    Resolves: RHBZ#1783976
  - ipahost: Fail on action member for new hosts, fix dnsrecord_add reverse flag
    Resolves: RHBZ#1803026


author: Thomas Woerner <twoerner@redhat.com> - 0.1.10-1
changelog:
  - Update to version 0.1.10:
    - ipaclient: Not delete keytab when ipaclient_on_master is true
    - New module to manage dns forwarder zones in ipa
    - Enhancements of sudorule module tests
    - Gracefully handle RuntimeError raised during parameter validation in
      fail_jso
    - ipareplica_prepare: Fix module DOCUMENTATION
    - ipa[server,replica,client]: setup_logging wrapper for
      standard_logging_setup
    - Created FreeIPABaseModule class to facilitate creation of new modules
    - New IPADNSZone module
    - Add admin password to the ipadnsconfig module tests
    - Added alias module arguments in dnszone module
    - Fixed a bug in AnsibleFreeIPAParams
    - utils/build-galaxy-release: Do not add release tag to version for galaxy
    - ipaserver docs: Calm down module linter
    - galaxy.yml: Add system tag
    - ipareplica_setup_kra: Remove unused ccache parameter
    - ipareplica_setup_krb: krb is assigned to but never used
    - utils/galaxy: Make galaxy scripts more generic
    - galaxyfy-playbook.py: Fixed script name
    Related: RHBZ#1818768


author: Thomas Woerner <twoerner@redhat.com> - 0.1.12-2
changelog:
  - Fixes service disable when service has no certificates attached
    Resolves: RHBZ#1836294
  - Add suppport for changing password of symmetric vaults
    Resolves: RHBZ#1839197
  - Fix forwardzone issues
    Resolves: RHBZ#1843826
    Resolves: RHBZ#1843828
    Resolves: RHBZ#1843829
    Resolves: RHBZ#1843830
    Resolves: RHBZ#1843831
  - ipa[host]group: Fix membermanager unknow user issue
    Resolves: RHBZ#1848426
  - ipa[user,host]: Fail on duplucate names in the users and hosts lists
    Resolves: RHBZ#1822683


author: Thomas Woerner <twoerner@redhat.com> - 0.1.12-6
changelog:
  - Allow to manage multiple dnszone entries
    Resolves: RHBZ#1845058
  - Fixed error msgs on FreeIPABaseModule subclasses
    Resolves: RHBZ#1845051
  - Fix `allow_create_keytab_host` in service module
    Resolves: RHBZ#1868020
  - Modified return value for ipavault module
    Resolves: RHBZ#1867909
  - Add support for option `name_from_ip` in ipadnszone module
    Resolves: RHBZ#1845056
  - Fixe password behavior on Vault module
    Resolves: RHBZ#1839200


author: Thomas Woerner <twoerner@redhat.com> - 0.1.2-1
changelog:
  - update to version 0.1.2
    - Now a new Ansible Collection
    - Fix gssapi requirement for OTP: It is only needed if keytab is used with
      OTP now.
    - Fix wrong ansible argument types
    - Do not fail on textwrap for replica deployments with CA
    - Ansible lint and galaxy fixes
    - Disable automatic removal of replication agreements in uninstall
    - Enable freeipa-trust service if adtrust is enabled
    - Add support for hidden replica
    - New topology managament modules
    - Add support for pki_config_override
    - Fix host name setup in server deployment
    - Fix errors when ipaservers variable is not set
    - Fix ipaclient install role length typo
    - Cleanups


author: Thomas Woerner <twoerner@redhat.com> - 0.1.3-1
changelog:
  - update to version 0.1.3
    - ipaclient_test: Fix Python2 decode use with Python3
    - Fixed: #86 (AttributeError: 'str' object has no attribute 'decode')
    - ipaclient_get_otp: Remove ansible_python_interpreter handling
    - ipaclient: Use omit (None) for password, keytab, no string length checks
    - ipaclient_join: Support to use ipaadmin_keytab without ipaclient_use_otp
    - ipaclient: Report error message if ipaclient_get_otp failed
    - Fixes #17 Improve how tasks manage package installation
    - ipareplica: The dm password is not needed for ipareplica_master_password
    - ipareplica: Use ipareplica_server if set
    - ipatopologysegment: Allow domain+ca suffix, new state: checked
    - Documentation updates
    - Cleanups


author: Thomas Woerner <twoerner@redhat.com> - 0.1.4-2
changelog:
  - ansible_ipa_client: Always set options.unattended (RHBZ#1726645)
  - ipaserver_prepare: Properly report error, do show trace back (RHBZ#1726668)
  - ipa[server,replica,client]: RHEL-8 specific vars files (RHBZ#1727095)
  - ipatopology modules: Use ipaadmin_ prefix for principal and password
    (RHBZ#1727101)


author: Thomas Woerner <twoerner@redhat.com> - 0.1.6-1
changelog:
  - update to version 0.1.6
    - Lots of documentation updates in READMEs and modules
    - library/ipaclient_get_otp: Enable force mode for host_add call (fixes #74)
    - Flake8 and pylint reated fixes
    - Fixed wrong path to CheckedIPAddress class in ipareplica_test
    - Remove unused ipaserver/library/ipaserver.py
    - No not use wildcard imports for modules
    - ipareplica: Add support for pki_config_override
    - ipareplica: Initialize dns.ip_addresses and dns.reverse_zones for dns setup
    - ipareplica_prepare: Properly initialize pin and cert_name variables
    - ipareplica: Fail with proper error messages
    - ipaserver: Properly set settings related to pkcs12 files
    - ipaclient: RawConfigParser is not always provided by six.moves.configparser
    - ipaclient_setup_nss: paths.GETENT is not available before
      freeipa-4.6.90.pre1
    - ipaserver_test: Initialize value from options.zonemgr
    - ipareplica_setup_custodia: create_replica only available in newer releases
    - ipaclient: Fix typo in dnsok assignment for ipaclient_setup_nss
    - ipa[server,replica]: Set _packages_adtrust for Ubuntu
    - New build script for galaxy release
    - New utils script to update module docs
  - Changes from ansible-freeipa-0.1.5
    - Support for IPA 4.8.0
    - New user management module
    - New group management module
    - ipaserver: Support external signed CA
    - RHEL-8 specific vars files to be able to install needed modules
      automatically
    - ipareplica: Fixes for certmonger and kra setup
    - New tests folder
    - OTP related updates to README files


author: Thomas Woerner <twoerner@redhat.com> - 0.1.6-3
changelog:
  - ipatopologysegment: Store suffix for commands in command list (RHBZ#1733547)
  - ipatopologysegment: Fail for missing entry with reinitialized (RHBZ#1733559)


author: Thomas Woerner <twoerner@redhat.com> - 0.1.7-1
changelog:
  - Update to version 0.1.7
    - Add debian support for ipaclient
    - Added support for predefining client OTP using ipaclient_otp
    - ipatopologysegment: Store suffix for commands in command list
    - ipatopologysegment: Fail for missing entry with reinitialized
    - Utils scripts: ansible-ipa-[server,replica,client]-install
    - ipaserver_test,ipareplica_prepare: Do not return _pkcs12_file settings
    - ansible_freeipa_module: Add support for GSSAPI
    - ansible_ipa_client: Drop import of configure_nsswitch_database
    - New host management module
    - New hostgroup management module
    - ipagroup: Remove unused member_[present,absent] states
    - external-ca tests: Fix typo in inventory files
    - tests/external-signed-ca tests: Fix external-ca.sh to use proper serials
    - ipagroup: Rework to use same mechanisms as ipahostgroup module
    - ansible_freeipa_module: api_command should not have extra try clause
    - ansible_freeipa_module: compare_args_ipa needs to compare lists orderless
    - ansible_freeipa_module: New function api_check_param
    - ansible_freeipa_module: New functions module_params_get and _afm_convert
    - ansible_freeipa_module: Add missing to_text import for _afm_convert
    - ansible_freeipa_module: Convert tuple to list in compare_args_ipa
    - ansible_freeipa_module: New function api_get_realm
    - ipauser: User module extension
    - New sudocmd management module
    - New sudocmdgroup management module
    - ansible_freeipa_module: Convert int to string in compare_args_ipa
    - New pwpolicy management module
    - New hbacsvc (HBAC Service) management module
    - New hbacsvcgroup (HBAC Service Group) management module
    - ipagroup: Properly support IPA versions 4.6 and RHEL-7
    - ipagroup: Fix changed flag, new test cases
    - ipauser: Add info about version limitation of passwordexpiration
    - New hbacrule (HBAC Rule) management module
    - ipahostgroup: Fix changed flag, support IPA 4.6 on RHEL-7, new test cases
    - New sudorule (Sudo Rule) management module
    - ipauser: Support 'sn' alias of 'last' for surname
    - Update galaxy.yml: Update description, drop empty dependencies
    - Update ipauser.py: Fix typo in users.name description
    - ipaclient: Fix misspelled sssd options
    - ipauser: Return generated random password
    - ipahost: Return generated random password
    - Added context configuration to api_connect
    - ansible_freeipa_module: Better support for KRB5CCNAME environment variable
    - ipa[server,replica,client]: Add support for CentOS-8
    - ipahost: Extension to be able handle several hosts and all settings
    - Flake8 fixes
    - Documentation updates
    - Cleanup
    Resolves: RHBZ#1748986


author: Thomas Woerner <twoerner@redhat.com> - 0.1.8-1
changelog:
  - Update to version 0.1.8 (bug fix release)
    - roles/ipaclient/README.md: Add information about ipaclient_otp
    - Install and enable firewalld if it is configured for ipaserver and
      ipareplica roles
    - ipaserver_test: Do not use zone_overlap_check for domain name validation
    - Allow execution of API commands that do not require a name
    - Update README-host: Drop options from allow_*keytab parameters docs
    - ipauser: Extend email addresses with default email domain if no domain is
      given
      Resolves: RHBZ#1747413
    Related: RHBZ#1748986


author: Thomas Woerner <twoerner@redhat.com> - 0.3.0-1
changelog:
  - Update to version 0.3.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.0
    With tests sub package
    Resolves: RHBZ#1891826
  - Support for firewalld zone in ipaserver and ipareplica roles 
    Resolves: RHBZ#1894488
  - ipagroup: Add support for the IPA CLI option `posix`
    Resolves: RHBZ#1894493
  - New ipabackup role for backup and restore
    Resolves: RHBZ#1894494
  - New management module ipadelegation
    Resolves: RHBZ#1894496
  - New management module ipalocation
    Resolves: RHBZ#1894497
  - New management module ipaprivilege
    Resolves: RHBZ#1894498
  - New management module ipapermission
    Resolves: RHBZ#1894499
  - New management module iparole
    Resolves: RHBZ#1894500
  - New management module ipaselfservice
    Resolves: RHBZ#1894501
  - New management module ipatrust
    Resolves: RHBZ#1894502
  - Fixed log of vault data return when retrieving to a file
    Resolves: RHBZ#1875378
  - ipadnszone: Fix modification o SOA serial with other attributes
    Resolves: RHBZ#1876896
  - Fix symmetric vault password change when using password_files
    Resolves: RHBZ#1879004
  - ipadnsrecord: fix record modification behavior
    Resolves: RHBZ#1880409
    Resolves: RHBZ#1881452
  - ipadnsrecord: fix record update when multiple records exist
    Resolves: RHBZ#1881436


author: Thomas Woerner <twoerner@redhat.com> - 0.3.1-1
changelog:
  - Update to version 0.3.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.1
    Related: RHBZ#1891826
  - ipabackup: Fix undefined vars for conditions in shell tasks without else
    Related: RHBZ#1894494


author: Thomas Woerner <twoerner@redhat.com> - 0.3.2-1
changelog:
  - Update to version 0.3.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.2
    Related: RHBZ#1891826
  - Not able to add additional privileges with existing privilege in role module
    Resolves: RHBZ#1893678
  - Required error message while adding non-existing members in role handling
    Resolves: RHBZ#1893679
  - Not able to add new members with existing members role handling
    Resolves: RHBZ#1893684
  - service members are removed while updating other members in role handling
    Resolves: RHBZ#1893685
  - after changing the vault type from standard to symmetric, Salt is missing
    Resolves: RHBZ#1880367
  - After changing the vault type from symmetric to asymmetric, Salt is present
    in the asymmetric vault
    Resolves: RHBZ#1880377
  - After changing the vault type from asymmetric to the standard vault, the
    Public key is present in the standard vault
    Resolves: RHBZ#1880378
  - Not able to replace public-key-file to the public-key in asymmetric vault
    type
    Resolves: RHBZ#1880862
  - ipauser module does not seem to support --check flag to ansible-playbook
    Resolves: RHBZ#1893675
  - Not able to add additional attributes with existing attributes in permission
    handling
    Resolves: RHBZ#1893687
  - Privilege variable is removed from permission handling
    Resolves: RHBZ#1893688


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-1
changelog:
  - Update to version 0.3.6
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.6
    Resolves: RHBZ#1959875
  - ansible-freeipa-tests not in the compose
    Resolves: RHBZ#1936869
  - Remove unsupported parameter for (ipapermission) module: perm_rights from
    permission-present.yml
    Resolves: RHBZ#1921654
  - Sample playbook included for selfservice module is incorrect
    Resolves: RHBZ#1922060
  - ipa-client-install failing with error code 7(keytab: /usr/sbin/ipa-rmkeytab
    returned 7)
    Resolves: RHBZ#1935123
  - New management module ipaserver
    Resolves: RHBZ#1966493
  - New management module ipaautomember
    Resolves: RHBZ#1966496


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-3
changelog:
  - Apply fix for ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
    Related: RRBZ#1969847


author: Thomas Woerner <twoerner@redhat.com> - 0.3.7-1
changelog:
  - Update to version 0.3.7
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.7
    Related: RHBZ#1959875
  - automember: Fix action to be automember or member, not service
    Resolves: RRBZ#1976923
  - automember: Fix result["failed"] issues with conditions
    Resolves: RRBZ#1976926


author: Thomas Woerner <twoerner@redhat.com> - 0.3.8-1
changelog:
  - Update to version 0.3.8
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.8
    Related: RHBZ#1959875
  - automember: Verify condition keys
    Related: RHBZ#1976926


author: Thomas Woerner <twoerner@redhat.com> - 1.8.1-1
changelog:
  - Update to version 1.8.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.1
    Related: RHBZ#2080321
  - ipa server deploys failing with latest IPA compose
    Resolves: RHBZ#2103928
  - ipaserver_external_cert_files failes to copy with ansible 2.13
    Resolves: RHBZ#2104842


author: Thomas Woerner <twoerner@redhat.com> - 1.8.2-1
changelog:
  - Update to version 1.8.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.2
    Related: RHBZ#2080321
  - SIDs are always generated for server and replica deployments
    Resolves: RHBZ#2110491
  - Random Serial Numbers are not enabled by default any more
    Resolves: RHBZ#2110526
  - Fixes comparison of bool values in IPA 4.9.10+ for ipadnsconfig
    Resolves: RHBZ#2110539


author: Thomas Woerner <twoerner@redhat.com> - 1.8.3-1
changelog:
  - Update to version 1.8.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.3
    Related: RHBZ#2080321
  - Fixes replica deployment issue for domains without SID support.
    Related: RHBZ#2110491


author: Thomas Woerner <twoerner@redhat.com> - 1.8.4-1
changelog:
  - Update to version 1.8.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.4
    Resolves: RHBZ#2125591
  - 'ansible-doc' -l lists most idm modules as 'UNDOCUMENTED'
    Resolves: RHBZ#2121362
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2120415
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2069174


author: Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
changelog:
  - Update to version 1.9.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
    Related: RHBZ#2125591
  - pwpolicy: Add support for password check and grace limit
    Resolves: RHBZ#2015288
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2127447
  - ipaclient: No kinit on controller for deployment using OTP
    Resolves: RHBZ#2127885
  - ipaclient: Configure DNS resolver
    Resolves: RHBZ#2127894
  - New netgroup management module
    Resolves: RHBZ#2127908
  - sudorule: Add support for 'hostmask' parameter
    Resolves: RHBZ#2127912
  - ipaconfig: Fix fail_json calls
    Resolves: RHBZ#2128460
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2134530
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132729


author: Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
changelog:
  - Update to version 1.9.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
    Resolves: RHBZ#2125591
  - pwpolicy: Allow clearing policy values
    Resolves: RHBZ#2150332
  - Use netgroup_find instead of netgroup_show to workaround IPA bug
    Resolves: RHBZ#2144724


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
changelog:
  - Update to version 1.9.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
    Resolves: RHBZ#2125591
  - ipabackup: Use ipabackup_item again in copy_backup_to_server
    Resolves: RHBZ#2165951


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Resolves: RHBZ#2170371
  - ipareplica/server: Enable removal from domain with undeployment
    Resolves: RHBZ#2127901
  - ipagroup: Allow multiple group management
    Resolves: RHBZ#2175762
  - ipaserver: Allow deployments with random serial numbers
    Resolves: RHBZ#2127904
  - ipagroup: Fix ensuring external group members (without trust-ad)
    Resolves: RHBZ#2183820
  - ipaclient: Add subid option to select the sssd profile with-subid
    Resolves: RHBZ#2175766
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#1759785
  - ipaclient: Keep server affinity while deploying as long as possible
    Resolves: RHBZ#2175755


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Resolves: RHBZ#2170371
  - Multiple service management
    Resolves: RHBZ#2175769
  - New ipacert module
    Resolves: RHBZ#2127906
  - Fix maxsequence handling in ipapwpolicy module
    Resolves: RHBZ#2214295


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Resolves: RHBZ#2170371
  - ipaautomountmap: add support for indirect maps
    Resolves: RHBZ#2050158
  - ipauser: Add support to modify GECOS field
    Resolves: RHBZ#2168022
  - ipauser: Add support for parameter "street"
    Resolves: RHBZ#2215532
  - ipauser: Add support for SMB attributes
    Resolves: RHBZ#2215534
  - ipauser: Support for External IdP attributes
    Resolves: RHBZ#2215539
  - Fix handling of ipapwpolicy attributes usercheck and dictcheck
    Resolves: RHBZ#2215543
  - Update authtypes authind
    Resolves: RHBZ#2215540


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Resolves: RHEL-13746
  - New idoverridegroup management module.
    Resolves: RHEL-16935
  - New idoverrideuser management module.
    Resolves: RHEL-16941
  - New idview management module.
    Resolves: RHEL-16933
  - New idp management module.
    Resolves: RHEL-16938
  - idoverride{user,group}: Fix delete_continue with state absent
    Resolves: RHEL-16682


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13746
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4963
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13759
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17955
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17958
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-4934
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19129
  - Idempotency fixes
    Resolves: RHEL-13755
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19133
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19135
  - ipa-server installation failing
    Resolves: RHEL-23633


author: Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.4.0
    Resolves: RHBZ#2010621
  - Add ability to run modules remotely
    Resolves: RHBZ#1918025
  - New management module ipaautomountlocation
    Resolves: RHBZ#2010639


author: Thomas Woerner <twoerner@redhat.com> - 1.5.3-1
changelog:
  - Update to version 1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.0
    Related: RHBZ#2010621
  - automember set default group/hostgroup is missing from the automember module
    Resolves: RHBZ#1999912
  - automember remove default group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#1999913
  - automember rebuild is missing from the automember module
    Resolves: RHBZ#1999915
  - automember remove orphans group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#1999916
  - Not able to update existing automember rule description
    Resolves: RHBZ#2021393


author: Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
changelog:
  - Update to version 1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.0
    Related: RHBZ#2010621
  - Add module to manage automount maps
    Resolves: RHBZ#2040462
  - Add module to manage automount keys
    Resolves: RHBZ#2040464
  - Client deploy failing with ipaadmin keytab and OTP due to latest ansible
    version
    Resolves: RHBZ#2041753


author: Thomas Woerner <twoerner@redhat.com> - 1.6.2-1
changelog:
  - Update to version 1.6.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.2
    Related: RHBZ#2010621


author: Thomas Woerner <twoerner@redhat.com> - 1.6.3-1
changelog:
  - Update to version 1.6.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.3
    Related: RHBZ#2010621


author: Thomas Woerner <twoerner@redhat.com> - 1.6.3-2
changelog:
  - ipatrust: fix range_type and set valid choices for trust_type
    Resolves: RHBZ#2132967
  - ipaserver/ipareplica: Always generate SIDs
    Resolves: RHBZ#2132970
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132975
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2132989
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2132995


author: Thomas Woerner <twoerner@redhat.com> - 1.7.0-1
changelog:
  - Update to version 1.7.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.7.0
    Resolves: RHBZ#2080321
  - New idrange management module.
    Resolves: RHBZ#1921545
  - Not able to update empty descriptions in automount maps.a
    Resolves: RHBZ#2048552
  - New servicedelegationrule management module.
    Resolves: RHBZ#2069170
  - New servicedelegationtarget management module.
    Resolves: RHBZ#2069172
  - Add support for managing idoverrideusers in ipagroup.
    Resolves: RHBZ#2069173


author: Thomas Woerner <twoerner@redhat.com> - 1.8.0-1
changelog:
  - idrange: Fix usage of dom_name when idrange doesn't exist.
    Resolves: RHBZ#2086993
  - smartcard roles for ansible-freeipa
    Resolves: RHBZ#2076554


author: Thomas Woerner <twoerner@redhat.com> - 1.8.3-2
changelog:
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132974
  - Replica Install Setup DNS fails
    Resolves: RHBZ#2132988
  - ipaconfig: Add support for SID related attributes
    Resolves: RHBZ#2132994
  - paconfig: Fix fail_json calls
    Resolves: RHBZ#2135753
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2135754
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2135775


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-2
changelog:
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#2189235
  - ipaclient: Defer creating the final krb5.conf on clients
    Resolves: RHBZ#2189238


author: Akshata Konala <akshata.konala@oracle.com> - 1.9.2-3
changelog:
  - Fix typo in ipapwpolicy.py
    Resolves: RHBZ#2218187
  - pwpolicy test: Fix maxsequence test
    Resolves: RHBZ#2218187


author: Nathan Scott <nathans@redhat.com> 2.0.3-1
changelog:
  - Updated for new version with changed namespace
  - Ansible collection macros now used in the spec
  - Added ansible-lint checking in %check section


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0:1.10.5-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Michael Simacek <msimacek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream version 3.2.2
  - Merge two javadoc subpackages
  - Install with XMVn
  - Specfile cleanup


author: Mat Booth <mat.booth@redhat.com> - 3.2.2-8
changelog:
  - Allow testframework to still be built even with tests disabled, which is
    needed by other packages


author: Iryna Shcherbina <ishcherb@redhat.com> - 1.6.3-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Joe Orton <jorton@redhat.com> - 1.6.0-1
changelog:
  - update to 1.6.0 (#1460831)
  - move bdb support to loadable DSO in apr-util-dbd subpackage
  - drop NSS, freetds support


author: Josef Ridky <jridky@redhat.com> - 8.6.10-0.1.20180605git986f99d
changelog:
  - New upstream version with Python3 support - asciidoc-py3 (commit 986f99d)
  - Update versioning, Source and Url label information


author: Omair Majid <omajid@redhat.com> - 3.0.100-0.8.preview9
changelog:
  - Fix package descriptions for targeting packs
  - Re-generate tarball to remove samples
  - Resolves: RHBZ#1711403


author: Omair Majid <omajid@redhat.com> - 3.0.102-2
changelog:
  - Fix prebuilts leaking into the final build
  - Fix regressions in binary hardering
  - Resolves: RHBZ#1788171


author: Omair Majid <omajid@redhat.com> - 3.1.100-0.4.preview3
changelog:
  - Update to .NET Core Runtime 3.1.0-preview3.19553.2 and SDK 3.1.100-preview3-014645
  - Resolves: RHBZ#1711405


author: Omair Majid <omajid@redhat.com> - 3.1.101-1
changelog:
  - Update to .NET Core Runtime 3.1.1 and SDK 3.1.101
  - Resolves: RHBZ#1794437 - CVE-2020-0602
  - Resolves: RHBZ#1794435 - CVE-2020-0603


author: Omair Majid <omajid@redhat.com> - 3.1.107-1
changelog:
  - Update to .NET Core SDK 3.1.107 and Runtime 3.1.7
  - Resolves: RHBZ#1862590
  - Resolves: RHBZ#1861114


author: Omair Majid <omajid@redhat.com> - 3.1.108-1
changelog:
  - Update to .NET Core SDK 3.1.108 and Runtime 3.1.8
  - Resolves: RHBZ#1874503
  - Resolves: RHBZ#1873454


author: Darren Archibald <darren.archibald@oracle.com> - 3.1.110-1.0.1
changelog:
  - Update patch to support 8.3 (alexander.burmashev@oracle.com)
  - support OL release scheme (alexander.burmashev@oracle.com)


author: EL Errata <el-errata_ww@oracle.com> - 3.1.113-2.0.1
changelog:
  - Update patch to support 8.4 (alexander.burmashev@oracle.com)
  - support OL release scheme (alexander.burmashev@oracle.com)


author: Andrew Slice <aslice@redhat.com> - 3.1.117-1
changelog:
  - Update to .NET SDK 3.1.117 and Runtime 3.1.17
  - Fix renaming of coreclr to dotnet-coreclr
  - Remade the core-setup-hardening patch to incorporate new defaults in the cmake file.
  - Resolves: RHBZ#1978407


author: Omair Majid <omajid@redhat.com> - 3.1.114-2
changelog:
  - Update to .NET SDK 3.1.114 and Runtime 3.1.14
  - Add dotnet-sdk-3.1-source-built-artifacts subpackage
  - Resolves: RHBZ#1946721


author: Omair Majid <omajid@redhat.com> - 3.1.416-4
changelog:
  - Update to .NET SDK 3.1.416 and Runtime 3.1.22
  - Resolves: RHBZ#2011820
  - Resolves: RHBZ#2003077
  - Resolves: RHBZ#2031428


author: EL Errata <el-errata_ww@oracle.com> - 3.1.419-1.0.1
changelog:
  - Add missing Oracle Linux Runtime IDs
  - Update to .NET SDK 3.1.417 and Runtime 3.1.23
  - Resolves: RHBZ#2060566


author: EL Errata <el-errata_ww@oracle.com> - 3.1.105-2.0.1.el8_2
changelog:
  - Update patch to support 8.2 (alexander.burmashev@oracle.com)
  - support OL release scheme (alexander.burmashev@oracle.com)


author: Omair Majid <omajid@redhat.com> - 3.1.107-1
changelog:
  - Update to .NET Core Runtime 3.1.7 and SDK 3.1.107
  - Resolves: RHBZ#1862593
  - Resolves: RHBZ#1861113


author: Andrew Slice <andrew.slice@redhat.com> - 5.0.205-1
changelog:
  - Update to .NET SDK 5.0.205 and Runtime 5.0.8
  - Added a patch to remove references to the tests directory from other patches.
  - Resolves: RHBZ#1980412


author: Omair Majid <omajid@redhat.com> - 5.0.202-2
changelog:
  - Update to .NET SDK 5.0.202 and Runtime 5.0.5
  - Create -source-built-artifacts subpackage
  - Resolves: RHBZ#1947600


author: EL Errata <el-errata_ww@oracle.com> - 5.0.207-3.0.1
changelog:
  - Support AArch64 on Oracle Linux [Orabug: 32738620]
  - Include new Oracle Linux runtime IDs
    Add 1000-Add-missing-OL-RIDs.patch


author: Omair Majid <omajid@redhat.com> - 5.0.209.1-1
changelog:
  - Update to .NET SDK 5.0.209 and Runtime 5.0.12
  - Resolves: RHBZ#2024319
  - Resolves: RHBZ#2011058
  - Resolves: RHBZ#2003078


changelog:
  - Support AArch64 on Oracle Linux [Orabug: 32738620]
  - Add missing Oracle RIDs

author:
  Alex Burmashev <alexander.burmashev@oracle.com> 6.0.0-0.6.28be3e9a006d90d8c6e87d4353b77882829df718.0.1


author: Omair Majid <omajid@redhat.com> - 6.0.100-1
changelog:
  - Fix build against clang 13
  - Resolves: RHBZ#2003061
  - Resolves: RHBZ#2015536
  - Resolves: RHBZ#2014666


author: EL Errata <el-errata_ww@oracle.com> - 7.0.100-0.2.rc1.0.1
changelog:
  - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 7.0.117-1.0.1
changelog:
  - Update to .NET SDK 7.0.117 and Runtime 7.0.17
  - Port Revert "Disable implicit rejection for RSA PKCS#1 (#95217) patch


author: Alan Steinberg <alan.steinberg@oracle.com> - 7.0.108-1.0.1
changelog:
  - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152]
  - Update to .NET SDK 7.0.108 and Runtime 7.0.8


author: Omair Majid <omajid@redhat.com> - 8.0.100~rc.1-0.3
changelog:
  - Add patches to fix mono and arm64 issues
  - Include libmono-*.a files in the SDK
  - Fix CI configuration
  - Related: RHEL-2958


author: Alex Burmashev <alexander.burmashev@oracle.com> - 8.0.102-2.0.1
changelog:
  - Update to .NET SDK 8.0.102 and Runtime 8.0.2
  - Add -dbg subpackages for symbol files
  - Resolves: RHEL-23070


author: Apoorva Eliza John <apoorva.eliza.john@oracle.com> - 8.0.102-2.0.2
changelog:
  - Backported patch for Disabling implicit rejection for RSA PKCS#1v1.5 decryption [Orabug: 36362910]


author: Pavel Březina <pbrezina@redhat.com> - 1.0-7
changelog:
  - pam_systemd shouldn't be optional in system-auth (RHBZ #1643928)
  - compat tool: support --enablerequiresmartcard (RHBZ #1649277)
  - compat tool: support --smartcardaction=0 (RHBZ #1649279)
  - remove ecryptfs from authselect since it is not present in rhel8 (RHBZ #1649282)
  - authselect enable-features should error on unknown features (RHBZ #1651637)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-9
changelog:
  - fix sources for official rhel translations (RHBZ #1608286)
  - fix coverity warnings for authselect enable-features should error on unknown features (RHBZ #1651637)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-12
changelog:
  - make authselect work with selinux disabled (RHBZ #1668025)
  - require smartcard authentication only for specific services (RHBZ #1665058)
  - update translations (RHBZ #1608286)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.0-13
changelog:
  - Revert pam_systemd.so to be optional
  - Resolves: #rhbz1643928 - pam_systemd shouldn't be optional in system-auth


author: Pavel Březina <pbrezina@redhat.com> - 1.1-1
changelog:
  - Rebase to authselect-1.1 (RHBZ #1685516)
  - Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103)
  - Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397)
  - Update translations (RHBZ #1689973)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.1-1
changelog:
  - Rebase to authselect-1.2.1 (RHBZ #1810471)
  - CLI commands are now correctly translated (RHBZ #1816009)
  - Remove unsupported features from sssd profile description (RHBZ #1830251)
  - add `with-files-access-provider` to sssd profile (RHBZ #1734094)
  - switch to pam_usertype module (RHBZ #1773567)
  - fix typo in sssd profile description (RHBZ #1787638)
  - add minimal profile (RHBZ #1654018)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.2-2
changelog:
  - try_first_pass option no longer works on some PAM modules in RHEL8 (RHBZ #1949070)
  - Need to localize the description of --debug option in authselect show (RHBZ #1970408)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080238)
  - sssd profile with-smartcard no longer prevents local users from accessing cron (RHBZ #2070325)
  - backup-restore now works correctly (RHBZ #2066535)
  - add with-subid to sssd profile (RHBZ #2063750)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - Update translations (RHBZ #2139696)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151140)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2216755)
  - Update translations (RHBZ #2189557)
  - Do not prompt for password twice when changing password of local user (RHBZ #2179607)


author: Tomas Orsava <torsava@redhat.com> - 1:6.0.6.1-8
changelog:
  - Resolves: rhbz#1619153 Require the Python interpreter directly instead of
    relying on the package name


author: Caolán McNamara <caolanm@redhat.com> - 1:6.0.6.1-11
changelog:
  - Resolves: rhbz#1649251 impress webpreview doesn't work without graphicfilter
  - Resolves: rhbz#1648949 fix docx missing date forms


author: John Mcwalters <john.mcwalters@oracle.com> - 1:6.0.6.1-13.0.1
changelog:
  - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile
  - Build with --with-vendor="Oracle America, Inc."


author: Caolán McNamara <caolanm@redhat.com> - 1:6.0.6.1-20
changelog:
  - Resolves: rhbz#1743958 CVE-2019-9849, etc.
  - Resolves: rhbz#1648281 Junk character gets added when some emojis are inserted


author: Caolán McNamara <caolanm@redhat.com> - 1:6.3.5.2-5
changelog:
  - rhbz#1796893 spreadsheetml2ooo.xsl was not well formed xml
  - rhbz#1796893 fix impress print dialog range


author: EL Errata <el-errata_ww@oracle.com> - 6.3.6.2-3.0.1
changelog:
  - Replace colors with Oracle colors [Orabug: 32120093]
  - Build with --with-vendor="Oracle America, Inc."
  - Added the --with-hamcrest option to configure.


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-6
changelog:
  - Resolves: rhbz#1980800 allow convert to csv to write each sheet to
    separate file
  - Resolves: rhbz#1992695 two style tags where there should be one


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-7
changelog:
  - Resolves: rhbz#2013858 CVE-2021-25633
  - Resolves: rhbz#2014215 CVE-2021-25634
  - Resolves: rhbz#2014209 CVE-2021-25635


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-9
changelog:
  - Related: rhbz#2029810 set NoDisplay=true for .desktop on s390x/aarch64
  - Related: rhbz#2029810 don't Require any vclplug for s390x/aarch64


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-12
changelog:
  - Resolves: rhbz#2134752 CVE-2022-26305 Untrusted Macros
  - Resolves: rhbz#2134751 CVE-2022-26307 Weak Master Keys
  - Resolves: rhbz#2134750 CVE-2022-26306 Static Initialization Vector
  - Resolves: rhbz#2134753 CVE-2022-3140 Macro URL arbitrary script execution


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-12
changelog:
  - Resolves: rhbz#2118928 CVE-2022-26305 Untrusted Macros
  - Resolves: rhbz#2118924 CVE-2022-26307 Weak Master Keys
  - Resolves: rhbz#2118920 CVE-2022-26306 Static Initialization Vector
  - Resolves: rhbz#2134702 CVE-2022-3140 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:6.4.7.2-15
changelog:
  - Resolves: rhbz#2210191 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210195 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208509 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18.12-7
changelog:
  - fix linking to use hardening flags (#1547522)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - remove comment with macro


author: Merlin Mathesius <mmathesi@redhat.com> - 1.15.1-3
changelog:
  - Bump release number in spec so package will build with commits made
    by Petr Písař <ppisar@redhat.com> on Thu Aug 31 2017:
    - Add build conditions for modularity
    - Specify all dependencies


author: Pavel Raiskup <praiskup@redhat.com> - 1.16.1-3
changelog:
  - update config.{guess,sub} to gnuconfig git HEAD
  - drop ppc64p7 hack in config.sub, it's not needed - per:
    https://lists.fedoraproject.org/archives/list/
    devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
  - don't BR python2-* packages; switching BRs to python3 would make no sense
    since the upstream testsuite is not yet python3 ready


author: Michal Sekletár <msekleta@redhat.com> - 0.7-19
changelog:
  - make sure we get compiled with -fstack-protector-strong (#1624099)
  - fix issues reported by coverity (#1602449)


author: Darren Archibald <darren.archibald@oracle.com> - 0.7-21.1
changelog:
  - Fix CVE-2021-3468 (#1939614)
  - Fix CVE-2023-38469 (#2191687)
  - Fix CVE-2023-38470 (#2191694)
  - Fix CVE-2023-38471 (#2191690)
  - Fix CVE-2023-38472 (#2191692)
  - Fix CVE-2023-38473 (#2191691)


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-5
changelog:
  - Remove dependency on an exotic testing package python-freezegun which we
    don't have capacity to ship in RHEL8
  - Run tests in pytest (as declared in BuildRequires) instead of unittest


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-7
changelog:
  - Include the /usr/bin/pybabel binary that runs on Python 3.6 in the
    python3-babel package
  Resolves: rhbz#1967173


author: Josef Ridky <jridky@redhat.com> - 9.0.4-2
changelog:
  - Add support for openssl (#1512577)
  - Change build requirement form mysql-devel to mariadb-connector-c-devel (#1545413)


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.10-3
changelog:
  - Add explicit javapackages-tools requirement for sub-packages using
    jpackage_script-based scripts. See RHBZ#1600426.


author: Mat Booth <mat.booth@redhat.com> - 1.11-1
changelog:
  - Update to latest upstream release
  - Drop ancient obsoletes
  - Drop eclipse-specific hacks that are no longer needed
  - Allow conditional building without scripting engines for smaller dep chain
  - Break out some low-level modules into separate sub-package for smaller install
    size


author: Jerome Marchand <jmarchan@redhat.com> - 0.8.0-1
changelog:
  - Rebase on bcc-8.0.0
  - Replace the temporary s390x workaround by a proper fix
  - Remove the doc of excluded tool from the package
  - Fix print_log2_hist
  - Fix yet a few other python3 bytes vs strings issues


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-1
changelog:
  - Rebase to bcc-0.10.0
  - Drop criticalstat
  - Fix regression on vfscount and runqslower
  - Rebuild on LLVM 9


author: Jerome Marchand <jmarchan@redhat.com> - 0.14.0-2
changelog:
  - Remove criticalstat manpage
  - Remove compactsnoop on non x86_64
  - Suggest to use --binary in deadlock
  - Remove non-existent argument from tcpconnect man page
  - Suggest to install the proper kernel-devel version
  - Fix dbstat and dbslower


author: Jerome Marchand <jmarchan@redhat.com> - 0.25.0-3
changelog:
  - Rebuild with llvm 16 (RHBZ#2192949)
  - Fix compactsnoop (RHBZ#2042238)
  - Fix bindsnoop (RHBZ#2155200)
  - Fix nfsslower (RHBZ#2155163)


author: Jerome Marchand <jmarchan@redhat.com> - 0.6.0-6
changelog:
  - llcstat: print a nicer error message on virtual machine
  - Add NSS support to sslsniff
  - Fixes miscellaneous error uncovered by covscan


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.12-2
changelog:
  - Add GeoLite2 support (#1564443)
  - Add GeoIP to bind-chroot (#1497646)
  - Fix wrong default GeoIP directory (#1768258)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.20-2
changelog:
  - Add manual page for dnssec-importkey-pkcs11 (#1666785)
  - Add versioned depends to all library subpackages


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.20-5
changelog:
  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)
  - Include available test


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.25-1
changelog:
  - Update to 9.11.25
  - Require libcap from devel package
  - Fix crash on NTA recheck failure (#1893761)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-2
changelog:
  - Add DNSTAP support (#1854148), new dnstap-read tool
  - Add JSON support in statistics-channel (#1899257)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-4
changelog:
  - Possible assertion failure on DNAME processing (CVE-2021-25215)
  - Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-4
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-5
changelog:
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-11.1
changelog:
  - Speed up parsing of DNS messages with many different names (CVE-2023-4408)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868)
  - Do not use header_prev in expire_lru_headers


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.1
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Correct ANY queries to not have additional data appended


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P1
changelog:
  - Fix chroot devices upgrade warning (#1592872)
  - Automatically replace obsoleted ISC DLV key with root key (#1595782)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2
changelog:
  - Add support for OpenSSL provided random data
  - Disable often failing unit test random_test
  - Add /dev/urandom to chroot


author: Thomas Woerner <twoerner@redhat.com> - 11.2-2
changelog:
  - Add support for serve-stale, detected on build time
    Patch by Petr Menšík <pemensik@redhat.com>
    Related: RHBZ#1762813


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.10
changelog:
  - Fix possible serve-stale related crash (CVE-2022-3080)
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.13
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.16.1
changelog:
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
   RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)
  - Import tests for large DNS messages fix
  - Add downstream change complementing CVE-2023-50387


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.20
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: David Faust <david.faust@oracle.com> - 2.30-93.0.1
changelog:
  - Forward-port Oracle patches from 2.30-90.0.1
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Nick Alcock <nick.alcock@oracle.com> - 2.30.93.0.2
changelog:
  - Backport the fully-functional CTF deduplicator.  The spurious conflicts
    in the previous version are gone; ambiguously-defined types and those
    depending on them are properly shuffled into per-CU dicts; the
    share-duplicated link mode used by ctfarchive where types only used in
    one CU end up in a per-CU dict is fully implemented.  This is the
    version that is upstream.
    The linker is much faster, uses much less memory, and generates much
    smaller CTF output (usually better than dwarf2ctf despite emitting
    function types where dwarf2ctf did not) and is much more robust and
    more heavily tested.
  - Remove the nondeduplicating CTF linker, and dead code supporting
    impossible things unnamed typedefs and basic types
  - Backport the new ld-ctf and libctf testsuites
  - New linker options --ctf-variables (off by default), --ctf-share-types
  - func info / data object support (needs compiler changes for
    working func info support, but all the code is there in binutils now);
    new API functions to add symbols to a dict, look them up, and iterate over
    them: ctf_symbol_next, ctf_add_objt_sym, ctf_add_func_sym,
    ctf_link_add_linker_symbol, ctf_arc_lookup_symbol, ctf_lookup_by_symbol_name,
    ctf_arc_lookup_symbol_name
  - Backport numerous bugfixes: fix handling of function types' arglists,
    allow ctf_type_reference of dynamic slices; prevent some causes of
    munmap()s of random chunks of memory; improved handling of corrupted
    dicts; improve dump output some more; fix some error handling bugs;
    fix opening CTF in binaries with a strtab but no symtab; use a more reliable
    method to ensure the output has exactly one .ctf section; use the dynamic
    sections for strings and symbols so that CTF is not corrupted by strip(1);
    improve the CTF dumper; support unnamed structure members better; fix a
    theoretical buffer overrun when looking up symbols by name; improve
    pointer lookup by name in dicts with parents; don't lose types or corrupt
    the dict when looking up or adding more types in writable dicts after
    serializing the dict
  - more armoring against invalid CTF and prevention of wrong results when
    asking for things like the size of opaque forwards or the encoding of enums
  - gettextization
  - New public API also used by the deduplicator: improved error reporting and
    assertion failures; improved _next iterators with most _iter iterators
    reimplemented using them, new API functions *_next, ctf_type_name_raw,
    ctf_type_kind_forwarded, ctf_ref, ctf_member_count, ctf_archive_count,
    ctf_arc_flush_caches, ctf_getsymsect, ctf_getstrsect, ctf_symsect_endianness,
    ctf_arc_symsect_endianness, ctf_add_unknown; add ctf_dict_t as a recommended
    new typename for the deprecated ctf_file_t, and new functions with _dict in
    the name; add the ability to filter out variables from the link
  - New internal infrastructure: new internal dynhash functions and a new dynset
    type; higher-efficiency dynhashes; removal of unnecessary duplication in
    type lookup paths; add optional lazy loading of CTF >at link time (not used
    by ld); make cu-mapping links (as used by ctfarchive) take much less memory
  - Run make check in libctf too.
  - Reviewed-by: David Faust <david.faust@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-108.0.1
changelog:
  - Forward-port Oracle patches from 2.30-93.0.3 to 2.30-108.0.1
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-108.0.2
changelog:
  - Forward-port the following update:
    * Thu Oct 07 2021 Nick Alcock  <nick.alcock@oracle.com> - 2.30-93.0.4
    - Backport fix for fencepost bug in CTF pptrtab usage causing coredumps
    - Backport test result fixes for new GCC-based CTF generation
      [Orabug: 33344570]
    - Reviewed-by: David Faust <david.faust@oracle.com>
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-108.0.2.1
changelog:
  - Forward-port Oracle patches from 2.30-108.0.2 to 2.30-108.0.2.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Diego de Dios <diego.m.martinez@oracle.com> - 2.30-113.0.1
changelog:
  - Forward-port Oracle patches from 2.30-108.0.2.1 to 2.30-113.0.1:
    + When searching for plugins, do not complain if incompatible ones are found.  (#2039117)
    + Make undefined unversioned dynamic symbols global rather than local.  (#2005176)
    + Add support for the arch14 extensions to the s390x architecture.  (#1984819)
    + Fix problems introduced by the plugin-as-needed patch.  (#2005412)
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-113.0.2
changelog:
  - Backport of upstream patch:
    [binutils-gdb][ld][AArch64] Fix group_sections algorithm
    cff69cf4cf97e1eb4c2cca8e985e403b1a97c059.
  - [Orabug: 34237729]
  - Reviewed-by: Indu Bhagat <indu.bhagat@oracle.com>


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-113.0.3
changelog:
  - Backport of upstream patches:
    - [binutils-gdb][AArch64] Re: Add support for AArch64 EFI (efi-*-aarch64)
      d91c67e8730354c43fae86fa98fe593925882365.
    - [binutils-gdb][AArch64] Re: AArch64: Add support for AArch64 EFI (efi-*-aarch64)
      32384aa396e7e87fe02cc838722b8e80ec88ec10.
    - [binutils-gdb][AArch64] AArch64: Add support for AArch64 EFI (efi-*-aarch64).
      b69c9d41e89498442cb5af5287f378b3583dd445.
  - [Orabug: 34453890]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
  - Reviewed-by: David Faust <david.faust@oracle.com>


author: Diego de Dios <diego.m.martinez@oracle.com> - 2.30-113.0.1
changelog:
  - Forward-port Oracle patches from 2.30-108.0.2.1 to 2.30-113.0.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-117.0.1
changelog:
  - Forward-port of Oracle patches from 2.30-113.0.3
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-117.0.2
changelog:
  - Add missed Oracle patches:
     - binutils-aarch64-veneers-fix.patch.
     - binutils-aarch64-add-support-efi.patch.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-117.0.3
changelog:
  - Backport of upstream patches:
    - [binutils-gdb] Add an option to objcopy to change the alignment of sections.
      fa463e9fc644e7a3bad39aa73bf6be72ea865805.
    - [binutils-gdb] Change objcopy's --set-section-alignment option to take a byte
      alignment value rather than a power of two alignment value.
      de4859eacb74a440d9fd61e4a0f051e3737a05dd
  - [Orabug: 34721268]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-119.0.1
changelog:
  - Forward-port Oracle patches from 2.30-117.0.3 to 2.30-119.0.1
  - Remove Oracle patch: binutils-bfd-plugin-lib64.patch
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Alcock <nick.alcock@oracle.com> - 2.30-119.0.2
changelog:
  - Refresh CTF patches from upstream.
    - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
    - Various obscure install-time linking problems
    - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
      a CTF member name, not a section name
    - Improve dumping of types when some types elicit a libctf error
    - Put functions as well as variables in the (misnamed) CTF variable section
    - Improve handling of various forms of corrupted CTF input.
    - Fix errors in comments in <ctf.h> and <ctf-api.h>
    - Make CTF dicts reproducible even when conflicting types are seen
    - Prevent corruption of output when linking multiple object files derived from
      the same source
    - Minor compiler warning and portability fixes
    - Fix (unlikely) crash-inducing uninitialized memory access and wild
      pointer overwrite when linking
    - Fix the reported offsets of fields within unnamed structs/unions
      [Orabug: 35191322]
    - Fix a number of places where operations carried out on child dicts
      that errored were producing errors on the parent, not the child,
      so the caller never noticed them


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-119.0.2.2
changelog:
  - Fix for CVE-2022-4285.
  - Fix illegal memory address when parsing an ELF file contaiing corrupt
    symbol version information.
    Upstream commit 5c831a3c7f3ca98d6aba1200353311e1a1f84c70.
  - Partial backport of _bfd_mul_overflow support from upstream commit
    1f4361a77b18c5ab32baf2f30fefe5e301e017be
  - Reviewed-by: David Faust <david.faust@oracle.com>


author: Yara Ahmad <yahmad@redhat.com> - 2.30-121
changelog:
  - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164700)


author: Nick Alcock <nick.alcock@oracle.com> - 2.30-123.0.2
changelog:
  - Refresh CTF patches from upstream (2.42).
    - Fix more cases where operations on child dicts could leave errors on
      the parent, this time associated with CTF dict creation (upstream PR
      libctf/30985).
    - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
      the last mapping provided for a given translation unit, rather than a
      random mix of first and last
  - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
    the code actually depends on.  (Fixes observed link problems with
    libctf-nobfd.so needing extra libraries on the link line versus upstream:
    libctf.so changes done purely for consistency.)
    Oracle history:
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-123.0.1
    - Forward-port Oracle patches to 2.30-123.
      Reviewed-by: David Faust <david.faust@oracle.com>
    August-02-2023 Nick Alcock <nick.alcock@oracle.com> - 2.30-119.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
     - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.30-119.0.1
    - Forward-port Oracle patches from 2.30-117.0.3 to 2.30-119.0.1
    - Remove Oracle patch: binutils-bfd-plugin-lib64.patch
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-20-2022 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.30-117.0.3
    - Backport of upstream patches:
      - [binutils-gdb] Add an option to objcopy to change the alignment of sections.
        fa463e9fc644e7a3bad39aa73bf6be72ea865805.
      - [binutils-gdb] Change objcopy's --set-section-alignment option to take a byte
        alignment value rather than a power of two alignment value.
        de4859eacb74a440d9fd61e4a0f051e3737a05dd
    - [Orabug: 34721268]
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-06-2022 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.30-117.0.2
    - Add missed Oracle patches:
       - binutils-aarch64-veneers-fix.patch.
       - binutils-aarch64-add-support-efi.patch.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.30-117.0.1
    - Forward-port of Oracle patches from 2.30-113.0.3
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-04-2022 Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-113.0.3
    - Backport of upstream patches:
      - [binutils-gdb][AArch64] Re: Add support for AArch64 EFI (efi-*-aarch64)
        d91c67e8730354c43fae86fa98fe593925882365.
      - [binutils-gdb][AArch64] Re: AArch64: Add support for AArch64 EFI (efi-*-aarch64)
        32384aa396e7e87fe02cc838722b8e80ec88ec10.
      - [binutils-gdb][AArch64] AArch64: Add support for AArch64 EFI (efi-*-aarch64).
        b69c9d41e89498442cb5af5287f378b3583dd445.
    - [Orabug: 34453890]
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Reviewed-by: David Faust <david.faust@oracle.com>
    July-14-2022 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-113.0.2
    - Backport of upstream patch:
      [binutils-gdb][ld][AArch64] Fix group_sections algorithm
      cff69cf4cf97e1eb4c2cca8e985e403b1a97c059.
    - [Orabug: 34237729]
    - Reviewed-by: Indu Bhagat <indu.bhagat@oracle.com>
    March-29-2022 Diego de Dios <diego.m.martinez@oracle.com> - 2.30-113.0.1
    - Forward-port Oracle patches from 2.30-108.0.2.1 to 2.30-113.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 David Faust  <david.faust@oracle.com> - 2.30-108.0.2.1
    - Forward-port Oracle patches from 2.30-108.0.2 to 2.30-108.0.2.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-02-2021 David Faust  <david.faust@oracle.com> - 2.30-108.0.2
    - Forward-port the following update:
      * Thu Oct 07 2021 Nick Alcock  <nick.alcock@oracle.com> - 2.30-93.0.4
      - Backport fix for fencepost bug in CTF pptrtab usage causing coredumps
      - Backport test result fixes for new GCC-based CTF generation
        [Orabug: 33344570]
      - Reviewed-by: David Faust <david.faust@oracle.com>
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-05-2021 David Faust  <david.faust@oracle.com> - 2.30-108.0.1
    - Forward-port Oracle patches from 2.30-93.0.3 to 2.30-108.0.1
    - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    August-17-2021 David Faust  <david.faust@oracle.com> - 2.30-93.0.3
    - Fix BFD library incorrectly attempting to load 32-bit plugins on OL8.
    - [Orabug: 33219039]
    June-16-2021 Nick Alcock  <nick.alcock@oracle.com> - 2.30.93.0.2
    - Backport the fully-functional CTF deduplicator.  The spurious conflicts
      in the previous version are gone; ambiguously-defined types and those
      depending on them are properly shuffled into per-CU dicts; the
      share-duplicated link mode used by ctfarchive where types only used in
      one CU end up in a per-CU dict is fully implemented.  This is the
      version that is upstream.
      The linker is much faster, uses much less memory, and generates much
      smaller CTF output (usually better than dwarf2ctf despite emitting
      function types where dwarf2ctf did not) and is much more robust and
      more heavily tested.
    - Remove the nondeduplicating CTF linker, and dead code supporting
      impossible things unnamed typedefs and basic types
    - Backport the new ld-ctf and libctf testsuites
    - New linker options --ctf-variables (off by default), --ctf-share-types
    - func info / data object support (needs compiler changes for
      working func info support, but all the code is there in binutils now);
      new API functions to add symbols to a dict, look them up, and iterate over
      them: ctf_symbol_next, ctf_add_objt_sym, ctf_add_func_sym,
      ctf_link_add_linker_symbol, ctf_arc_lookup_symbol, ctf_lookup_by_symbol_name,
      ctf_arc_lookup_symbol_name
    - Backport numerous bugfixes: fix handling of function types' arglists,
      allow ctf_type_reference of dynamic slices; prevent some causes of
      munmap()s of random chunks of memory; improved handling of corrupted
      dicts; improve dump output some more; fix some error handling bugs;
      fix opening CTF in binaries with a strtab but no symtab; use a more reliable
      method to ensure the output has exactly one .ctf section; use the dynamic
      sections for strings and symbols so that CTF is not corrupted by strip(1);
      improve the CTF dumper; support unnamed structure members better; fix a
      theoretical buffer overrun when looking up symbols by name; improve
      pointer lookup by name in dicts with parents; don't lose types or corrupt
      the dict when looking up or adding more types in writable dicts after
      serializing the dict
    - more armoring against invalid CTF and prevention of wrong results when
      asking for things like the size of opaque forwards or the encoding of enums
    - gettextization
    - New public API also used by the deduplicator: improved error reporting and
      assertion failures; improved _next iterators with most _iter iterators
      reimplemented using them, new API functions *_next, ctf_type_name_raw,
      ctf_type_kind_forwarded, ctf_ref, ctf_member_count, ctf_archive_count,
      ctf_arc_flush_caches, ctf_getsymsect, ctf_getstrsect, ctf_symsect_endianness,
      ctf_arc_symsect_endianness, ctf_add_unknown; add ctf_dict_t as a recommended
      new typename for the deprecated ctf_file_t, and new functions with _dict in
      the name; add the ability to filter out variables from the link
    - New internal infrastructure: new internal dynhash functions and a new dynset
      type; higher-efficiency dynhashes; removal of unnecessary duplication in
      type lookup paths; add optional lazy loading of CTF >at link time (not used
      by ld); make cu-mapping links (as used by ctfarchive) take much less memory
    - Run make check in libctf too.
    - Reviewed-by: David Faust <david.faust@oracle.com>
    May-18-2021 David Faust  <david.faust@oracle.com> - 2.30-93.0.1
    - Forward-port Oracle patches from 2.30-90.0.1
    - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    April-02-2021 David Faust  <david.faust@oracle.com> - 2.30-90.0.1
    - Forward-port Oracle patches from 2.30-79.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-03-2020 David Faust  <david.faust@oracle.com> - 2.30-79.0.1
    - Forward-port Oracle patches from 2.30-75.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    July-29-2020 David Faust  <david.faust@oracle.com> - 2.30-75.0.1
    - Forward-port Oracle patches to OL8.3 beta.
    April-28-2020 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-73.0.1
    - Forward-port of Oracle patches from 2.30-68.0.2.
    - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    March-17-2020 Nick Alcock <nick.alcock@oracle.com> - 2.30-68.0.2
    - Backport the non-cycle-detecting-capable deduplicating CTF linker
    - Backport a fix for an upstream hashtab crash (no upstream bug number),
      triggered by the above.
    - Fix deduplication of ambiguously-named types in CTF.
    - CTF types without names are not ambiguously-named.
    - Stop the CTF_LINK_EMPTY_CU_MAPPINGS flag crashing.
    - Only emit ambiguous types as hidden if they are named and there is already
      a type with that name.
    - Make sure completely empty dicts get their header written out properly
    - Do not fail if adding anonymous struct/union members to structs/unions that
      already contain other anonymous members at a different offset
    - Correctly look up pointers to non-root-visible structures
    - Emit error messages in dumping into the dump stream
    - Do not abort early on dump-time errors
    - Elide likely duplicates (same name, same kind) within a single TU (cross-
      TU duplicate/ambiguous-type detection works as before).
    - Fix linking of the CTF variable section
    - Fix spurious conflicts of variables (also affects the nondeduplicating linker)
    - Defend against CUs without names
    - When linking only a single input file, set the output CTF CU name to the
      name of the input
    - Support cv-qualified bitfields
    - Fix off-by-one error in SHA-1 sizing
    January-24-2020 Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.30-68.0.1
    - Ensure 8-byte alignment for AArch64 stubs.
    - Add CTF support to OL8: CTF machinery, including libctf.so and
      libctf-nonbfd.so.  The linker does not yet deduplicate the CTF type section.
    - Backport of fix for upstream bug 23919, required by above
    - [Orabug: 30102938] [Orabug: 30102941]


author: Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.30-125.0.1
changelog:
  - Forward port Oracle patches from 2.30-125
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.30-123.0.2
    - Refresh CTF patches from upstream (2.42).
    - Fix more cases where operations on child dicts could leave errors on
      the parent, this time associated with CTF dict creation (upstream PR
      libctf/30985).
    - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
      the last mapping provided for a given translation unit, rather than a
      random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-123.0.1
    - Forward-port Oracle patches to 2.30-123.
      Reviewed-by: David Faust <david.faust@oracle.com>
    August-02-2023 Nick Alcock <nick.alcock@oracle.com> - 2.30-119.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
     - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.30-119.0.1
    - Forward-port Oracle patches from 2.30-117.0.3 to 2.30-119.0.1
    - Remove Oracle patch: binutils-bfd-plugin-lib64.patch
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-20-2022 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.30-117.0.3
    - Backport of upstream patches:
      - [binutils-gdb] Add an option to objcopy to change the alignment of sections.
        fa463e9fc644e7a3bad39aa73bf6be72ea865805.
      - [binutils-gdb] Change objcopy's --set-section-alignment option to take a byte
        alignment value rather than a power of two alignment value.
        de4859eacb74a440d9fd61e4a0f051e3737a05dd
    - [Orabug: 34721268]
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-06-2022 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.30-117.0.2
    - Add missed Oracle patches:
       - binutils-aarch64-veneers-fix.patch.
       - binutils-aarch64-add-support-efi.patch.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.30-117.0.1
    - Forward-port of Oracle patches from 2.30-113.0.3
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-04-2022 Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-113.0.3
    - Backport of upstream patches:
      - [binutils-gdb][AArch64] Re: Add support for AArch64 EFI (efi-*-aarch64)
        d91c67e8730354c43fae86fa98fe593925882365.
      - [binutils-gdb][AArch64] Re: AArch64: Add support for AArch64 EFI (efi-*-aarch64)
        32384aa396e7e87fe02cc838722b8e80ec88ec10.
      - [binutils-gdb][AArch64] AArch64: Add support for AArch64 EFI (efi-*-aarch64).
        b69c9d41e89498442cb5af5287f378b3583dd445.
    - [Orabug: 34453890]
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Reviewed-by: David Faust <david.faust@oracle.com>
    July-14-2022 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-113.0.2
    - Backport of upstream patch:
      [binutils-gdb][ld][AArch64] Fix group_sections algorithm
      cff69cf4cf97e1eb4c2cca8e985e403b1a97c059.
    - [Orabug: 34237729]
    - Reviewed-by: Indu Bhagat <indu.bhagat@oracle.com>
    March-29-2022 Diego de Dios <diego.m.martinez@oracle.com> - 2.30-113.0.1
    - Forward-port Oracle patches from 2.30-108.0.2.1 to 2.30-113.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 David Faust  <david.faust@oracle.com> - 2.30-108.0.2.1
    - Forward-port Oracle patches from 2.30-108.0.2 to 2.30-108.0.2.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-02-2021 David Faust  <david.faust@oracle.com> - 2.30-108.0.2
    - Forward-port the following update:
      * Thu Oct 07 2021 Nick Alcock  <nick.alcock@oracle.com> - 2.30-93.0.4
      - Backport fix for fencepost bug in CTF pptrtab usage causing coredumps
      - Backport test result fixes for new GCC-based CTF generation
        [Orabug: 33344570]
      - Reviewed-by: David Faust <david.faust@oracle.com>
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-05-2021 David Faust  <david.faust@oracle.com> - 2.30-108.0.1
    - Forward-port Oracle patches from 2.30-93.0.3 to 2.30-108.0.1
    - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    August-17-2021 David Faust  <david.faust@oracle.com> - 2.30-93.0.3
    - Fix BFD library incorrectly attempting to load 32-bit plugins on OL8.
    - [Orabug: 33219039]
    June-16-2021 Nick Alcock  <nick.alcock@oracle.com> - 2.30.93.0.2
    - Backport the fully-functional CTF deduplicator.  The spurious conflicts
      in the previous version are gone; ambiguously-defined types and those
      depending on them are properly shuffled into per-CU dicts; the
      share-duplicated link mode used by ctfarchive where types only used in
      one CU end up in a per-CU dict is fully implemented.  This is the
      version that is upstream.
      The linker is much faster, uses much less memory, and generates much
      smaller CTF output (usually better than dwarf2ctf despite emitting
      function types where dwarf2ctf did not) and is much more robust and
      more heavily tested.
    - Remove the nondeduplicating CTF linker, and dead code supporting
      impossible things unnamed typedefs and basic types
    - Backport the new ld-ctf and libctf testsuites
    - New linker options --ctf-variables (off by default), --ctf-share-types
    - func info / data object support (needs compiler changes for
      working func info support, but all the code is there in binutils now);
      new API functions to add symbols to a dict, look them up, and iterate over
      them: ctf_symbol_next, ctf_add_objt_sym, ctf_add_func_sym,
      ctf_link_add_linker_symbol, ctf_arc_lookup_symbol, ctf_lookup_by_symbol_name,
      ctf_arc_lookup_symbol_name
    - Backport numerous bugfixes: fix handling of function types' arglists,
      allow ctf_type_reference of dynamic slices; prevent some causes of
      munmap()s of random chunks of memory; improved handling of corrupted
      dicts; improve dump output some more; fix some error handling bugs;
      fix opening CTF in binaries with a strtab but no symtab; use a more reliable
      method to ensure the output has exactly one .ctf section; use the dynamic
      sections for strings and symbols so that CTF is not corrupted by strip(1);
      improve the CTF dumper; support unnamed structure members better; fix a
      theoretical buffer overrun when looking up symbols by name; improve
      pointer lookup by name in dicts with parents; don't lose types or corrupt
      the dict when looking up or adding more types in writable dicts after
      serializing the dict
    - more armoring against invalid CTF and prevention of wrong results when
      asking for things like the size of opaque forwards or the encoding of enums
    - gettextization
    - New public API also used by the deduplicator: improved error reporting and
      assertion failures; improved _next iterators with most _iter iterators
      reimplemented using them, new API functions *_next, ctf_type_name_raw,
      ctf_type_kind_forwarded, ctf_ref, ctf_member_count, ctf_archive_count,
      ctf_arc_flush_caches, ctf_getsymsect, ctf_getstrsect, ctf_symsect_endianness,
      ctf_arc_symsect_endianness, ctf_add_unknown; add ctf_dict_t as a recommended
      new typename for the deprecated ctf_file_t, and new functions with _dict in
      the name; add the ability to filter out variables from the link
    - New internal infrastructure: new internal dynhash functions and a new dynset
      type; higher-efficiency dynhashes; removal of unnecessary duplication in
      type lookup paths; add optional lazy loading of CTF >at link time (not used
      by ld); make cu-mapping links (as used by ctfarchive) take much less memory
    - Run make check in libctf too.
    - Reviewed-by: David Faust <david.faust@oracle.com>
    May-18-2021 David Faust  <david.faust@oracle.com> - 2.30-93.0.1
    - Forward-port Oracle patches from 2.30-90.0.1
    - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    April-02-2021 David Faust  <david.faust@oracle.com> - 2.30-90.0.1
    - Forward-port Oracle patches from 2.30-79.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-03-2020 David Faust  <david.faust@oracle.com> - 2.30-79.0.1
    - Forward-port Oracle patches from 2.30-75.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    July-29-2020 David Faust  <david.faust@oracle.com> - 2.30-75.0.1
    - Forward-port Oracle patches to OL8.3 beta.
    April-28-2020 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-73.0.1
    - Forward-port of Oracle patches from 2.30-68.0.2.
    - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    March-17-2020 Nick Alcock <nick.alcock@oracle.com> - 2.30-68.0.2
    - Backport the non-cycle-detecting-capable deduplicating CTF linker
    - Backport a fix for an upstream hashtab crash (no upstream bug number),
      triggered by the above.
    - Fix deduplication of ambiguously-named types in CTF.
    - CTF types without names are not ambiguously-named.
    - Stop the CTF_LINK_EMPTY_CU_MAPPINGS flag crashing.
    - Only emit ambiguous types as hidden if they are named and there is already
      a type with that name.
    - Make sure completely empty dicts get their header written out properly
    - Do not fail if adding anonymous struct/union members to structs/unions that
      already contain other anonymous members at a different offset
    - Correctly look up pointers to non-root-visible structures
    - Emit error messages in dumping into the dump stream
    - Do not abort early on dump-time errors
    - Elide likely duplicates (same name, same kind) within a single TU (cross-
      TU duplicate/ambiguous-type detection works as before).
    - Fix linking of the CTF variable section
    - Fix spurious conflicts of variables (also affects the nondeduplicating linker)
    - Defend against CUs without names
    - When linking only a single input file, set the output CTF CU name to the
      name of the input
    - Support cv-qualified bitfields
    - Fix off-by-one error in SHA-1 sizing
    January-24-2020 Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.30-68.0.1
    - Ensure 8-byte alignment for AArch64 stubs.
    - Add CTF support to OL8: CTF machinery, including libctf.so and
      libctf-nonbfd.so.  The linker does not yet deduplicate the CTF type section.
    - Backport of fix for upstream bug 23919, required by above
    - [Orabug: 30102938] [Orabug: 30102941]


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.30-49.0.1
changelog:
  - Backports following patch with binutils-aarch64-stub-alignment.patch:
    9a2ebffd4dd9 - Ensure 8-byte alignment for AArch64 stubs.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.30-49.0.2
changelog:
  - Backports with binutils-aarch64-gold-check-MOVW_xABS-relocations-for-plt.patch:
    7ae39e2d406d - Check if symbols with MOVW_.ABS relocations require PLT entries.
    [Orabug: 29428432]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Clifton <nickc@redhat.com> 2.30-58
changelog:
  - Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749084)


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.30-58.0.1
changelog:
  - Backports the following patch with binutils-aarch64-stub-alignment.patch:
    9a2ebffd4dd9 - Ensure 8-byte alignment for AArch64 stubs.


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.30-58.0.8.el8_1.1
changelog:
  - Backport the following patch with binutils-aarch64-stub-alignment.patch:
    9a2ebffd4dd9 - Ensure 8-byte alignment for AArch64 stubs.
  - Add CTF machinery, including libctf.so and libctf-nonbfd.so.
    [Orabug: 30102938] [Orabug: 30102941]
  - Backport the fix for upstream bug 23919, required by above.
  - Provide PIC libctf*.a files and linker scripts to avoid linking
    with the shared objects from binutils.  This is to avoid adding a hard
    architecture dependency between binutils-devel and binutils packages.


author: Nick Alcock <nick.alcock@oracle.com> - 2.30-58.0.9.el8_1.1
changelog:
  - Backport the non-cycle-detecting-capable deduplicating CTF linker
    [Orabug: 31001711] [Orabug: 31001722]
  - Backport a fix for an upstream hashtab crash (no upstream bug number),
    triggered by the above.


author: Nick Alcock <nick.alcock@oracle.com> - 2.30-58.0.10.el8_1.1
changelog:
  - Fix deduplication of ambiguously-named types in CTF.
  - CTF types without names are not ambiguously-named.
  - Stop the CTF_LINK_EMPTY_CU_MAPPINGS flag crashing.
  - Only emit ambiguous types as hidden if they are named and there is already
    a type with that name.
  - Make sure completely empty dicts get their header written out properly
  - Do not fail if adding anonymous struct/union members to structs/unions that
    already contain other anonymous members at a different offset
  - Correctly look up pointers to non-root-visible structures
  - Emit error messages in dumping into the dump stream
  - Do not abort early on dump-time errors
  - Elide likely duplicates (same name, same kind) within a single TU (cross-
    TU duplicate/ambiguous-type detection works as before).
  - Fix linking of the CTF variable section
  - Fix spurious conflicts of variables (also affects the nondeduplicating linker)
  - Defend against CUs without names
  - When linking only a single input file, set the output CTF CU name to the
    name of the input
    [Orabug: 31001711] [Orabug: 31001722]


author: Nick Alcock <nick.alcock@oracle.com> - 2.30-58.0.11.el8_1.1
changelog:
  - Support cv-qualified bitfields
  - Fix off-by-one error in SHA-1 sizing
    [Orabug: 31033044] [Orabug: 31033047]


author: Nick Clifton <nickc@redhat.com> - 2.30-58.2
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1803825)


author: EL Errata <el-errata_ww@oracle.com> - 2.30-58.0.11.el8_1.2
changelog:
  - Support cv-qualified bitfields
  - Fix off-by-one error in SHA-1 sizing
    [Orabug: 31033044] [Orabug: 31033047]
  - Fix deduplication of ambiguously-named types in CTF.
  - CTF types without names are not ambiguously-named.
  - Stop the CTF_LINK_EMPTY_CU_MAPPINGS flag crashing.
  - Only emit ambiguous types as hidden if they are named and there is already
    a type with that name.
  - Make sure completely empty dicts get their header written out properly
  - Do not fail if adding anonymous struct/union members to structs/unions that
    already contain other anonymous members at a different offset
  - Correctly look up pointers to non-root-visible structures
  - Emit error messages in dumping into the dump stream
  - Do not abort early on dump-time errors
  - Elide likely duplicates (same name, same kind) within a single TU (cross-
    TU duplicate/ambiguous-type detection works as before).
  - Fix linking of the CTF variable section
  - Fix spurious conflicts of variables (also affects the nondeduplicating linker)
  - Defend against CUs without names
  - When linking only a single input file, set the output CTF CU name to the
    name of the input
    [Orabug: 31001711] [Orabug: 31001722]
  - Backport the non-cycle-detecting-capable deduplicating CTF linker
    [Orabug: 31001711] [Orabug: 31001722]
  - Backport a fix for an upstream hashtab crash (no upstream bug number),
    triggered by the above.
  - Backport the following patch with binutils-aarch64-stub-alignment.patch:
    9a2ebffd4dd9 - Ensure 8-byte alignment for AArch64 stubs.
  - Add CTF machinery, including libctf.so and libctf-nonbfd.so.
    [Orabug: 30102938] [Orabug: 30102941]
  - Backport the fix for upstream bug 23919, required by above.
  - Provide PIC libctf*.a files and linker scripts to avoid linking
    with the shared objects from binutils.  This is to avoid adding a hard
    architecture dependency between binutils-devel and binutils packages.


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.30-58.0.2
changelog:
  - CVE-2018-12207 / Intel SKX102
  - Introduce the following gas options:
    -malign-branch
    -malign-branch-boundary
    -malign-branch-prefix-size
    -mbranches-within-32B-boundaries
  - Lessen the performance hit due to the Mitigation of Intel's JCC Erratum by
    backporting the patch series that teach gas not to place various jump
    instructions at the end of 32 byte boundries or across such boundaries.
  - Prepatory patches:
    binutils-2.31-i386-gas-01-add-.nop-assembler-directive.patch
    binutils-2.31-i386-gas-02-rewrite-NOP-generation.patch
    binutils-2.31-i386-gas-03-insns-exceeding-the-15-byte.patch
    binutils-2.31-i386-gas-04-pass-max_bytes-to-TC_FRAG_INIT.patch
  - Mitigation Patches:
    binutils-2.33-i386-gas-01-add-md_cons_worker.patch
    binutils-2.33-i386-gas-02-add-md_generic_table_relax_frag.patch
    binutils-2.33-i386-gas-03-align-branches-within-a-fixed-boundary.patch
    binutils-2.33-i386-gas-04-add-mbranches-within-32B-boundaries.patch
    binutils-2.33-i386-gas-05-add-tests-for-malign-branch-boundary-and-malign.patch
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.30-58.0.4
changelog:
  - Add to OL8 Binutils the following CTF backport by Nick Alcock:
  - CTF machinery, including libctf.so and libctf-nonbfd.so.  The linker does
    not yet deduplicate the CTF type section.
  - Backport of fix for upstream bug 23919, required by above
    [Orabug: 30102938] [Orabug: 30102941]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.30-58.0.5
changelog:
  - Replace the following patches ...
    binutils-2.33-i386-gas-01-add-md_cons_worker.patch
    binutils-2.33-i386-gas-02-add-md_generic_table_relax_frag.patch
    binutils-2.33-i386-gas-03-align-branches-within-a-fixed-boundary.patch
    binutils-2.33-i386-gas-04-add-mbranches-within-32B-boundaries.patch
    binutils-2.33-i386-gas-05-add-tests-for-malign-branch-boundary-and-malign.patch
  - ... with the following upstream versions:
    binutils-2.33-i386-gas-01-add-md_generic_table_relax_frag.patch
    binutils-2.33-i386-gas-02-align-branches-within-a-fixed-boundary.patch
    binutils-2.33-i386-gas-03-add-mbranches-within-32B-boundaries.patch
    binutils-2.33-i386-gas-04-add-tests-for-malign-branch-boundary-and-malign.patch
  - Reviewed-by: Nick Alcock <nick.alcock@oracle.com>


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.30-58.0.6
changelog:
  - Add support for CTF archives and automatic parent determination (like objdump)
    to readelf --ctf
  - PR 25120
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-58.0.7
changelog:
  - Provide PIC libctf*.a files and linker scripts to avoid linking
    with the shared objects from binutils.  This is to avoid adding a hard
    architecture dependency between binutils-devel and binutils packages.
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>


author: Nick Clifton <nickc@redhat.com> - 2.30-71
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779245)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.30-68.0.1
changelog:
  - Ensure 8-byte alignment for AArch64 stubs.
  - Add CTF support to OL8: CTF machinery, including libctf.so and
    libctf-nonbfd.so.  The linker does not yet deduplicate the CTF type section.
  - Backport of fix for upstream bug 23919, required by above
  - [Orabug: 30102938] [Orabug: 30102941]


author: Nick Clifton <nickc@redhat.com> - 2.30-72
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1801879)


author: Nick Alcock <nick.alcock@oracle.com> - 2.30-68.0.2
changelog:
  - Backport the non-cycle-detecting-capable deduplicating CTF linker
  - Backport a fix for an upstream hashtab crash (no upstream bug number),
    triggered by the above.
  - Fix deduplication of ambiguously-named types in CTF.
  - CTF types without names are not ambiguously-named.
  - Stop the CTF_LINK_EMPTY_CU_MAPPINGS flag crashing.
  - Only emit ambiguous types as hidden if they are named and there is already
    a type with that name.
  - Make sure completely empty dicts get their header written out properly
  - Do not fail if adding anonymous struct/union members to structs/unions that
    already contain other anonymous members at a different offset
  - Correctly look up pointers to non-root-visible structures
  - Emit error messages in dumping into the dump stream
  - Do not abort early on dump-time errors
  - Elide likely duplicates (same name, same kind) within a single TU (cross-
    TU duplicate/ambiguous-type detection works as before).
  - Fix linking of the CTF variable section
  - Fix spurious conflicts of variables (also affects the nondeduplicating linker)
  - Defend against CUs without names
  - When linking only a single input file, set the output CTF CU name to the
    name of the input
  - Support cv-qualified bitfields
  - Fix off-by-one error in SHA-1 sizing


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-73.0.1
changelog:
  - Forward-port of Oracle patches from 2.30-68.0.2.
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Nick Clifton <nickc@redhat.com> - 2.30-74
changelog:
  - Stop the BFD library from issueing warning messages about allocated sections being found outside of loadable segments.  (#1630115)
  - Fix linker testsuite failures for the aarch64 and s390x targets.  (#1632775, #1809101)
  - Fix building the binutils with address sanitization enabled.  (#1678323)
  - Add support for the PT_GNU_PROPERTY segment.  (#1721606)
  - Fix an internal error in the GOLD linker.  (#1722715)
  - Fix the generation of corrupt .note.gnu.property notes.  (#1723533)
  - Stop objcopy's --set-section-flags option from setting the 'shared' flag on non-COFF binaries.  (#1807308)
  - Fix a bug in the secondary reloc processing code.  (#1809186)


author: David Faust <david.faust@oracle.com> - 2.30-79.0.1
changelog:
  - Forward-port Oracle patches from 2.30-75.0.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-90.0.1
changelog:
  - Forward-port Oracle patches from 2.30-79.0.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-3
changelog:
  - Check device dependencies only for device actions
    Related: rhbz#1605213
  - Allow removing btrfs volumes without btrfs support
    Resolves: rhbz#1605213


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-5
changelog:
  - arm: add support for EFI on ARMv7 (probinson)
    Related: rhbz#1623882
  - Aarch64 platforms: Fix gpt defaults for 64 bit arm platforms (probinson)
    Resolves: rhbz#1623882
  - arch: arm: drop get_arm_machine function (probinson)
    Related: rhbz#1623882
  - arch: arm: drop omap specifics for partitioning (probinson)
    Related: rhbz#1623882


author: David Lehman <dlehman@redhat.com> - 3.1.0-9
changelog:
  - Update to latest translations.
    Resolves: rhbz#1608337
  - Require libfc instead of fcoe for offloaded FCoE.
    Resolves: rhbz#1575953
  - Use udev to determine if disk is a multipath member.
    Related: rhbz#1575953
  - Don't crash if blockdev mpath plugin isn't available.
    Resolves: rhbz#1672971


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-11
changelog:
  - Various test fixes for RHEL 8
    Related: rhbz#1682561
  - Add upstream test suite to the SRPM
    Related: rhbz#1682561


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-12
changelog:
  - Deactivate incomplete VGs along with everything else
    Resolves: rhbz#1635125
  - Automatically adjust size of growable devices for new format
    Resolves: rhbz#1680013
  - Add flag for protecting cdrom devices during populate
    Resolves: rhbz#1719648
  - Clean up some errors evident in installer logs
    Resolves: rhbz#1579375
  - Use dasd disklabel for vm disks backed by dasds
    Resolves: rhbz#1676935


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-19
changelog:
  - Override LVM skip-activation to allow for thorough removal
    Resolves: rhbz#1766498
  - Make sure LVs are writable before wiping
    Related: rhbz#1766498
  - Fix udev test names so they actually get run.
    Related: rhbz#1758102
  - Add recognition of Dell FW RAID to udev.device_is_disk.
    Resolves: rhbz#1758102
  - Align base sizes up if smaller than min I/O size.
    Resolves: rhbz#1781106
  - Make minimal and optimal alignment getters public.
    Related: rhbz#1781106


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-21
changelog:
  - Add setters for requested_size/percent form LVMVolumeGroupDevice
    Related: rhbz#1841131
  - Allow for reserved vg space and a growable thin pool.
    Resolves: rhbz#1841131


author: David Lehman <dlehman@redhat.com> - 3.1.0-1
changelog:
  - Allow configuring default LUKS2 PBKDF arguments using luks_data (vtrefny)
    Related: rhbz#1561352
  - Fix the populate_kickstart method in LUKS (vtrefny)
    Related: rhbz#1561352
  - Allow specifying extra arguments for PBKDF when creating LUKS2 (vtrefny)
    Related: rhbz#1561352
  - Add support for LUKS2 to DeviceFactory (vtrefny)
    Resolves: rhbz#1561352
  - DeviceFactory: use min_luks_entropy from kwargs (vtrefny)
    Related: rhbz#1561352
  - Fix passing 'min_luks_entropy' when creating LUKS format (vtrefny)
    Related: rhbz#1561352
  - Use passphrase/key file when resizing LUKS2 format (vtrefny)
    Related: rhbz#1561352
  - Require libblockdev 2.17 (vtrefny)
    Related: rhbz#1561352
  - Add support for LUKS2 format (vtrefny)
    Related: rhbz#1561352
  - Add initial support for DM Integrity "format" (vtrefny)
    Related: rhbz#1561352
  - Do not try to add LUKSDevice in LUKSFormatPopulator (vtrefny)
    Related: rhbz#1561352
  - Add support for dm-integrity devices (vtrefny)
    Related: rhbz#1561352
  - Fixed various issues preventing successful build (japokorn)
    Related: rhbz#1561352


author: Vojtech Trefny <vtrefny@redhat.com> - 3.2.2-4
changelog:
  - Blivet RHEL 8.3 localization update
    Resolves: rhbz#182056
  - Do not use FSAVAIL and FSUSE% options when running lsblk
    Resolves: rhbz#1853624


author: Vojtech Trefny <vtrefny@redhat.com> - 3.2.2-5
changelog:
  - set allowed disk labels for s390x as standard ones (msdos + gpt) plus dasd
    Resolves: rhbz#1855200
  - Do not use BlockDev.utils_have_kernel_module to check for modules
    Resolves: rhbz#1855344


author: Vojtech Trefny <vtrefny@redhat.com> - 3.2.2-6
changelog:
  - Fix name resolution for MD devices and partitions on them
    Resolves: rhbz#1862904
  - Fix ignoring disk devices with parents or children
    Resolves: rhbz#1866243


author: Vojtech Trefny <vtrefny@redhat.com> - 3.2.2-7
changelog:
  - Add support for XFS format grow
    Resolves: rhbz#1862349
  - Do not limit swap to 128 GiB
    Resolves: rhbz#1656485
  - Use UnusableConfigurationError for partially hidden multipath devices
    Resolves: rhbz#1877052
  - Fix possible UnicodeDecodeError when reading model from sysfs
    Resolves: rhbz#1849326
  - Add basic support for LVM VDO devices
    Resolves: rhbz#1828745


author: Vojtech Trefny <vtrefny@redhat.com> - 3.2.2-8
changelog:
  - Let parted fix fixable issues with partition table
    Resolves: rhbz#1846869
  - Fix possible UnicodeDecodeError when reading sysfs attributes
    Resolves: rhbz#1849326


author: EL Errata <el-errata_ww@oracle.com> - 3.2.2-10.0.1
changelog:
  - Load libblockdev btrfs plugin under UEK to support btrfs in installer
    [Orabug: 30792917]
  - Add bug29870386-fix-redhat-reference.patch [Orabug: 29870386]
  - Add bug32114602-fix-new-upstream-references.patch [Orabug: 32114602]


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-6
changelog:
  - Improve error message printed for missing dependecies
    Resolves: rhbz#1988276
  - Use bigger chunk size for thinpools bigger than ~15.88 TiB
    Resolves: rhbz#1949953


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-10
changelog:
  - Fix getting PV info in LVMPhysicalVolume from the cache
    Resolves: rhbz#2079220
  - Do not crash when changing disklabel on disks with active devices
    Resolves: rhbz#2078801
  - ActionDestroyDevice should not obsolete ActionRemoveMember
    Resolves: rhbz#2076958
  - Correctly set vg_name after adding/removing a PV from a VG
    Resolves: rhbz#2081276
  - Use LVM PV format current_size in LVMVolumeGroupDevice._remove
    Related: rhbz#2081276
  - Add support for creating LVM cache pools
    Resolves: rhbz#2055198


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-3
changelog:
  - Catch BlockDevNotImplementedError for btrfs plugin calls
    Resolves: rhbz#2139169
  - Revert "Adjust to new XFS min size"
    Resolves: rhbz#2139187


author: EL Errata <el-errata_ww@oracle.com> - 3.6.0-4.0.1
changelog:
  - Update bug reporting URL and fix missed upstream references
    [Orabug: 34721767] [Orabug: 32114602] [Orabug: 29870386]
  - Load libblockdev btrfs plugin under UEK to support btrfs in installer
    [Orabug: 30792917]


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-6
changelog:
  - Fix setting kickstart data
    Resolves: rhbz#2175166
  - Do not set memory limit for LUKS2 when running in FIPS mode
    Resolves: rhbz#2183437
  - Add support for filesystem online resize
    Resolves: rhbz#2168680


author: Jan Pokorny <japokorn@redhat.com> - 3.6.0-7
changelog:
  Backport iSCSI initiator name related fixes:
  - Allow changing iSCSI initiator name after setting it
    Resolves: rhbz#2083139
  - Add a basic test case for the iscsi module
    Related: rhbz#2083139
  - tests: Use blivet-specific prefix for targetcli backing files
    Related: rhbz#2083139
  - iscsi: Save firmware initiator name to /etc/iscsi/initiatorname.iscsi
    Resolves: rhbz#2084043
  - tests: Improve iscsi_test.ISCSITestCase
    Related: rhbz#2083139


author: Tomas Orsava <torsava@redhat.com> - 1.2.0-9
changelog:
  - Switch hardcoded python3 shebangs into the %{__python3} macro
  - Add missing BuildRequires on python3-devel so that %{__python3} macro is
    defined


author: Gopal Tiwari <gtiwari@redhat.com> - 5.56-1
changelog:
  + bluez-5.56-1
  - Fixing (#1965057)
  - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56


author: David Marlin <dmarlin@redhat.com> - 5.63-2
changelog:
  + bluez-5.63-2
  - Change default of ClassicBondedOnly to true to align with HID specification.
  - Resolves: RHEL-18429
  - Fixing CVE-2021-41229


author: David Marlin <dmarlin@redhat.com> - 5.63-4
changelog:
  + bluez-5.63-4
  - Resolves: RHEL-35501
  - Fixing CVE-2023-50230
  - Resolves: RHEL-35504
  - Fixing CVE-2023-50229


author: David Marlin <dmarlin@redhat.com> - 5.63-5
changelog:
  + bluez-5.63-5
  - Resolves: RHEL-35371
  - Fixing CVE-2023-27349
  - Resolves: RHEL-35492
  - Fixing CVE-2023-51589


author: Adrian Reber <adrian@lisas.de> - 1.2.4-7
changelog:
  - Added multiple upstream patches to fix various memory bugs
  - Fixes "[abrt] bogofilter: yyrealloc(): bogofilter killed by SIGABRT" (#1246282)
  - Fixes "why libdb4" (#1367329) by switching BR to libdb-devel (from db4-devel)


author: Jerome Marchand <jmarchan@redhat.com> - 0.9-2
changelog:
  - Fixes gethostlatency
  - Fixes a struct definition issue that made several tools fail
  - Add CI gating


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-3
changelog:
  - Fix ENOMEM issue on arm64 machine with many cpus
  - Fix statsnoop and opensnoop on aarch64
  - Drop tcpdrop on ppc64


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0
  - Rebuild for LLVM15
  - Download the cereal library (not packaged into RHEL8)


author: Parag Nemade <pnemade AT redhat DOT com> - 20120413-5
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove %defattr
  - Remove group tag
  - cp command should preserv timestamp
  - replace %define with %global


author: Kalev Lember <klember@redhat.com> - 3.12.2-1
changelog:
  - Update to 3.12.2
  - Use desktop-file-validate instead of desktop-file-install
  - Update download URLs


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.6-20
changelog:
  - Fixed installation of multiple drivers and text tables in Dracut module
    if environment variables are used


author: Artem Egorenkov <aegorenk@redhat.com> - 5.6-30
changelog:
  - brltty requires brlapi deleted (duplication of automatically determined dependency)
  - isa macro deleted for brlapi requires brltty
  - brlapi recommends brltty
    Resolves: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - bug reference 1772179
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-7
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819393


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/6a746dc)
  - fixes CVE-2021-3602
  - Related: #1977942


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/9a4764a)
  - fixes CVE-2022-27649
  - Resolves: #2067545


author: EL Errata <el-errata_ww@oracle.com> - 1.11.6-10.0.1
changelog:
  - Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov)
  - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483]


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - bug reference 1772179
  - Related: RHELPLAN-25138


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-5
changelog:
  - fix "Podman support for FIPS Mode requires a bind mount inside the container"
  - Resolves: #1804188


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-8
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1817742


author: David Sloboda <david.x.sloboda@oracle.com> - 1.11.6-8.0.1
changelog:
  - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483]
  - Fixes troubles with oracle registry login [Orabug: 29937283]


author: Jindrich Novy <jnovy@redhat.com> - 1.14.7-1
changelog:
  - initial rhel8-8.2.1 build
  - update to https://github.com/containers/buildah/releases/tag/v1.14.7
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-8
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819810


author: Jindrich Novy <jnovy@redhat.com> - 1.15.0-2
changelog:
  - fix "CVE-2020-14040 buildah: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]"
  - Resolves: #1854717


author: Jindrich Novy <jnovy@redhat.com> - 1.15.1-2
changelog:
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.16.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.16
    (https://github.com/containers/buildah/commit/9e02bf9)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.16.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.16
    (https://github.com/containers/buildah/commit/56ed75b)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.16.7-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.16
    (https://github.com/containers/buildah/commit/aaed66b)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a96b716)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/76beccc)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/1fb260f)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/db783f4)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/9dd415b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/e5384ed)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/dcd385e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7aedb16)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a2854ed)
  - Resolves: #1935376


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/016b90d)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/22fc573)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/135d63d)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/17521db)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/c1d6200)
  - fixes CVE-2021-3602
  - Related: #1977943


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7c6701d)
  - fixes CVE-2022-27651
  - Resolves: #2067539


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/ff5434f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/3808e27)
  - Resolves: #2067540


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/3808e27)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7c6701d)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/d69ac6e)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/6d7f496)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.21.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/7f9540d)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.21.4-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/d1e9240)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.21.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/42dbc97)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/f517d85)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/56ff12f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/71b8003)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/98960f2)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/4d20222)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/867c1bc)
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 1.23.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/87a0565)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.1-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/867c1bc)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/83a66a7)
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.24.2-2
changelog:
  - Add patch to fix bash symtax for gating tests
  - Upstream PR: https://github.com/containers/buildah/pull/3792
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.2-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/7b559a3)
  - Related: #2059296


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.2-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/9c456a3)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/d29224c)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/c1bdaba)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/63813ef)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/e99286b)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/83c5f26)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/8cc4586)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/0ee422c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/efed577)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/4198a78)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/1320eb7)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/60e6bc0)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-6
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179943
  - Resolves: #2187341
  - Resolves: #2187359
  - Resolves: #2203677
  - Resolves: #2207505


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/13622b1)
  - Resolves: #2129767


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/c43a389)
  - Resolves: #2136438


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/5b86d15)
  - Resolves: #2150428


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/4785fdb)
  - Resolves: #2152017


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/8ca903b)
  - Resolves: #2140087


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/39dfa73)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/c541c35)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/4b72f05)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/078a7ff)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29.0
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29.0
    (https://github.com/containers/buildah/commit/)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/c822cc6)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/7fa17a8)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f07d2c9)
  - Resolves: #2166195


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/7fa17a8)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f01e5f9)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1:1.30.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175070
  - Resolves: #2179948
  - Resolves: #2187317
  - Resolves: #2187364
  - Resolves: #2203680
  - Resolves: #2207510


author: Jindrich Novy <jnovy@redhat.com> - 1:1.31.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.31
    (https://github.com/containers/buildah/commit/5fd539c)
  - Resolves: RHEL-26772


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/f843563)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b95e962)
  - Resolves: RHEL-28224


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/997beea)
  - Resolves: RHEL-28725


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.8-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b65a814)
  - Resolves: RHEL-40850


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.10-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/bd85c17)
  - Resolves: RHEL-61835


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.11-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/fe85f0d)
  - Resolves: RHEL-61853


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.12-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/58af1cd)
  - Resolves: RHEL-67612


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/70b792d)
  - Related: Jira:RHEL-2110


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Bump to v1.3
  - Vendor in lates containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Bump to v1.2-dev
  - Add registries.conf link to a few man pages


author: Jindrich Novy <jnovy@redhat.com> - 1.5-4.gite94b4f9
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819431


author: Jindrich Novy <jnovy@redhat.com> - 1.5-4.gite94b4f9
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1818127


author: Severin Gehwolf <sgehwolf@redhat.com> - 3.0.6-2
changelog:
  - Add BRs, maven-plugin-bundle, maven-source-plugin and
    maven-plugin-plugin, fixing FTBFS.
  - Resolves: RHBZ#1402998


author: Severin Gehwolf <sgehwolf@redhat.com> - 4.0.4-1
changelog:
  - Update to latest upstream 4.0.4 release.
  - Split junit-dependent packages into sub-packages:
    byteman-dtest, byteman-bmunit
  - Fix automatically generated requirements:
    - ASM is BR-only and bundled.
    - java-headless >= 1:1.9 would get generated, but byteman 4.x
      runs on JDK 8 too (would even work for JDK 6)


author: Kalev Lember <klember@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Drop manual requires that are automatically handled by pkgconfig dep gen
  - Use license macro for COPYING
  - Tighten -devel subpackage deps with the _isa macro
  - Use make_install macro


author: Josh Stone <jistone@redhat.com> - 1.40.0-1
changelog:
  - Update to 1.40.0.
  - Fix compiletest with newer (local-rebuild) libtest
  - Build compiletest with in-tree libtest
  - Fix ARM EHABI unwinding


author: Josh Stone <jistone@redhat.com> - 1.51.0-1
changelog:
  - Update to 1.51.0. Update to 1.51.0. Includes security fixes for
    CVE-2021-28875 and CVE-2021-28877.


author: Josh Stone <jistone@redhat.com> - 1.52.1-1
changelog:
  - Update to 1.52.1. Includes security fixes for CVE-2020-36323,
    CVE-2021-28876, CVE-2021-28878, CVE-2021-28879, and CVE-2021-31162.


author: Josh Stone <jistone@redhat.com> - 1.71.0-2
changelog:
  - Relax the suspicious_double_ref_op lint (rhbz2225471)
  - Enable the profiler runtime for native hosts (rhbz2213875)


author: Till Maas <opensource@till.name> - 10.2-19
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-8
changelog:
  - Move systemd tmpfiles from /var/run to /run (#1804928)
  - Improve logging in the SCEP helper (#1807691)
  - Fix sort order of certificates passed into PKCS7_verify (#1808052)
  - Add -N option to SCEP helper to separate web server chain from
    SCEP issuer chain (#1808613)
  - Add template profile, MS v2 template and issuer to getcert list
    output (#1734451)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-9
changelog:
  - Call the secport equivalent of PR_ErrorToString
  - Remove a couple of unused varaibles found by coverity


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-15
changelog:
  - Replace the previous fix for dbus restarting with PartOf in the
    certmonger systemd service file to link the two (#1687698)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-4
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1577570)
  - Certmonger segfault after cert renewal request (#1881500)
  - Include certificate NotBefore date in output of the 'getcert list' command
    (#1940261)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001079)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-5
changelog:
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012258)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.17-1
changelog:
  - Update to upstream 0.79.17 (#2139523)
  - Certificate format validation when adding the SCEP server's CA (#2150025)
  - Certmonger SCEP renewal should not use old challenges (#2150030)
  - certmonger SEGV during rekey in FIPS mode (#2150070)


author: Rob Crittenden <rcritten@redhat.com> 0.79.5-3
changelog:
  - Remove BR on mktemp. It is now provided by coreutils.
  - Patch to fix NSS handling of keys in sqlite databases
  - Patches to fix tests now that sqlite is the NSS default.


author: Rob Crittenden <rcritten@redhat.com> - 0.79.6-4
changelog:
  - Improve handling of NSS tokens (#1624930)
  - Pull in upstream fixes discovered in coverity and clang (#1632449)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-4
changelog:
  - Optimize closing of file descriptors on fork (#1763745)
  - Remove NOMODDB flag flag from context init, look for full tokens (#1746543)
  - Retrieve full IPA CA chain (#1710632)


author: <pooja.senthil.kumar@oracle.com> - 0.6.1-3
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: <david.x.sloboda@oracle.com> - 10.0.1-1.0.1
changelog:
  - Modified clang-oracle-distros.patch
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>
  - Use all available cores for build
  - Recognize Oracle Linux distros [OraBug: 29422714]


author: <david.kubat@oracle.com> - 11.0.0-1.0.1
changelog:
  - Recognize Oracle Linux distros [OraBug: 29422714]
    Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>
  - Use all available CPU cores for build


author: Tomas Orsava <torsava@redhat.com> - 6.0.1-6
changelog:
  - Change Requires from python3 to platform-python
  - The python3 package was renamed to platform-python
  - Related: rhbz#1619153


author: EL Errata <el-errata_ww@oracle.com> - 7.0.1-1.0.1
changelog:
  - Recognize Oracle Linux distros.
  - Orabug 29422714.
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 8.0.1-1.0.1
changelog:
  - Recognize Oracle Linux distros.
  - Orabug 29422714.
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>
  - Use all available cores for build
  - Recognize Oracle Linux distros [OraBug: 29422714]


author: Lukas Lemes <lukas.lemes@oracle.com> - 9.0.1-2.0.1
changelog:
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>
  - Use all available cores for build
  - Recognize Oracle Linux distros [OraBug: 29422714]


author: Daniel Kopecek <dkopecek@redhat.com> - 11-2
changelog:
  - Check that key derivation key is available
  - Delete remaining references to the removed http pin
  - Install cryptsetup and tpm2_pcrlist in the initramfs
  - Add device TCTI library to the initramfs
    Resolves: rhbz#1648004
    Resolves: rhbz#1650246


author: Sergio Correia <scorreia@redhat.com> - 13-1
changelog:
  - Update to new upstream release, v13
    Resolves: rhbz#1827225
    Resolves: rhbz#1827665
    Resolves: rhbz#1801556
    Resolves: rhbz#1784448
    Resolves: rhbz#1826917
    Resolves: rhbz#1812014


author: Sergio Correia <scorreia@redhat.com> - 15-1
changelog:
  - Update to latest upstream release, v15
    Resolves: rhbz#1887836
    Resolves: rhbz#1853651
    Resolves: rhbz#1874460


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-23
changelog:
  - Fix a bug tha caused cloud-init to fail as a result of trying
    to rename bonds.
    Resolves: rhbz#1512247


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-24
changelog:
  - Set DHCP_HOSTNAME on Azure to allow for the hostname to be
    published correctly when bouncing the network.
    Resolves: rhbz#1434109


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-2.el7
changelog:
  - Revert "remove 'tee' command from logging configuration" [bz#1626117]
  - Resolves: rhbz#1626117]
    (cloud-init-0.7.9-9 doesn't feed cloud-init-output.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-3.el8
changelog:
  - ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1615599]
  - ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1615599]
  - ci-azure-Add-reported-ready-marker-file.patch [bz#1615599]
  - ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1615599]
  - Resolves: bz#1615599
    ([Azure] cloud-init fails to mount /dev/sdb1 after stop(deallocate)&&start VM)


author: <> - 18.2-4.el8
changelog:
  - ci-Enable-cloud-init-by-default-on-vmware.patch [bz#1644335]
  - Resolves: bz#1644335
    ([ESXi][RHEL8.0]Enable cloud-init by default on VMware)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-5.el8
changelog:
  - ci-Fix-string-missmatch-when-mounting-ntfs.patch [bz#1664227]
  - Resolves: bz#1664227
    ([Azure]String missmatch causes the /dev/sdb1 mounting failed after stop&start VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-6.el8
changelog:
  - ci-net-Make-sysconfig-renderer-compatible-with-Network-.patch [bz#1602784]
  - Resolves: bz#1602784
    (cloud-init: Sometimes image boots fingerprints is configured, there's a network device present but it's not configured)


author: EL Errata <el-errata_ww@oracle.com> - 18.2-6.0.1
changelog:
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch for 18.2:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)


author: Danilo de Paula <ddepaula@redhat.com: - 18.5-1.el8
changelog:
  - Rebase to cloud-init 18.5
  - Resolves: bz#1687563
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 8.0.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-1.el8.1
changelog:
  - ci-Revert-azure-ensure-that-networkmanager-hook-script-.patch [bz#1579237]
  - Resolves: bz#1579237
    ([WALA][cloud] cloud-init dhclient-hook script has some unexpected side-effects on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-1.el8.2
changelog:
  - ci-Azure-Ensure-platform-random_seed-is-always-serializ.patch [bz#1648375]
  - ci-DatasourceAzure-add-additional-logging-for-azure-dat.patch [bz#1648375]
  - ci-Azure-Changes-to-the-Hyper-V-KVP-Reporter.patch [bz#1648375]
  - ci-DataSourceAzure-Adjust-timeout-for-polling-IMDS.patch [bz#1648375]
  - ci-cc_mounts-check-if-mount-a-on-no-change-fstab-path.patch [bz#1648375]
  - Resolves: bz#1648375
    ([Azure] [RHEL 8] Cloud-init fixes to support fast provisioning for Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-1.el8.3
changelog:
  - ci-Azure-Return-static-fallback-address-as-if-failed-to.patch [bz#1648375]
  - Resolves: bz#1648375
    ([Azure] [RHEL 8] Cloud-init fixes to support fast provisioning for Azure[8.0.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-1.el8.4
changelog:
  - Fix for TPS tests [bz#1687563]
    Resolve: bz#1687563
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 8.0.1])


author: EL Errata <el-errata_ww@oracle.com> - 18.5-1.0.1.el8.4
changelog:
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-4.el8
changelog:
  - ci-Azure-Ensure-platform-random_seed-is-always-serializ.patch [bz#1691986]
  - ci-DatasourceAzure-add-additional-logging-for-azure-dat.patch [bz#1691986]
  - ci-Azure-Changes-to-the-Hyper-V-KVP-Reporter.patch [bz#1691986]
  - ci-DataSourceAzure-Adjust-timeout-for-polling-IMDS.patch [bz#1691986]
  - ci-cc_mounts-check-if-mount-a-on-no-change-fstab-path.patch [bz#1691986]
  - Resolves: bz#1691986
    ([Azure] [RHEL 8.1] Cloud-init fixes to support fast provisioning for Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-5.el8
changelog:
  - Improved gating testing [bz#1682786]
  - Resolves: bz#1682786
    (cloud-init changes blocked until gating tests are added)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el8
changelog:
  - ci-Revert-azure-ensure-that-networkmanager-hook-script-.patch [bz#1692914]
  - ci-Azure-Return-static-fallback-address-as-if-failed-to.patch [bz#1691986]
  - Resolves: bz#1691986
    ([Azure] [RHEL 8.1] Cloud-init fixes to support fast provisioning for Azure)
  - Resolves: bz#1692914
    ([8.1] [WALA][cloud] cloud-init dhclient-hook script has some unexpected side-effects on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-8.el8
changelog:
  - ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1706482]
  - ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744718]
  - Resolves: bz#1706482
    ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 8.2.0])
  - Resolves: bz#1744718
    ([cloud-init][RHEL8][OpenStack] cloud-init can't persist instance-data.json)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-9.el8
changelog:
  - ci-Removing-cloud-user-from-wheel.patch [bz#1785648]
  - Resolves: bz#1785648
    ([RHEL8]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-10.el8
changelog:
  - ci-cmd-main.py-Fix-missing-modules-init-key-in-modes-di.patch [bz#1802140]
  - Resolves: bz#1802140
    ([cloud-init][RHEL8.2]cloud-init cloud-final.service fail with KeyError: 'modules-init' after upgrade to version 18.2-1.el7_6.1 in RHV)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-11.el8
changelog:
  - ci-azure-avoid-re-running-cloud-init-when-instance-id-i.patch [bz#1788684]
  - ci-net-skip-bond-interfaces-in-get_interfaces.patch [bz#1768770]
  - ci-net-add-is_master-check-for-filtering-device-list.patch [bz#1768770]
  - Resolves: bz#1768770
    (cloud-init complaining about enslaved mac)
  - Resolves: bz#1788684
    ([RHEL-8] cloud-init Azure byte swap (hyperV Gen2 Only))


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-12.el8
changelog:
  - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1807797]
  - Resolves: bz#1807797
    ([cloud-init][RHEL-8.2.0] /etc/resolv.conf lose config after reboot (initial instance is ok))


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-12.el8_2.1
changelog:
  - ci-Make-cloud-init.service-execute-after-network-is-up.patch [bz#1826262]
  - Resolves: bz#1826262
    ([RHEL8.2] Race condition of starting cloud-init and NetworkManager [rhel-8.2.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-12.el8_2.2
changelog:
  - ci-net-append-type-dhcp-46-only-if-dhcp-46-is-True-in-v.patch [bz#1811753]
  - ci-net-sysconfig-Handle-default-route-setup-for-dhcp-co.patch [bz#1811753]
  - ci-azure-net-generate_fallback_nic-emits-network-v2-con.patch [bz#1811753]
  - ci-azure-support-matching-dhcp-route-metrics-for-dual-s.patch [bz#1811753]
  - ci-net-handle-openstack-dhcpv6-stateless-configuration.patch [bz#1811753]
  - ci-net-IPv6-accept_ra-slaac-stateless-51.patch [bz#1811753]
  - Resolves: bz#1811753
    ([RHEL8] DHCP Stateful - Openstack DHCPv6 instance get no default gateway and is unable to send IPv6 traffic (Network unreachable errors). [rhel-8.2.0.z])


author: EL Errata <el-errata_ww@oracle.com> - 18.5-12.0.2.el8_2.2
changelog:
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 18.5-2
changelog:
  - Adding gating.yaml file
  - Resolves: rhbz#1682786
    (cloud-init changes blocked until gating tests are added)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 18.5-3.el8
changelog:
  - ci-Adding-gating-tests-for-Azure-ESXi-and-AWS.patch [bz#1682786]
  - Resolves: bz#1682786
    (cloud-init changes blocked until gating tests are added)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-7.el8_1_0.1
changelog:
  - ci-azure-avoid.patch [bz#1810112]
  - Resolves: bz#1810112
    ([RHEL-8] cloud-init Azure byte swap (hyperV Gen2 Only) [rhel-8.1.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el8
changelog:
  - ci-Make-cloud-init.service-execute-after-network-is-up.patch [bz#1803928]
  - Resolves: bz#1803928
    ([RHEL8.3] Race condition of starting cloud-init and NetworkManager)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el8
changelog:
  - ci-changing-ds-identify-patch-from-usr-lib-to-usr-libex.patch [bz#1834173]
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el8
changelog:
  - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1822343]
  - ci-Render-the-generator-from-template-instead-of-cp.patch [bz#1834173]
  - ci-Change-from-redhat-to-rhel-in-systemd-generator-tmpl.patch [bz#1834173]
  - ci-cloud-init.service.tmpl-use-rhel-instead-of-redhat-4.patch [bz#1834173]
  - Resolves: bz#1822343
    ([RHEL8.3] Do not log IMDSv2 token values into cloud-init.log)
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el8
changelog:
  - ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1822343]
  - Resolves: bz#1822343
    ([RHEL8.3] Do not log IMDSv2 token values into cloud-init.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el8
changelog:
  - Fixing cloud-init-generator permissions [bz#1834173]
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-8.el8
changelog:
  - ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839662]
  - ci-ssh-exit-with-non-zero-status-on-disabled-user-472.patch [bz#1833874]
  - Resolves: bz#1833874
    ([rhel-8.3]using root user error should cause a non-zero exit code)
  - Resolves: bz#1839662
    ([ESXi][RHEL8.3][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-9.el8
changelog:
  - ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1794664]
  - ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1794664]
  - ci-Detect-kernel-version-before-swap-file-creation-428.patch [bz#1794664]
  - Resolves: bz#1794664
    ([RHEL8] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-10.el8
changelog:
  - ci-Changing-notation-of-subp-call.patch [bz#1839662]
  - Resolves: bz#1839662
    ([ESXi][RHEL8.3][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8
changelog:
  - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1794664]
  - Resolves: bz#1794664
    ([RHEL8] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: EL Errata <el-errata_ww@oracle.com> - 19.4-11.0.1
changelog:
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - Update OCI Datasource to support IMDSv2
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8_3.1
changelog:
  - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1879989]
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1890551]
  - ci-Add-config-modules-for-controlling-IBM-PowerVM-RMC.-.patch [bz#1894014]
  - ci-Explicit-set-IPV6_AUTOCONF-and-IPV6_FORCE_ACCEPT_RA-.patch [bz#1894015]
  - ci-net-fix-rendering-of-static6-in-network-config-77.patch [bz#1894015]
  - Resolves: bz#1879989
    ([Azure][RHEL 8] cloud-init Permission denied with the use of mount option noexec [rhel-8.3.0.z])
  - Resolves: bz#1890551
    ([rhel8][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-8.3.0.z])
  - Resolves: bz#1894014
    (Support for cloud-init config modules for PowerVM Hypervisor in Red Hat cloud-init [rhel-8.3.0.z])
  - Resolves: bz#1894015
    (Add support for ipv6_autoconf[rhel-8.3.0.z])


author: EL Errata <el-errata_ww@oracle.com> - 19.4-11.0.3.el8_3.1
changelog:
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - Update OCI Datasource to support IMDSv2
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8_3.2
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1916839]
  - Resolves: bz#1916839
    ([Azure] Update existing user password RHEL8x [rhel-8.3.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8_3.3
changelog:
  - ci-sysconfig-distro-specific-config-rendering-for-BOOTP.patch [bz#1931835]
  - Resolves: bz#1931835
    (SUSE specific option, STARTMODE, should not exist in ifcfg-XXX file. [rhel-8.3.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-2.el8
changelog:
  - ci-Explicit-set-IPV6_AUTOCONF-and-IPV6_FORCE_ACCEPT_RA-.patch [bz#1889635]
  - ci-Add-config-modules-for-controlling-IBM-PowerVM-RMC.-.patch [bz#1886430]
  - Resolves: bz#1886430
    (Support for cloud-init config modules for PowerVM Hypervisor in Red Hat cloud-init)
  - Resolves: bz#1889635
    (Add support for ipv6_autoconf on cloud-init-20.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-3.el8
changelog:
  - ci--Removing-net-tools-dependency.patch [bz#1881871]
  - ci--Adding-man-pages-to-Red-Hat-spec-file.patch [bz#1612573]
  - Resolves: bz#1881871
    (Remove net-tools legacy dependency from spec file)
  - Resolves: bz#1612573
    (Man page scan results for cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-4.el8
changelog:
  - ci-Changing-permission-of-cloud-init-generator-to-755.patch [bz#1897528]
  - Resolves: bz#1897528
    (Change permission on ./systemd/cloud-init-generator.tmpl to 755 instead of 771)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-5.el8
changelog:
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1881462]
  - Resolves: bz#1881462
    ([rhel8][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-6.el8
changelog:
  - ci-Installing-man-pages-in-the-correct-place-with-corre.patch [bz#1612573]
  - ci-Adding-BOOTPROTO-dhcp-to-render-sysconfig-dhcp6-stat.patch [bz#1859695]
  - ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1898943]
  - ci-ssh_util-handle-non-default-AuthorizedKeysFile-confi.patch [bz#1862967]
  - Resolves: bz#1612573
    (Man page scan results for cloud-init)
  - Resolves: bz#1859695
    ([Cloud-init] DHCPv6 assigned address is not added to VM's interface)
  - Resolves: bz#1898943
    ([rhel-8]cloud-final.service fails if NetworkManager not installed.)
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-7.el8
changelog:
  - ci-Report-full-specific-version-with-cloud-init-version.patch [bz#1898949]
  - Resolves: bz#1898949
    (cloud-init should report full specific full version with "cloud-init --version")


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-8.el8
changelog:
  - ci-Missing-IPV6_AUTOCONF-no-to-render-sysconfig-dhcp6-s.patch [bz#1859695]
  - Resolves: bz#1859695
    ([Cloud-init] DHCPv6 assigned address is not added to VM's interface)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-9.el8
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900892]
  - ci-Revert-ssh_util-handle-non-default-AuthorizedKeysFil.patch [bz#1919972]
  - Resolves: bz#1900892
    ([Azure] Update existing user password RHEL8x)
  - Resolves: bz#1919972
    ([RHEL-8.4] ssh keys can be shared across users giving potential root access)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8
changelog:
  - ci-fix-a-typo-in-man-page-cloud-init.1-752.patch [bz#1913127]
  - Resolves: bz#1913127
    (A typo in cloud-init man page)


author: EL Errata <el-errata_ww@oracle.com> - 20.3-10.0.1
changelog:
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.2
changelog:
  - ci-Fix-requiring-device-number-on-EC2-derivatives-836.patch [bz#1942699]
  - Resolves: bz#1942699
    ([Aliyun][RHEL8.4][cloud-init] cloud-init service failed to start with Alibaba instance [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.3
changelog:
  - ci-get_interfaces-don-t-exclude-Open-vSwitch-bridge-bon.patch [bz#1957135]
  - ci-net-exclude-OVS-internal-interfaces-in-get_interface.patch [bz#1957135]
  - Resolves: bz#1957135
    (Intermittent failure to start cloud-init due to failure to detect macs [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.4
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [bz#1963981]
  - ci-cloud-init.spec.template-update-systemd_postun-param.patch [bz#1967600]
  - Resolves: bz#1963981
    ([cloud-init] From RHEL 82+ cloud-init no longer displays sshd keys fingerprints from instance launched from a backup image [rhel-8.4.0.z])
  - Resolves: bz#1967600
    (cloud-init brew build fails on Fedora 33 [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.5
changelog:
  - ci-write-passwords-only-to-serial-console-lock-down-clo.patch [bz#1979252]
  - Resolves: bz#1979252
    (CVE-2021-3429 cloud-init: randomly generated passwords logged in clear-text to world-readable file [rhel-8] [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-7
changelog:
  - ci-Fix-home-permissions-modified-by-ssh-module-SC-338-9.patch [bz#1995840]
  - Resolves: bz#1995840
    ([cloudinit]  Fix home permissions modified by ssh module)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-8
changelog:
  - ci-ssh_utils.py-ignore-when-sshd_config-options-are-not.patch [bz#1862933]
  - Resolves: bz#1862933
    (cloud-init fails with ValueError: need more than 1 value to unpack[rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-9
changelog:
  - ci-cc_ssh.py-fix-private-key-group-owner-and-permission.patch [bz#2013644]
  - Resolves: bz#2013644
    (cloud-init fails to set host key permissions correctly)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-10
changelog:
  - ci-fix-error-on-upgrade-caused-by-new-vendordata2-attri.patch [bz#2021538]
  - Resolves: bz#2021538
    (cloud-init.service fails to start after package update)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-11
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2028028]
  - Resolves: bz#2028028
    ([RHEL-8] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-12
changelog:
  - ci-Add-gdisk-and-openssl-as-deps-to-fix-UEFI-Azure-init.patch [bz#2039697]
  - ci-Datasource-for-VMware-953.patch [bz#2026587]
  - ci-Change-netifaces-dependency-to-0.10.4-965.patch [bz#2026587]
  - ci-Update-dscheck_VMware-s-rpctool-check-970.patch [bz#2026587]
  - ci-Revert-unnecesary-lcase-in-ds-identify-978.patch [bz#2026587]
  - ci-Add-netifaces-package-as-a-Requires-in-cloud-init.sp.patch [bz#2026587]
  - Resolves: bz#2039697
    ([RHEL8] [Azure] cloud-init fails to configure the system)
  - Resolves: bz#2026587
    ([cloud-init][RHEL8] Support for cloud-init datasource 'cloud-init-vmware-guestinfo')


author: Jon Maloy <jmaloy@redhat.com> - 21.1-13
changelog:
  - ci-Add-flexibility-to-IMDS-api-version-793.patch [bz#2023940]
  - ci-Azure-helper-Ensure-Azure-http-handler-sleeps-betwee.patch [bz#2023940]
  - ci-azure-Removing-ability-to-invoke-walinuxagent-799.patch [bz#2023940]
  - ci-Azure-eject-the-provisioning-iso-before-reporting-re.patch [bz#2023940]
  - ci-Azure-Retrieve-username-and-hostname-from-IMDS-865.patch [bz#2023940]
  - ci-Azure-Retry-net-metadata-during-nic-attach-for-non-t.patch [bz#2023940]
  - ci-Azure-adding-support-for-consuming-userdata-from-IMD.patch [bz#2023940]
  - Resolves: bz#2023940
    ([RHEL-8] Support for provisioning Azure VM with userdata)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-14
changelog:
  - ci-Fix-IPv6-netmask-format-for-sysconfig-1215.patch [bz#2046540]
  - Resolves: bz#2046540
    (cloud-init writes route6-$DEVICE config with a HEX netmask. ip route does not like : Error: inet6 prefix is expected rather than "fd00:fd00:fd00::/ffff:ffff:ffff:ffff::".)


author: Camilla Conte <cconte@redhat.com> - 21.1-15
changelog:
  - ci-Detect-a-Python-version-change-and-clear-the-cache-8.patch [bz#1935826]
  - ci-Fix-MIME-policy-failure-on-python-version-upgrade-93.patch [bz#1935826]
  - Resolves: bz#1935826
    ([rhel-8] Cloud-init init stage fails after upgrade from RHEL7 to RHEL8.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-15.el8_6.1
changelog:
  - ci-Add-r-n-check-for-SSH-keys-in-Azure-889.patch [bz#2088028]
  - Resolves: bz#2088028
    ([RHEL-8.7] SSH keys with \r\n line breaks are not properly handled on Azure [rhel-8.6.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-15.el8_6.2
changelog:
  - ci-systemd-Better-support-package-and-upgrade.patch [bz#2081003]
  - Resolves: bz#2081003
    (Cloud-init is placing the puppet module in the wrong stage. [rhel-8.6.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-15.el8_6.3
changelog:
  - ci-Leave-the-details-of-service-management-to-the-distr.patch [bz#2091933]
  - Resolves: bz#2091933
    (cloud-init has an undeclared dependency on the initscripts rpm [rhel-8.6.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-2
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [bz#1957532]
  - ci-cloud-init.spec.template-update-systemd_postun-param.patch [bz#1952089]
  - Resolves: bz#1957532
    ([cloud-init] From RHEL 82+ cloud-init no longer displays sshd keys fingerprints from instance launched from a backup image)
  - Resolves: bz#1952089
    (cloud-init brew build fails on Fedora 33)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-3
changelog:
  - ci-write-passwords-only-to-serial-console-lock-down-clo.patch [bz#1945891]
  - Resolves: bz#1945891
    (CVE-2021-3429 cloud-init: randomly generated passwords logged in clear-text to world-readable file [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-4
changelog:
  - ci-ssh-util-allow-cloudinit-to-merge-all-ssh-keys-into-.patch [bz#1862967]
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-5
changelog:
  - ci-Add-dhcp-client-as-a-dependency.patch [bz#1977385]
  - Resolves: bz#1977385
    ([Azure][RHEL-8] cloud-init must require dhcp-client on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-6
changelog:
  - ci-Stop-copying-ssh-system-keys-and-check-folder-permis.patch [bz#1862967]
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-7.el8_5.1
changelog:
  - ci-cc_ssh.py-fix-private-key-group-owner-and-permission.patch [bz#2017697]
  - Resolves: bz#2017697
    (cloud-init fails to set host key permissions correctly [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-7.el8_5.2
changelog:
  - ci-fix-error-on-upgrade-caused-by-new-vendordata2-attri.patch [bz#2028738]
  - Resolves: bz#2028738
    (cloud-init.service fails to start after package update [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-7.el8_5.3
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2028756]
  - Resolves: bz#2028756
    ([RHEL-8] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-7.el8_5.4
changelog:
  - ci-Add-gdisk-and-openssl-as-deps-to-fix-UEFI-Azure-init.patch [bz#2040690]
  - ci-Datasource-for-VMware-953.patch [bz#2040704]
  - ci-Change-netifaces-dependency-to-0.10.4-965.patch [bz#2040704]
  - ci-Update-dscheck_VMware-s-rpctool-check-970.patch [bz#2040704]
  - ci-Revert-unnecesary-lcase-in-ds-identify-978.patch [bz#2040704]
  - ci-Add-netifaces-package-as-a-Requires-in-cloud-init.sp.patch [bz#2040704]
  - Resolves: bz#2040690
    ([RHEL8] [Azure] cloud-init fails to configure the system [rhel-8.5.0.z])
  - Resolves: bz#2040704
    ([cloud-init][RHEL8] Support for cloud-init datasource 'cloud-init-vmware-guestinfo' [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-7.el8_5.5
changelog:
  - ci-Fix-IPv6-netmask-format-for-sysconfig-1215.patch [bz#2060026]
  - Resolves: bz#2060026
    (cloud-init writes route6-$DEVICE config with a HEX netmask. ip route does not like : Error: inet6 prefix is expected rather than "fd00:fd00:fd00::/ffff:ffff:ffff:ffff::". [rhel-8.5.0.z])


author: Camilla Conte <cconte@redhat.com> - 21.1-15
changelog:
  - ci-Detect-a-Python-version-change-and-clear-the-cache-8.patch [bz#1935826]
  - ci-Fix-MIME-policy-failure-on-python-version-upgrade-93.patch [bz#1935826]


author: Jon Maloy <jmaloy@redhat.com> - 22.1-2
changelog:
  - ci-Add-native-NetworkManager-support-1224.patch [bz#2059872]
  - ci-Use-Network-Manager-and-Netplan-as-default-renderers.patch [bz#2059872]
  - ci-Align-rhel-custom-files-with-upstream-1431.patch [bz#2082071]
  - ci-Remove-rhel-specific-files.patch [bz#2082071]
  - Resolves: bz#2059872
    ([RHEL-8]Rebase cloud-init from Fedora so it can configure networking using NM keyfiles)
  - Resolves: bz#2082071
    (Align cloud.cfg file and systemd with cloud-init upstream .tmpl files)


author: Jon Maloy <jmaloy@redhat.com> - 22.1-3
changelog:
  - ci-Support-EC2-tags-in-instance-metadata-1309.patch [bz#2082686]
  - Resolves: bz#2082686
    ([cloud][init] Add support for reading tags from instance metadata)


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-4
changelog:
  - ci-cloud-init.spec-adjust-path-for-66-azure-ephemeral.r.patch [bz#2096269]
  - ci-setup.py-adjust-udev-rules-default-path-1513.patch [bz#2096269]
  - Resolves: bz#2096269
    (Adjust udev/rules default path[RHEL-8])


author: Jon Maloy <jmaloy@redhat.com> - 22.1-5
changelog:
  - ci-Revert-Add-native-NetworkManager-support-1224.patch [bz#2107464 bz#2110066 bz#2117526 bz#2104393 bz#2098624]
  - ci-Revert-Use-Network-Manager-and-Netplan-as-default-re.patch [bz#2107464 bz#2110066 bz#2117526 bz#2104393 bz#2098624]
  - Resolves: bz#2107464
    ([RHEL-8.7] Cannot run sysconfig when changing the priority of network renderers)
  - Resolves: bz#2110066
    (DNS integration with OpenStack/cloud-init/NetworkManager is not working)
  - Resolves: bz#2117526
    ([RHEL8.7] Revert patch of configuring networking by NM keyfiles)
  - Resolves: bz#2104393
    ([RHEL-8.7]Failed to config static IP and IPv6 according to VMware Customization Config File)
  - Resolves: bz#2098624
    ([RHEL-8.7] IPv6 not workable when cloud-init configure network using NM keyfiles)


author: David Sloboda <david.x.sloboda@oracle.com> - 22.1-5.0.1
changelog:
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Jon Maloy <jmaloy@redhat.com> - 22.1-6
changelog:
  - ci-cloud.cfg.tmpl-make-sure-centos-settings-are-identic.patch [bz#2115576]
  - Resolves: bz#2115576
    (cloud-init configures user "centos" or "rhel" instead of "cloud-user" with cloud-init-22.1)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 22.1-6.0.2.el8_7.2
changelog:
  - ci-cc_set_hostname-ignore-var-lib-cloud-data-set-hostna.patch [bz#2165945]
  - Resolves: bz#2165945
    (systemd[1]: Failed to start Initial cloud-init job after reboot system via sysrq 'b' [RHEL-8] [rhel-8.7.0.z])
  - ci-Ensure-network-ready-before-cloud-init-service-runs-.patch [bz#2153182]
  - Resolves: bz#2153182
    ([RHEL-8] Ensure network ready before cloud-init service runs on RHEL [rhel-8.7.0.z])


author: Camilla Conte <cconte@redhat.com> - 22.1-7
changelog:
  - ci-Ensure-network-ready-before-cloud-init-service-runs-.patch [bz#2151861]
  - Resolves: bz#2151861
    ([RHEL-8] Ensure network ready before cloud-init service runs on RHEL)


author: Camilla Conte <cconte@redhat.com> - 22.1-8
changelog:
  - ci-cc_set_hostname-ignore-var-lib-cloud-data-set-hostna.patch [bz#2162258]
  - Resolves: bz#2162258
    (systemd[1]: Failed to start Initial cloud-init job after reboot system via sysrq 'b' [RHEL-8])


author: David Sloboda <david.x.sloboda@oracle.com> - 22.1-8.0.1
changelog:
  - Update detection logic for OL distros in config template [Orabug: 34845400]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 22.1-8.0.4.1
changelog:
  - ci-Add-warning-during-upgrade-from-an-old-version-with-.patch [bz#2210012]
  - Resolves: bz#2210012
    ([cloud-init] System didn't generate ssh host keys and lost ssh connection after cloud-init removed them with updated cloud-init package.)


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-1
changelog:
  - limit-permissions-on-def_log_file.patch
  - Resolves bz#1424612
  - include-NOZEROCONF-yes-in-etc-sysconfig-network.patch
  - Resolves bz#1653131
  - Rebase to 23.1.1 [bz#2172821]
  - Resolves: bz#2172821


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-2
changelog:
  - ci-rhel-make-sure-previous-hostname-file-ends-with-a-ne.patch [bz#2182407]
  - Resolves: bz#2182407
    (cloud-init strips new line from "/etc/hostname" when processing "/var/lib/cloud/data/previous-hostname")


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-3
changelog:
  - ci-Don-t-change-permissions-of-netrules-target-2076.patch [bz#2182947]
  - ci-Make-user-vendor-data-sensitive-and-remove-log-permi.patch [bz#2190081]
  - Resolves: bz#2182947
    (Request to backport "Don't change permissions of netrules target (#2076)")
  - Resolves: bz#2190081
    (CVE-2023-1786 cloud-init: sensitive data could be exposed in logs [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.1.1-6
changelog:
  - ci-Revert-Manual-revert-Use-Network-Manager-and-Netplan.patch [bz#2219528]
  - ci-Revert-Revert-Add-native-NetworkManager-support-1224.patch [bz#2219528]
  - ci-nm-generate-ipv6-stateful-dhcp-config-at-par-with-sy.patch [bz#2219528]
  - ci-network_manager-add-a-method-for-ipv6-static-IP-conf.patch [bz#2219528]
  - ci-net-sysconfig-enable-sysconfig-renderer-if-network-m.patch [bz#2219528]
  - ci-network-manager-Set-higher-autoconnect-priority-for-.patch [bz#2219528]
  - ci-Set-default-renderer-as-sysconfig-for-centos-rhel-41.patch [bz#2219528]
  - Resolves: bz#2219528
    ([RHEL8] Support configuring network by NM keyfiles)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.1.1-7
changelog:
  - ci-logging-keep-current-file-mode-of-log-file-if-its-st.patch [bz#2222501]
  - Resolves: bz#2222501
    (Don't change log permissions if they are already more restrictive [rhel-8])


author: Camilla Conte <cconte@redhat.com> - 23.1.1-8
changelog:
  - ci-DS-VMware-modify-a-few-log-level-4284.patch [bz#2223810]
  - Resolves: bz#2223810
    ([cloud-init] [RHEL8.9]There are warning logs if dev has more than one IPV6 address on ESXi)


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-9
changelog:
  - ci-NM-renderer-set-default-IPv6-addr-gen-mode-for-all-i.patch [bz#2229460]
  - Resolves: bz#2229460
    ([rhel-8.9] [RFE] Configure "ipv6.addr-gen-mode=eui64' as default in NetworkManager)


author: Camilla Conte <cconte@redhat.com> - 23.1.1-10
changelog:
  - Resolves: bz#2233047
    ([RHEL 8.9] Inform user when cloud-init generated config files are left during uninstalling)


author: Alex Burmashev <alexander.burmashev@oracle.com> - 23.1.1-10.0.1
changelog:
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Add IPv6 IMDS and dhcp6 support for Oracle Datasource [Orabug: 35470783]
  - Increase retry value and add timeout for OCI [Orabug: 35329883]
  - Fix log file permissions [Orabug: 35302985]
  - Update detection logic for OL distros in config template [Orabug: 34845400]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Darren Archibald <darren.archibald@oracle.com> - 23.1.1-11.0.1.1
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch
    (Remove ssh_genkeytypes in settings.py and set in cloud.cfg" to fix settings.py)
  - ci-net-nm-check-for-presence-of-ifcfg-files-when-nm-con.patch
  - ci-tests-unittests-add-a-new-unit-test-for-network-mana.patch
    (NetworkManagerActivator brings up interface failed when using sysconfig renderer)


author: Rajesh Harekal <rajesh.harekal@oracle.com> - 23.1.1-11.0.2.1
changelog:
  - Fix Ephemeral local network setup at boot [Orabug: 36390725]
  - Set minimum swapsize to 2G on instances with less memory [Orabug: 36390864]


author: Jon Maloy <jmaloy@redhat.com> - 23.4-3
changelog:
  - ci-fix-clean-stop-warning-when-running-clean-command-47.patch [RHEL-21530]
  - ci-test-jsonschema-Pin-jsonschema-version-4781.patch [RHEL-21530]
  - Resolves: RHEL-21530
    ([RHEL-8.10]subp.py[WARNING]: skipping /etc/cloud/clean.d/README when do cloud-init clean)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-4
changelog:
  - ci-Revert-Use-grep-for-faster-parsing-of-cloud-config-i.patch [RHEL-22248]
  - Resolves: RHEL-22248
    ([Azure][RHEL-8] cloud-init-23.4 cannot read "- Azure" datasource_list format)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-5
changelog:
  - ci-ci-Pin-pytest-8.0.0.-4816.patch [RHEL-21323]
  - ci-fix-Add-types-to-network-v1-schema-4841.patch [RHEL-21323]
  - Resolves: RHEL-21323
    ([rhel-8] The schema WARNING info for network-config.json is not suitable in cloud-init-23.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-6
changelog:
  - ci-Revert-systemd-Standardize-cloud-init-systemd-enable.patch [RHEL-21290]
  - Resolves: RHEL-21290
    (Unknown lvalue 'ConditionEnvironment' in section 'Unit' for /usr/lib/systemd/system/cloud-init.target,cloud-init.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7
changelog:
  - ci-Retain-exit-code-in-cloud-init-status-for-recoverabl.patch [RHEL-28817]
  - Resolves: RHEL-28817
    ([RHEL 8.10] cloud-init 23.4 returns 2 on recoverable errors instead of 0)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8.1
changelog:
  - ci-fix-Correct-v2-NetworkManager-route-rendering-4637.patch [RHEL-27134]
  - ci-feat-apply-global-DNS-to-interfaces-in-network-manag.patch [RHEL-27134]
  - ci-fix-Undeprecate-network-in-schema-route-definition-5.patch [RHEL-29710]
  - Resolves: RHEL-27134
    ([rhel-8]cloud-init fails to configure DNS/search domains for network-config v1)
  - Resolves: RHEL-29710
    (Suggest to backport patch ff40d1a to undeprecate 'network' in schema route definition [rhel-8.10.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8_10.2
changelog:
  - ci-fix-Fall-back-to-cached-local-ds-if-no-valid-ds-foun.patch [RHEL-32841]
  - Resolves: RHEL-32841
    ([cloud-init][ESXi]VMware datasource resets on every boot causing it to lose network configuration [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8.3
changelog:
  - ci-fix-Always-use-single-datasource-if-specified-5098.patch [RHEL-36701]
  - Resolves: RHEL-36701
    (DataSourceNoCloudNet not configurable via config files [rhel-8.10.z])


author: Craig Guiller <craig.guiller@oracle.com> - 23.4-7.0.1.3
changelog:
  - Update IPv6 IMDS endpoint to ULA and drop NIC identifier [Orabug: 35965980]
  - Enable IPv6 [Orabug: 36502414]
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Increase retry value and add timeout for OCI [Orabug: 35329883]
  - Fix log file permissions [Orabug: 35302985]
  - Update detection logic for OL distros in config template [Orabug: 34845400]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8_10.5
changelog:
  - ci-fix-cloudstack-Use-parsed-lease-file-for-virtual-rou.patch [RHEL-40418]
  - Resolves: RHEL-40418
    ([Cloud-init] CloudstackDataSource cannot work with NetworkManager [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8_10.6
changelog:
  - ci-feat-sysconfig-Add-DNS-from-interface-config-to-reso.patch [RHEL-46013]
  - Resolves: RHEL-46013
    ([RHEL-8] cloud-init fails to configure DNS search domains [rhel-8.10.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8_10.7
changelog:
  - ci-fix-Clean-cache-if-no-datasource-fallback-5499.patch [RHEL-49742]
  - Resolves: RHEL-49742
    ([Cloud-init] [RHEL-8.10] Password reset feature broken with CloudstackDataSource)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8_10.8
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54155]
  - Resolves: RHEL-54155
    ([RHEL 8.10] cloud-init schema validation fails.)


author: Camilla Conte <cconte@redhat.com> - 23.1.1-11
changelog:
  - ci-net-fix-ipv6_dhcpv6_stateful-stateless-slaac-configu.patch [bz#2046491]
  - Resolves: bz#2046491
    (cloud-init enable both DHCPv4 and DHCPv6 when network type is ipv6_dhcpv6-stateful/ipv6_dhcpv6-stateless)
  - Resolves: RHEL-2325
    ([RHEL8.9][cloud-init] Not inform user during upgrade that cloud-init generated config files are left )


author: Camilla Conte <cconte@redhat.com> - 23.1.1-12
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [RHEL-16572]
  - Resolves: RHEL-16572
    ([cloud-init][rhel-8] Backport the patch "rhel/cloud.cfg: remove ssh_genkeytypes in settings.py and set in cloud.cfg" to fix settings.py)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-2
changelog:
  - ci-net-network_manager-do-not-set-may-fail-to-False-for.patch [RHEL-7277]
  - ci-net-allow-dhcp6-configuration-from-generate_fallback.patch [RHEL-7277]
  - ci-net-nm-check-for-presence-of-ifcfg-files-when-nm-con.patch [RHEL-17610]
  - Resolves: RHEL-7277
    ([RFE] [Azure][RHEL8][Network][cloud-init] Can not acquire IPv6 address)
  - Resolves: RHEL-17610
    ([RHEL-8] NetworkManagerActivator brings up interface failed when using sysconfig renderer)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8.9
changelog:
  - ci-fix-rh_subscription-add-string-type-to-org-5453.patch [RHEL-81169]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-81169]
  - Resolves: RHEL-81169
    (Cloud-init fails to subscribe system if activation key 'org' is not an integer [rhel-8.10.z])


author: EL Errata <el-errata_ww@oracle.com> - 23.4-7.0.2.el8_10.9
changelog:
  - Fixes regression in cloud-init with module cc_write_files_deferred [Orabug: 37382965]
  - Update IPv6 IMDS endpoint to ULA and drop NIC identifier [Orabug: 35965980]
  - Enable IPv6 [Orabug: 36502414]
  - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
  - Increase retry value and add timeout for OCI [Orabug: 35329883]
  - Fix log file permissions [Orabug: 35302985]
  - Update detection logic for OL distros in config template [Orabug: 34845400]
  - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
  - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
  - limit permissions [Orabug: 31352433]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)
  - added OL to list of known distros


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.29-3
changelog:
  - Fix growpart error when partition size matches partition offset
  - Resolves: rhbz#1666854
    (growpart fails when partition start sector is the same as partition size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-2
changelog:
  - cu-growpart-Use-LANG-C-to-parse-sfdisk-output.patch [bz#1933768]
  - Resolves: bz#1933768
    (cloud-utils-growpart: Wrong parsing of sfdisk output in french locale)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-3
changelog:
  - cu-Fix-issue-LP-1928167-growpart-doesn-t-work-when-LANG.patch [bz#1885992]
  - Resolves: bz#1885992
    ([RHEL-8] growpart doesn't work when LANG=cs_CZ.UTF-8)


author: Jon Maloy <jmaloy@redhat.com> - 0.33-0
changelog:
  - Rebased to cloud-utils-growpart-0.33-0.el8
  - Resolves: bz#2122575
    ([RHEL-8] Add redhat build support for cloud-utils rebase 0.33 for RHEL8.8


author: Patsy Franklin <pfrankli@redhat.com> - 3.11.0-2
changelog:
  - Choose correct version of python to use.  Require the correct
    sphinx build depending on which python we choose. (#1583117)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.7-2
changelog:
  - reset package release (tkasparek@redhat.com)
  - package koan properly (tkasparek@redhat.com)
  - python-urlgrabber is no longer needed in koan (tkasparek@redhat.com)
  - don't build cobbler subpackage at all (tkasparek@redhat.com)
  - build python3 version of koan (tkasparek@redhat.com)
  - add python3 patches (tkasparek@redhat.com)
  - resue cobbler from Satellite git (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.7-3
changelog:
  - fix bogus changelog date (nils@redhat.com)
  - remove subpackages we don't ship (nils@redhat.com)
  - deactivate main package BRs if we don't build it (nils@redhat.com)
  - concentrate main package BRs in one place (nils@redhat.com)
  - add tito.props for cobbler (tkasparek@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 2.0.7-5
changelog:
  - 1640635 - don't quote kernel args (michael.mraka@redhat.com)
  - use python3 dependencies (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.7-6
changelog:
  - 1633713 - Require the Python interpreter directly instead of using the
    package name (tkasparek@redhat.com)


author: marius Vollmer <mvollmer@redhat.com> - 174-1
changelog:
  - Kubernetes: VM detail page
  - Realmd: Install on demand
  - firewalld service is now being dropped by upstream
  - iscsi works fully now


author: Martin Pitt <mpitt@redhat.com> - 179-1
changelog:
  - Fix building with platform-python rhbz#1631174
  - Machines: Fix system VMs with non-root users rhbz#1632772
  - Machines: Offer cockpit-machines as Application


author: Martin Pitt <mpitt@redhat.com> - 181-1
changelog:
  - Fix key typing in file auto complete widget rhbz#1637866
  - Use libvirt-dbus by default rhbz#1637803


author: Martin Pitt <mpitt@redhat.com> - 183-1
changelog:
  - Machines: Manage storage pools
  - Machines: libvirt connection choice during VM creation
  - PackageKit page: Display registration status clearly
  - Drop .map files from -tests, should be only in debuginfo package rhbz#1648953


author: Martin Pitt <mpitt@redhat.com> - 184-1
changelog:
  - Machines: Fix Dialog and tab layouts rhbz#1658490, rhbz#1657119
  - Machines: Fix information popup in vCPU dialog rhbz#1657133
  - Machines: Enforce https:// URLs for remote VM image locations rhbz#1644267
  - Storage: Filesystem labels are validated upfront rhbz#1655580
  - Storage: Some mount options are prefilled when needed
  - Storage: Fix empty tooltips rhbz#1655922


author: Martin Pitt <mpitt@redhat.com> - 189-1
changelog:
  - Machines: Remove useless notifications from disk tab rhbz#1632800
  - Machines: Add deletion and deactivation of storage pools/volumes
    rhbz#1658847, rhbz#1668882, rhbz#1668877
  - Machines: Fix preparation of disk data for disks of type volume rhbz#1661897
  - Machines: Add disk format field when creating new disk xml rhbz#1662213
  - Machines: Fix storage pool state after destroy/undefine rhbz#1663793
  - Machines: Add import of existing images rhbz#1666825
  - Machines: Enable/disable VM autostart rhbz#1670491


author: Martin Pitt <mpitt@redhat.com> - 191-1
changelog:
  - Storage: Fix pre-filling of vdo fstab options rhbz#1672935
  - Machines: Add PXE boot rhbz#1680973
  - Machines: Add pause/resume rhbz#1680401
  - Machines: Configure boot device order rhbz#1672760
  - Machines: Import existing qcow2 image rhbz#1666825
  - Machines: Edit virtual memory rhbz#1676557
  - Machines: Deletion of storage volumes rhbz#1668882


author: Martin Pitt <mpitt@redhat.com> - 193-1
changelog:
  - Machines: iSCSI direct storage pools
  - Machines: Auto-detect guest operating system rhbz#1652959
  - Machines: Support https://*.iso installation source rhbz#1684422
  - Machines: Fix crash on VM creation with Edge browser rhbz#1692707
  - Storage: The "Format" button is no longer hidden
  - Storage: Improve performance with many block devices


author: Martin Pitt <mpitt@redhat.com> - 196-1
changelog:
  - Machines: Support ISO source from http:// rhbz#1644267
  - Machines: Select destination storage pool on creation rhbz#1658852
  - Machines: Hide iscsi-direct type from create new pool dialog when not
    available rhbz#1709708
  - Machines: Fix handling of storage pools that failed to get active
    rhbz#1715388
  - Machines: Fix OS detection while changing installation source rhbz#1715409


author: Martin Pitt <mpitt@redhat.com> - 197-1
changelog:
  - Machines: Support all storage pool types for new disks
  - Machines: Show available space on host at VM creation
  - Machines: Fix regression on network tab rhbz#1720267


author: Martin Pitt <mpitt@redhat.com> - 197.1-1
changelog:
  - Machines: Fix crash on deleting VM in the middle of the installation (rhbz#1715399)
  - Machines: Properly refresh storage pools (rhbz#1680293)
  - Machines: Fix pool types which don't support volume creation (rhbz#1731849)
  - Machines: Disable PXE booting on session connection (rhbz#1731803)


author: Martin Pitt <mpitt@redhat.com> - 197.2-1
changelog:
  - Machines: Stop bringing libvirt package as a dependency (rhbz#1728219)
  - Machines: Implement VM installation for additional disk types
  - Machines: Fix setting of volume format when adding new disks to VMs (rhbz#1732303)
  - Machines: Disallow pool deletion if pool/volumes are used by any VM (rhbz#1731865)
  - Check for subscription only if enabled in package manager (rhbz#1701067)


author: Matej Marusak <mmarusak@redhat.com> - 206-1
changelog:
  - Machines: Network interface deletion
  - Machines: Refactor Create VM dialog and introduce a download option
  - Software Updates: Use notifications for available updates info
  - Machines: Configure read-only and shareable disks (rhbz#1684304)
  - machines: Implement adding virtual network interfaces (rhbz#1672753)
  - Machines: Creation of Storage Volumes (rhbz#1676506)
  - Machines: VM creation and import dialog changes
  - Machines: Enable interface type "direct" in NIC configuration
  - Machines: LVM storage pools (rhbz#1676600)
  - Machines: VM creation dialog now shows the recommended memory for the selected OS
  - Machines: Managing of Virtual Networks (rhbz#1672755)
  - Machines: Support more disk types


author: Matej Marusak <mmarusak@redhat.com> - 208-1
changelog:
  - Storage: Drop “default mount point” concept
  - Machines: Support transient virtual networks and storage pools
  - Machines: Sliders for disk size and memory in VM creation
  - Storage: List all software devices in a single panel
  - Redesigned notifications


author: Matej Marusak <mmarusak@redhat.com> - 209-1
changelog:
  - Machines: Don't disable detaching button when VM is running (rhbz#1777201)
  - Machines: Support transient virtual networks and storage pools (rhbz#1715429)
  - Machines: Fix Oops when creating a VM from ISO on system with no storage pools (rhbz#1778049)
  - Stop fetching variables from base1/patternfly.css because they can be outdated (rhbz#1777683)


author: Matej Marusak <mmarusak@redhat.com> - 210-1
changelog:
  - Dashboard: Support SSH identity unlocking when adding new machines
  - Machines: Support “bridge” type network interfaces
  - Machines: Support “bus” type disk configuration (rhbz#1671144)
  - Machines: Fix default storage pool search (rhbz#1778049)
  - Machines: Fix lost of configuration changes made before installation (rhbz#1780449)
  - Machines: Fix edit NIC dialog when the current network in XML was deleted (rhbz#1780452)
  - Machines: Fix default volume format detection in Disk Add dialog (rhbz#1784304)
  - Machines: Use all cells when getting Host Max Memory (rhbz#1780530)


author: Matej Marusak <mmarusak@redhat.com> - 211-1
changelog:
  - Machines: The VM is covered when another one has the same name (rhbz#1780451)
  - Machines: Decompress ipv6 addresses before validating them (rhbz#1784289)
  - Machines: Fix default bridge selection for `Bridge to LAN` NIC (rhbz#1791537, rhbz#1791543)


author: Martin Pitt <mpitt@redhat.com> - 211.2.1
changelog:
  - Machines: Fix stuck delete dialogs (rhbz#1791543, #1792379)
  - Machines: Fix CPU statistics (rhbz#1763641)
  - Machines: Fix incorrect format when adding existing disk to VM (rhbz#1792319)
  - Storage: Minor layout fixes
  - Translation updates


author: Matej Marusak <mmarusak@redhat.com> - 219-1
changelog:
  - New upstream release 219
  - Send key functionality for the virtual machines (rhbz#1693487)
  - Fix dnf-automatic timer parsing (rhbz#1829685)


author: Martin Pitt <mpitt@redhat.com> - 221-1
changelog:
  - machines: Remove --noreboot parameter to virt-install for VM installation
    (rhbz#1750637)
  - Translation updates


author: Martin Pitt <mpitt@redhat.com> - 224-1
changelog:
  - Translation updates
  - Machines: Remove creation of user account (rhbz#1853918)
  - Machines: Fix reboot after PXE installation (rhbz#1853408, rhbz#1859045)
  - Machines: Fix notification for transient VMs (rhbz#1853649)
  - Machines: Make Storage/Network lists consistent with VM list (rhbz#1854257)
  - Machines: Fix close button on NIC Edit modal dialog header (rhbz#1857044)


author: Matej Marusak <mmarusak@redhat.com> - 224.1-1
changelog:
  - machines: add padding to storage pools list cells (rhbz#1857500)
  - machines: Fix OS autodetection in create VM dialog (rhbz#1862333)
  - machines: Fix TypeError for OSRow in VM creation dialog (rhbz#1862106)


author: Matej Marusak <mmarusak@redhat.com> - 224.2-1
changelog:
  - lib: Include current directory in FileAutoComplete option listing (rhbz#1866995)
  - lib: Make sure that the expandable part of table rows has unique key (rhbz#1865821)


author: Katerina Koukiou <kkoukiou@redhat.com> - 233.1-1
changelog:
  - machines: Inline error messages (rhbz#1666829)
  - machines: Reimplement the design of the main VMs list (rhbz#1780537, rhbz#1847712, rhbz#1858716, rhbz#1862406, rhbz#1873931)
  - storage: List entries from /etc/crypttab that are still locked
  - machines: Add support for reverting and deleting VM snapshots
  - machines: Add support for VM snapshots (rhbz#1668870, rhbz#1673158)
  - machines: Virtual machine list filtering
  - storage: Better support for "noauto" LUKS devices
  - machines: Fix 'PXE' installed VMs having network first in the boot order even after the installation finishded (rhbz#1859008)
  - machines: Fix Desktop Viewer Console tab CSS issues (rhbz#1868584)
  - tools: Fix duplicated -debuginfo files (rhbz#1870521)
  - machines: Show cdrom details in bootorder dialog (rhbz#1880175)


author: Katerina Koukiou <kkoukiou@redhat.com> - 234-1
changelog:
  - machines: Allow editing VM's CPU mode and model (rhbz#1683301)
  - machines: Add support for cloning VMs (rhbz#1683391)
  - dashboard: Drop cockpit-dashboard package, replaced with shell host switcher


author: Matej Marusak <mmarusak@redhat.com> - 235-1
changelog:
  - machines: Fix check of cpu configuration between active/inactive XML (rhbz#1913205)
  - machines: Fix rounding of memory when switching from MB to GB (rhbz#1908683)


author: Martin Pitt <mpitt@redhat.com> - 236-1
changelog:
  - machines: Fix unstable VNC console (rhbz#1750642)
  - machines: Fix alert close property in the VM details (rhbz#1918147)
  - machines: Fix crash when volumes disappear before starting installation (rhbz#1918156)
  - machines: Fix crash when undefining created VM before starting installation (rhbz#1916597)
  - machines: Fix shutting down transient VM (rhbz#1916595)
  - machines: Fix VM detail page's "Install" button (rhbz#1916120)


author: Katerina Koukiou <kkoukiou@redhat.com> - 237-1
changelog:
  - machines: Fix virt-viewer file download on chromium based Edge (rhbz#1730666)
  - machines: Fix crash when a target is pasted in the VM creation dialog (rhbz#1872660)
  - machines: Fix alert about pending changes in NIC edit dialog (rhbz#1911657)
  - machines: Fix alert about pending changes in overview card related to boot order (rhbz#1915765)
  - machines: Fix file autocomplete select not closing on enter (rhbz#1874392)
  - machines: Fix white screen when deleting a VM in an environment without storage pools (rhbz#1912384)


author: Katerina Koukiou <kkoukiou@redhat.com> - 238-1
changelog:
  - machines: VM disk creation supports a custom path
  - Updates: List outdated software that needs a restart


author: Martin Pitt <mpitt@redhat.com> - 242-1
changelog:
  - Updates: Show subscription status on cloud images (rhbz#1931429)
  - Machines: Allow creation of non-root user for unattended installations (rhbz#1940287)


author: Martin Pitt <mpitt@redhat.com> - 246-1
changelog:
  - Polish of the Storage page
  - Storage: Show both SHA256 and SHA1 Tang fingerprints
  - Updated translations


author: Katerina Koukiou <kkoukiou@redhat.com> - 248-1
changelog:
  - Machines: Share host files with the guest using virtiofs
  - Machines: Show list of pass-through devices


author: Matej Marusak <mmarusak@redhat.com> - 249-1
changelog:
  - Machines: Fix input for "Target Path" when Creating storage pool (rhbz#1866225)
  - Machines: Don't round or floor memory and storage size unnecessarily (rhbz#1979152)
  - Machines: Use cockpit's proxy API for monitoring libvirt service changes (rhbz#1974223)
  - Machines: Fix ooops when press the down arrow several times when inputting custom path (rhbz#1977554)


author: Martin Pitt <mpitt@redhat.com> - 250-1
changelog:
  - Software Updates: Introduce basic kpatch support
  - Software Updates: Handle unregistered RHEL systems with non-CDN OS repository
    (rhbz#1970057)
  - Machines: Read qemu.conf to get spice/vnc address (rhbz#1963701)


author: Martin Pitt <mpitt@redhat.com> - 255-1
changelog:
  - Machines: Parse supported disk bus types from domcapabities (rhbz#1862779)
  - Machines: Stop exposing unattended installation option for ISO installation
    media (rhbz#1868594)


author: Katerina Koukiou <kkoukiou@redhat.com> - 257-1
changelog:
  - Machines: Now officially supported on Arch Linux (https://archlinux.org/)
  - Machines: Support selecting between consoles of the same type


author: Matej Marusak <mmarusak@redhat.com> - 261-1
changelog:
  - storage: Unmounting or deleting a busy filesystem is now supported
  - Tests improvements and stabilization
  - Machines: Delete disks only after VM is successfully undefined and destroyed (rhbz#2031678)
  - Machines: Do not change "startVm" value when selecting Unattended installation (rhbz#2033603)


author: Martin Pitt <mpitt@redhat.com> - 263-1
changelog:
  - Overview: Show scheduled shutdowns
  - Networking: Add firewall service description
  - Shell: Fix browser history


author: Martin Pitt <mpitt@redhat.com> - 269-1
changelog:
  - Show base-10 units by default (rhbz#1970119)
  - Apps: Fix i18n (rhbz#2018389)
  - Software Updates: Install kpatches only (rhbz#2039989)
  - Machines: Fix deleting net interfaces with non-unique MAC address (rhbz#1867478)
  - Machines: Create disks with random/customizable serial number (rhbz#2036330)
  - Machines: Fix network interface source icon (rhbz#2063680)


author: Martin Pitt <mpitt@redhat.com> - 273-1
changelog:
  - Software Updates: Optionally reboot after updating
   - Machines: Show toast notication if VM's storage deletion fails (rhbz#2105984)


author: Lukáš Lipinský <lukas.lipinky@oracle.com> - 276-1.0.1
changelog:
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]


author: Matej Marusak <mmarusak@redhat.com> - 278-1
changelog:
  - Machines: Allow TRIM/UNMAP requests by default for newly added disks
  - Machines: Insert and eject CD & DVD media


author: Katerina Koukiou <kkoukiou@redhat.com> - 283-1
changelog:
  - Machines: Summarize system and user session differences
  - Machines: Virtual watchdog device support


author: Martin Pitt <mpitt@redhat.com> - 284-1
changelog:
  - Storage: Set up a system to use NBDE
  - Machines: Option to forcefully revert a snapshot
  - Fix tabular numbers font


author: Katerina Koukiou <kkoukiou@redhat.com> - 289-1
changelog:
  - Machines: Show an alert when virtualization is disabled in BIOS/EFI
  - Storage: Mounting filesystems at boot time
  - Machines: Create VM based on cloud image and start it later (rhbz#1913548)


author: Martin Pitt <mpitt@redhat.com> - 291-1
changelog:
  - Update to PatternFly 5 Alpha
  - Machines: Option to use RAW volume during VM creation
  - Machines: Redesign VM’s CPU configuration


author: Martin Pitt <mpitt@redhat.com> - 292-1
changelog:
  - Metrics: Add disk IO per service
  - Several right-to-left language fixes
  - Machines: Apply watchdog changes on next boot if hotplug fails


author: Martin Pitt <mpitt@redhat.com> - 295-1
changelog:
  - Machines: Vsock device support
  - Machines: Confirm shutdown actions
  - Machines: Show virtual interface's TAP device


author: Martin Pitt <mpitt@redhat.com> - 296-1
changelog:
  - Machines: Fix "Edit" button CSS for transient VMs (rhbz#2215597)
   - Machines: Fix format detection for CD/DVD images (rhbz#2215599)


author: Martin Pitt <mpitt@redhat.com> - 299-1
changelog:
  - Storage: Support for no-overprovisioning with Stratis
  - Storage: Cockpit can now add caches to encrypted Stratis pools


author: Martin Pitt <mpitt@redhat.com> - 300-1
changelog:
  - Celebrating the Nürnberg life release!
  - Storage: Support for growing block devices of a Stratis pool


author: Martin Pitt <mpitt@redhat.com> - 310-1
changelog:
  - Storage: support for btrfs
  - Storage: improved support for swap
  - Machines: Action to Replace SPICE devices (RHEL-17433)
  - Machines: Create external snapshots when supported
  - Machines: Fix VM creation on s390x (RHEL-22241)


author: Martin Pitt <mpitt@redhat.com> - 310.3-2
changelog:
  - Machines: Mass SPICE replacement
  - Machines: Pre-formatted Block Device storage pool support
  - Machines: Translation updates (jira#RHEL-14230)


author: Brian C. Lane <bcl@redhat.com> - 0.1.1-1
changelog:
  - fixes blueprints end-to-end test (jgiardin)
  - Hides Comment feature from Pending Changes modal (jgiardin)
  - Remove non-functional UI elements/components (jgiardin)
  - fixes line length in unit test (jgiardin)
  - update selector for Edit Blueprint button in test (jgiardin)
  - fixes empty state on blueprints page and tests (jgiardin)
  - fixes spacing errors (jgiardin)
  - fixes bad merges during rebase (jgiardin)
  - handles error case for fetching blueprints (jgiardin)
  - sets timeout on Loading state (jgiardin)
  - how did that 'n' get in there? (jgiardin)
  - fixes line length (jgiardin)
  - Disables actions (jgiardin)
  - Updates UI based on state, for loading and error (jgiardin)
  - Adds reducer for updating state when an error occurs (jgiardin)
  - updates state to hold values for fetch status (jgiardin)
  - components: Use consistent syntax for handlers (lars)
  - Fix two issues. (henrywangxf)
  - test/create.image: simplify shallow wrapper creation (lars)
  - CreateImage: don't call unset handlers (lars)
  - test/create.image: also conider handleStartCompose (lars)
  - correcting the initial state (jgiardin)
  - updates mockState in unit tests to match state updates for Filters (jgiardin)
  - Merge pull request #250 from larskarlitski/remove-mock-data (jgiardin)
  - Remove mock data (lars)
  - Add lorax-composer test and remove stand alone welder-web test. (henrywangxf)
  - Domain socket support in UI testing. (henrywangxf)
  - Update queue status text, Remove cancel button (jacobdkozol)
  - Added status icons for imageListView (jacobdkozol)
  - Add start compose functionality (jacobdkozol)
  - Fix blueprint page issue loading components (jacobdkozol)
  - Remove redux persist (jacobdkozol)
  - Remove unused code (lars)
  - Merge pull request #248 from jgiardino/filter (jgiardin)
  - Merge pull request #262 from andreasn/form-control-fx-style (jgiardin)
  - Fix style of pagination input under available components (anilsson)
  - fix issue when multiple filters are defined (jgiardin)
  - implements filtering and refactors toolbars (jgiardin)


author: Brian C. Lane <bcl@redhat.com> - 0.1.2-1
changelog:
  - New Version 0.1.2
    Related: rhbz#1613058
  - Add the .spec files to .PHONY (bcl)
  - Add welder-web and cockpit-composer release instructions (bcl)
  - Add a 'tag' target to the Makefile (bcl)
  - Adjust image list layout to improve alignment (jgiardin)
  - Fix blueprint packages getting added to history (jacobdkozol)
  - Fixed bug where startComposeApi would not return start compose response (sfondell)
  - Run `make po-push` from travis on pushes to master. (dshea)
  - Add a po-push target to the Makefile. (dshea)
  - Don't call compose API on the blueprints page (lars)
  - Support downloading images (lars)
  - Fix fetchComposes() call (lars)
  - Update text string (jgiardin)
  - add bootstrap class for large modals (jgiardin)
  - Fix issues with translated strings and add one more for "Close" (jgiardin)
  - Make strings translatable (but includes build error) (jgiardin)
  - Update layout (jgiardin)
  - Don't show custom sources section if empty (jgiardin)
  - Add modal for listing sources (jgiardin)
  - Revert "Revert "Add python and gcc to the Dockerfiles."" (dshea)
  - Include translations in the dist tarball (dshea)
  - Remove the zanata-js crud from package-lock.json (dshea)
  - Fix how fetching blueprints/composes is triggered (jacobdkozol)
  - Update API calls error messages (jacobdkozol)
  - Fix polling issue. Add error action. (jacobdkozol)
  - Add loading images from prior sessions and sort by start time. (jacobdkozol)
  - Revert "Run `npm rebuild` after `npm install`." (lars)
  - Revert "Add python and gcc to the Dockerfiles." (lars)
  - Don't update translations on every build (lars)
  - Fix yamllint errors on .travis.yml (dshea)
  - Add new requirements to the travis environment (dshea)
  - Add a script for testing translations. (dshea)
  - Run `npm rebuild` after `npm install`. (dshea)
  - Make the editBlueprint selector more specific. (dshea)
  - Add python and gcc to the Dockerfiles. (dshea)
  - Add a i18n section to the README (dshea)
  - Create cockpit translation modules. (dshea)
  - Extract cockpit manifest strings for translation. (dshea)
  - Add translated messages. (dshea)
  - Add scripts for interacting with Zanata. (dshea)
  - Internationalize strings with react-intl. (dshea)
  - Fix PR#309 imported issue. The rpm package should be welder-web*.noarch.rpm, not welder-web*.x86_64.rpm (henrywangxf)
  - Build srpm together with rpm (atodorov)
  - Images list UI refinements (jgiardin)
  - cockpituous-release: Use upstream release-source (martinpitt)
  - core: Use escalated privileges to access Lorax API (stefw)
  - remove utils from Layout (jgiardin)
  - Remove unused Layout components (jgiardin)
  - Submit coverage report only if present (atodorov)
  - Use default composer dir without --group option (atodorov)
  - Fix created image not being added to state (jacobdkozol)
  - package.json: Remove bootstrap-select (lars)
  - package.json: Update stylelint (lars)
  - blueprints: Show actual error message (lars)
  - core: propagate errors from cockpitFetch() (lars)


author: Brian C. Lane <bcl@redhat.com> - 0.1.3-1
changelog:
  - New version 0.1.3
    Related: rhbz#1613058
  - Update Create Image notifications (#328) (jgiardin)
  - Make strings translatable in Pending Changes dialog (#341) (jgiardin)
  - Makefile: don't run po-pull on dist (lars)
  - Add the .spec files to .PHONY (bcl)


author: Brian C. Lane <bcl@redhat.com> - 0.1.4-1
changelog:
  - New version 0.1.4
    Related: rhbz#1613058
  - Adds queue status to an infotip in the Create Image modal (jgiardin)
  - Update Create Image modal to also commit unsaved changes (jgiardin)
  - Catching a couple of minor issues (jgiardin)
  - Update Create Image modal to include blueprint object instead of just name (jgiardin)
  - Update Create Image button selector in end-to-end test (jgiardin)
  - Display warning messages to the user in Create Image modal (jgiardin)
  - use updated property key from api for date created (jgiardin)
  - translations: Fail when zanata-js is not installed (lars)
  - README.md: Add missing `translations:` (lars)
  - translations: remove test target (lars)
  - po: Update from Fedora Zanata (lars)
  - translations: move po files and scripts to po/ (lars)
  - translations: Strip country code when loading react-intl's locale-data (mpitt)
  - remove redundant .then(data => data) (jgiardin)
  - Add ability to stop builds that are waiting or running (jgiardin)
  - Change text from "Delete Build" to "Delete Image" (jgiardin)
  - Update Delete Blueprint modal to match layout of Delete Build (jgiardin)
  - Fix miscellaneous propType warnings (jgiardin)
  - Include confirmation modal for deleting a finished build (jgiardin)
  - Swap order of date and type in the Image list item details (jgiardin)
  - Add Delete action for Finished composes (jgiardin)
  - Add ability to delete Failed builds (jgiardin)
  - test_blueprints: Make blueprint selection more robust (lars)
  - Use upstream patternfly-react's Tab component (lars)
  - Changes en-dash to dash and adds spaces (jgiardin)
  - Updates based on a11y review, also simplified i18n format (jgiardin)
  - minor tweaks to improve the screen reader experience (jgiardin)
  - Makes strings translatable in pagination for available components (jgiardin)
  - Update React and enzyme (lars)
  - package.json: Use ~ instead of ^ versions for dependencies (lars)
  - Drop unused dependencies (lars)
  - package.json: update dependencies (lars)
  - Remove package-lock.json (lars)


author: Brian C. Lane <bcl@redhat.com> - 0.1.5-1
changelog:
  - New version 0.1.5
    Related: rhbz#1613058
  - Found a code coverage bug and fix it. (henrywangxf)
  - Update README.md to support Cockpit CI. (henrywangxf)
  - Updates Create Image modal to not have a default image type (jgiardin)
  - Add support for Modules during Add/Remove (jgiardin)
  - new test: Build mock images and verify download becomes enabled (atodorov)
  - Fix flaky issue when running test on chrome (henrywangxf)
  - Add selenium debug support. (henrywangxf)
  - Creates user-friendly labels to display for image types (jgiardin)
  - Compile with code coverage enabled, collect coverage result and upload to codecov.io. (henrywangxf)
  - new test: verify stock blueprints from backend are displayed (atodorov)
  - Simplify selenium startup again (mpitt)
  - Temporarily support selenium images with and without -debug variants (mpitt)
  - Fix python string format issue (henrywangxf)
  - Remove ugly blank except in tests (henrywangxf)
  - README: We're running tests on Cockpit's CI now (lars)
  - Fix tests to not exit with non-zero code (#362) (henrywangxf)
  - Update Discard Changes to delete workspace (jgiardin)
  - Fix test case "Then selected component icon should have border" (henrywangxf)
  - Cockpit CI Integration (henrywangxf)
  - Display modules in list of selected components (jgiardin)
  - pass blueprint data that's expected on save (jgiardin)
  - Fix /run/weldr permission issue (henrywangxf)
  - Fix end-to-end test cases (henrywangxf)
  - po: Update Japanese translations from Zanata (lars)


author: Brian C. Lane <bcl@redhat.com> - 0.1.6-1
changelog:
  - New version 0.1.6
    Resolves: rhbz#1640184
  - Include spec into release tarball (mpitt)
  - Fix a bug in importSanity test. (henrywangxf)
  - Add RHEL-X in welder-web test scenarios. (henrywangxf)
  - test: Support Cockpit test scenario (mpitt)
  - Makefile: Simplify variable defaults (mpitt)
  - A big commit to fix random failure on chrome. (henrywangxf)
  - Remove inert 'Architecture' field in 'Create Image' dialog (#388) (stefw)
  - po: Update from Fedora Zanata (lars)
  - Remove ForEach to run two test cases but use two separate cases. If there's
    one case failed, I can find it according to case name. (henrywangxf)
  - Wait for delete menu action visable before click it. (henrywangxf)
  - test: Drop node installation from vm.install (mpitt)
  - Don't clean bots/ directory for VM preparation (mpitt)
  - Two improvements: (henrywangxf)
  - Go to view blueprint page by clicking blueprint name link instead of by URL.
    That helps improving case stability. (henrywangxf)
  - Move sed to test/vm.install from test/run because developers do not normally
    use test/run to trigger tests. (henrywangxf)
  - test: Only install node if it isn't already available (mpitt)
  - Makefile: bots is not a phony target (mpitt)


author: Brian C. Lane <bcl@redhat.com> - 0.1.7-1
changelog:
  - New version 0.1.7
    Resolves: rhbz#1640184
  - Capitalize OpenStack corrently in the image create dialog (anilsson)
  - Add AppStream metainfo (mpitt)
  - Make cockpit-composer the only package name (mpitt)
  - Lots of integration test improvements (henrywangxf)


author: Martin Pitt <mpitt@redhat.com> - 0.1.8-1
changelog:
  - New version 0.1.8
  - Provide visual indication when a blueprint component is a dependency
  - Enable Undo to retrieve changes after the Discard Changes action
  - Update how blueprint contents are depsolved when contents are added/removed
  - Display an error if a component is added that results in a depsolve failure
  - Show all versions available for a package
  - Provide ability to specify a wildcard version for a package rhbz#1673066


author: Martin Pitt <mpitt@redhat.com> - 0.3-1
changelog:
  - New version 0.3
  - Add/edit/remove sources
  - Remove new line in encrypted password rhbz#1655862
  - Resolve issues with changes saved to the workspace


author: Martin Pitt <mpitt@redhat.com> - 4-1
changelog:
  - Add additional blueprint name validation rhbz#1696415
  - Fix images not loading on refresh
  - Add notification for source repo deletion
  - Fix AppStream ID
  - Translation updates


author: Matej Marusak <mmarusak@redhat.com> - 11-1
changelog:
  - Show depsolve errors on the blueprints page
  - Add labels for additional output types (rhbz#1769154)
  - Expose Image Builder on /composer, not /welder
  - Define a URL for each tab on a blueprint page
  - Provide a link in the image creation notification to the Images tab on the blueprint page


author: Matej Marusak <mmarusak@redhat.com> - 12.1-1
changelog:
  - Fix integration tests, external test repository URL ceased to exist
  - Translation updates rhbz#1784453
  - Add documentation URL page help menu


author: Lars Karlitski <larskarlitski@redhat.com> - 21.1-1
changelog:
  - Support setting parameters (ref and parent) for ostree images
  - Loosen restrictions on password strength
  - Various UI refinements


author: Jacob Kozol <jkozol@redhat.com> - 22.1-1
changelog:
  - Patternfly imports are standardized to be consistent with cockpit
  - Cancel image build button bug fixed
  - Empty components state provides a help message
  - Wizard component has bug fixes and is refactored for future scalability
  - Test updates
  - ESLint upgraded to version 7 and the code style is improved
  - Translation files are updated from fedora weblate
  - Cockpit-composer's dependency on osbuild-composer  is more specific
  - Coverity scan is now supported to help improve code quality
  - Resolves: #1820539


author: Jacob Kozol <jkozol@redhat.com> - 27-1
changelog:
  - Sync with upstream release 27
  - Add additional form validation for the Create Image Wizard
  - Improve page size dropdown styling
  - Improve error state messages
  - Update pagination component for pf4
  - Add wildcards and support for multiple values to input filter
  - Update translations


author: Jacob Kozol <jkozol@redhat.com> - 28-1
changelog:
  - Use sentence case rather than title case
  - Add and update tests
  - Update translations from weblate
  - Update minor NPM dependencies


author: Jacob Kozol <jkozol@redhat.com> - 29-1
changelog:
  - Add ability to upload to VMWare
  - Add support for additional ostree parameters
  - Update NPM dependencies
  - Add and update translations
  - Minor test fixes


author: Jacob Kozol <jkozol@redhat.com> - 29.1-1
changelog:
  - Add RHEL for Edge Container and Installer image types
  - Update translations
  - Add tests for new image types
  - Improve test reliability


author: Jacob Kozol <jkozol@redhat.com> - 31-1
changelog:
  - Add new ostree image types
  - Improve loading state when waiting for api responses
  - Improve notification system
  - Improve test stability
  - Update NPM dependencies
  - Update translations


author: John Mcwalters <john.mcwalters@oracle.com> - 31.1-1.0.1
changelog:
  - Make per page documentation links point to Oracle Linux [Orabug: 32013095]
  - Do not deliver extra files. [Orabug: 33555380]


author: Jacob Kozol <jkozol@redhat.com> - 32-1
changelog:
  - Add Edge Raw, RHEL Installer, Edge Simplified Installer image types
  - Improve user account modal responsiveness
  - Update tests
  - Update minor NPM dependencies
  - Update translation files


author: Dominik Rehak <drehak@redhat.com> - 0.1.2-1
changelog:
  - Update to 0.1.2
  - Fix showing remediations when leapp is killed
    Resolves: #1873184
  - Add support of dialog related report entries
    Resolves: #1873608


author: Dominik Rehak <drehak@redhat.com> - 0.1.3-1
changelog:
  - Update to 0.1.3
  - Fix running remediation commands
    Resolves: #1877313
  - Fix showing report when not logged in as superuser
    Resolves: #1859779


author: Petr Stodulka <pstodulk@redhat.com> - 0.1.6-2
changelog:
  - Updated dependencies regarding rename of binary packages
    in leapp-repository
    Resolves: #2017115


author: Petr Stodulka <pstodulk@redhat.com> - 0.1.6-3
changelog:
  - Updated dependencies to make possible the upgrade of the package
    during IPU 7 -> 8
  - Resolves: #2037743


author: Bob Mader <bob@redhat.com> - 0.1.7-1
changelog:
  - Update to 0.1.7
  - Make report UI compatible with report-schema 1.2.0
    Resolves: RHEL-55438
  - Fix remediation plan back button behavior
    Resolves: RHEL-30012


author: Martin Pitt <mpitt@redhat.com> - 2-1
changelog:
  - Update to upstream 2 release
  - Support podman API 1.3
  - Support running commands with arguments
  - Show the default command coming from image
  - Implement filtering of images and containers


author: Martin Pitt <mpitt@redhat.com> - 3-1
changelog:
  - Enable Commit button for running containers
  - Fix race condition with container deletion
  - Stop fetching all containers/images for each container/image event


author: Matej Marusak <mmarusak@redhat.com> - 10-1
changelog:
  - Support for user containers
  - Show list of containers that use given image
  - Show placeholder while loading containers and images
  - Fix setting memory limit - bug 1732713
  - Add container Terminal - bug 1703245
  - Related: RHELPLAN-25138


author: Jindrich Novy <jnovy@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates
  - Related: RHELPLAN-25138


author: Matej Marusak <mmarusak@redhat.com> - 10-1
changelog:
  - Support for user containers
  - Show list of containers that use given image
  - Show placeholder while loading containers and images
  - Fix setting memory limit rhbz#1732713
  - Add container Terminal rhbz#1703245


author: Jindrich Novy <jnovy@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates
  - Related: RHELPLAN-25139


author: Matej Marusak <mmarusak@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates


author: Jindrich Novy <jnovy@redhat.com> - 15-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/15
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 16-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/v16
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 17-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/17
  - Related: RHELPLAN-39206


author: Matej Marusak <mmarusak@redhat.com> - 15-1
changelog:
  - Drop obsolete functionality for Fedora Atomic
  - Localize dates and times
  - Make tests non-destructive, to support gating
  - Fix crash on filtering anonymous images
  - Translation updates
  - Show historical logs


author: Jindrich Novy <jnovy@redhat.com> - 25-3
changelog:
  - test: Cleanup images before pulling the ones we need - thanks to Matej Marusak
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 25-4
changelog:
  - replace docker.io with quay.io for gating tests due do
    docker.io new pull rate limit requirements
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 27.1-3
changelog:
  - another gating test fix - don't remove all containers but only admin ones
    thanks to Matej Marusak
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 69-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/69
  - use unified spec file
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 77-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/77
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 78-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/78
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 79-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/79
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 80-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/80
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 81-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/81
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 82-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/82
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 83-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/83
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 84-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 84.1-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
  - Related: Jira:RHEL-25557


author: Justin Stephenson <jstephen@redhat.com> - 4-1
changelog:
  - Release v4
  - Update parent id in metainfo file
  - Update package manifest
  - Fix rpmmacro to resolve correct path on CentOS7
  - Handle byte-array encoded journal data
  - Don't clobber cockpit bots directory
  - Move code out of deprecated React lifecycle functions


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6
  - Bump testlib to 229
  - Add binary recording test
  - Update UI to adopt PatternFly 4
  - Update dependencies
  - Use --all journalctl option
  - Fixed timezone issue by searching in client time
  - Bump cockpit test version from 199 to 219
  - Improve test coverage with more tests
  - Simplify and cleanup existing tests


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Remove bots sudo rm from Makefile
  - Use journalctl --utc for Logs view to handle DST
  - Add Applications Menu test
  - Install cockpit-packagekit in local VM
  - Set timezone for Logs Correlation test


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 2-1
changelog:
  - Release 2
  - Optimize performance when playing back flooded output recordings.
  - Make Logs View optional rendered with a toggle button.
  - Make Logs component a child of Recording component.
  - Fix Recording page column sorting in Google Chrome.
  - CSS updates for Patternfly 4 compatibility.
  - Replace term.js with maintained xterm.js library.
  - Fix hostname and username filtering.


author: mosquito <sensor.wen@gmail.com> - 1.22.2-7
changelog:
  - Add GL_ARB_shader_texture_lod and copy_sub_image support (#1421055)
  - Add pkgconfig(egl) BReq for rawhide
  - Move BReqs to pkgconfig


author: Richard Hughes <richard@hughsie.com> 1.4.0-1
changelog:
  - New upstream version
  - Port to the Meson build system
  - Correctly build the ICC transfer curve for Rec709
  - Do not spin the Huey LEDs when the sensor is embedded
  - Do not use /tmp to create profiles
  - Use a different Huey unlock code on the W700 laptop


author: Richard Hughes <richard@hughsie.com> 1.4.1-1
changelog:
  - New upstream version
  - Include all the files in the GIR target
  - Include the correct file when using Colord-1.0.gir
  - Use gio-2.0 when generating the VAPI


author: Richard Hughes <richard@hughsie.com> 1.4.2-1
changelog:
  - New upstream version
  - Avoid buffer overflow when reading profile_id
  - Fix the detection of duplicate EDIDs
  - Set cd-create-profile date to SOURCE_DATE_EPOCH


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version.
  - Install the cd-convert utility
  - Do not link against the unused gio-unix-2.0


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1757349


author: Jan Grulich <jgrulich@redhat.com> - 0.26-11
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990397


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-101.0.1
changelog:
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-127.0.2
changelog:
  - revert setting of x86 non-temporal threshold to 3/4 of thread shared cache
  Orabug: 31831625.
  Reviewed-by: Jose Marchesi <jose.marchesi@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-127.0.3
changelog:
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-127.0.4
changelog:
  - merge RH el8 u3 errata patches with Oracle patches
  Review-exception: Simple merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Carlos O'Donell <carlos@redhat.com> - 2.28-153
changelog:
  - Support SEM_STAT_ANY via semctl. Return EINVAL for unknown commands to semctl,
    msgctl, and shmctl. (#1912670)


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-151.0.1.el8_4
changelog:
  - merge RH patches for ol8-u4 release
  Review-exception: Patch merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.1
changelog:
  - Merge of RH patches for ol8-u5 beta release
  Review-exception: Routine merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.2
changelog:
  - Remove limit on MALLOC_MMAP_THRESHOLD tunable
  Orabug: 29630826
  Reviewed-by: DJ Delorie <dj@redhat.com> (upstream)


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.3
changelog:
  - Update siginfo constants from linux kernel
  - Backport of upstream commit
    89983cb37c9319806a551e8fe9f3a11ff8f973e1
  OraBug: 33734528
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
  - Remove limit on MALLOC_MMAP_THRESHOLD tunable
  Orabug: 29630826
  Reviewed-by: DJ Delorie <dj@redhat.com> (upstream)
  - Merge of RH patches for ol8-u5 beta release
  Review-exception: Routine merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.1
changelog:
  - Merge of patches for ol8-u5 beta release
  Review-exception: Routine merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.3
changelog:
  - Update siginfo constants from linux kernel
  - Backport of upstream commit
    89983cb37c9319806a551e8fe9f3a11ff8f973e1
  OraBug: 33734528
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.4
changelog:
  - Add perf improvements for exp, log, log2, pow (64-bit)
  Orabug: 33107603
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.5
changelog:
  - Reverted perf improvements for exp, log, log2, pow (64-bit)
  - due to library ABI mismatch issues
  Orabug: 33107603
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.2
changelog:
  - Remove limit on MALLOC_MMAP_THRESHOLD tunable
  Orabug: 29630826
  Review-exception: Simple change

  Tue Oct 5 2021 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.1
  - Merge of patches for ol8-u5 beta release
  Review-exception: Routine merge
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-164.0.5.3
changelog:
  - Merge external errata patches.
  -  Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-164.3
  -  CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak
     (#2032280)
  -  Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-164.2
  -  CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
     for "unix" and svcunix_create (#2045062).
  -  Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-164.1
  -  CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1 (#2032280)
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-188
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045063).


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.0.1
changelog:
  - Merge of patches for OL 8.6 beta
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex
  Orabug: 27982358.
  - Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  OraBug: 28481550.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.0.2
changelog:
  - Adding back two Oracle patches.
  - Update siginfo constants from linux kernel
  OraBug: 33734528
  - Remove limit on MALLOC_MMAP_THRESHOLD tunable
  Orabug: 29630826
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.1.0.1
changelog:
  - Merging patch to protect against errno changes in function lookup
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Carlos O'Donell <carlos@redhat.com> - 2.28-209
changelog:
  - Improve dynamic loader auditing interface (LD_AUDIT) (#2047981)
  - Add dlinfo() API support for RTLD_DI_PHDR (#2097898)


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
changelog:
  - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
  - These changes enable reading the realtime clock without a kernel syscall.
    OraBug: 30478315
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Florian Weimer <fweimer@redhat.com> - 2.28-211
changelog:
  - Preserve GLRO (dl_naudit) internal ABI (#2119304)
  - Avoid s390x ABI change due to z16 recognition on s390x (#2119304)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
changelog:
  - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
changelog:
  - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
  - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
    can be used for stack allocation.
  - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
    0, glibc will madvise the kernel not to use allow hugepages for stack
    allocations.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.4
changelog:
  - CVE-2023-4911: tunables: Terminate immediately if end of input is reached
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.4.6
changelog:
  - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode.
  - CVE-2203-4806: potential use-after-free in getaddrinfo.
  - CVE-2023-4813: potential use-after-free in gaih_inet (RHEL-2435).
  - CVE-2023-4813: work around RHEL-8 limitation in test (RHEL-2435).
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
changelog:
  - Forward port of Oracle patches.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.13
changelog:
  - Forward port of Oracle patches.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2
changelog:
  - Forward port of Oracle patches for ol8-u10
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.1
    - Forward port of Oracle patches for ol8-u10-beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-5-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.12
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.7
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-236.0.1.6
    - Forward port of Oracle patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-21-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.3
    - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-11-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.2
    - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-225.0.1
    - Merge of Oracle patches for ol8u8 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-211.0.1
    - Merge of Oracle patches for ol8u7 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-8-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-189.5.0.2
    - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
    - These changes enable reading the realtime clock without a kernel syscall.
      OraBug: 30478315
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-2-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-199.0.1
    - Merge of patches from c8s 199 with ol8u6 beta
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Update siginfo constants from linux kernel (OraBug: 33734528)
    - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
    - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
    - spin mutex (Orabug: 27982358)
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
    - add Ampere emag  to tunable cpu list (Patrick McGehearty)
    - add optimized memset for emag
    - add an ASIMD variant of strlen for falkor
      Orabug: 2700101.
    - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
    - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
      Both should test
        if (stream->_flags & _IO_USER_LOCK) == 0)
          _IO_lock_lock (*stream->_lock);
      OraBug: 28481550.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


