# changelog

author: Frederic Berat <fberat@redhat.com> - 1.16.5-9
changelog:
  - Fix tests environment failures due to LDFLAGS being set globally
  - Remove ExclusiveArch as there is no java dependency anymore


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.5-1
changelog:
  - Rebased to the latest upstream sources (see CHANGELOG.md)
  - Fixed broken filtering in create resource/fence device wizards in the web interface
  - Converted package to noarch
  - Added creation of .tarball-version file needed by autotools when building from untagged commits and fixed Source0 link to the tarball on GitHub
  - Modified build options of pcs for booth authfile fix for all Fedora versions
  - Added BuildRequires: pam for tier0 tests during build
  - Added BuildRequires: nodejs-npm for NodeJS packaging change since Fedora 38
  - Removed bundled rubygem thin and its associated BuildRequires: rubygems, rubygem-bundler, rubygem-daemons, gcc, gcc-c++
  - Added dependency rubygem-puma - replacement for rubygem thin
  - Added dependency nss-tools - for working with qdevice certificates
  - Added dependency fedora-logos - for the web interface favicon
  - Removed dependencies: rubygem-daemons, rubygem(webrick)
  - Resolves: rhbz#2166266


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.5-2
changelog:
  - Fix displaying differences between configuration checkpoints in “pcs config checkpoint diff” command
  - Fix “pcs stonith update-scsi-devices” command which was broken since Pacemaker-2.1.5-rc1
  - Fixed loading of cluster status in the web interface when fencing levels are configured
  - Fixed a vulnerability in pcs-web-ui-node-modules
  - Swapped BuildRequires: npm for BuildRequires: nodejs-npm in Fedora 37 because of NodeJS packaging change
  - Removed BuildRequires: rubygem-io-console
  - Removed dependency rubygem-eventmachine


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.6-1
changelog:
  - Rebased to the latest upstream sources (see CHANGELOG.md)
  - Updated pcs-web-ui
  - Removed dependency fedora-logos - favicon is now correctly provided by pcs-web-ui
  - Resolves: rhbz#2109852 rhbz#2170648


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.7-1
changelog:
  - Rebased to the latest upstream sources (see CHANGELOG.md)
  - Updated pcs-web-ui to 0.1.18
  - TLS cipher setting in pcsd now follows system-wide crypto policies by default
  - Added cockpit-ha-cluster subpackage that adds pcs-web-ui as a Cockpit application


author: Michal Pospíšil <mpospisi@redhat.com> - 0.11.7-4
changelog:
  - Bundled Python dependencies: dacite, pyagentx, pycurl, tornado
    Resolves: RHEL-26339
  - Bundled rubygems: backports, childprocess, ethon, ffi, mustermann, nio4r, puma, rack, rack-protection, rack-test, ruby2_keywords, sinatra, tilt
  - Converted pcs and pcs-snmp to be architecture dependent, cockpit-ha-cluster remains noarch


author: Michal Pospíšil <mpospisi@redhat.com> - 0.11.7-5
changelog:
  - Rebased to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-34783, RHEL-34792, RHEL-35428, RHEL-35670, RHEL-36612, RHEL-38478, RHEL-38479, RHEL-38481, RHEL-38487, RHEL-38489, RHEL-38491
  - Updated pcs-web-ui to 0.1.19
    Resolves: RHEL-38493, RHEL-38494, RHEL-38495, RHEL-38496
  - “Added” the Cockpit application cockpit-ha-cluster as a web interface for HA cluster management (this was already present because of package sync from Fedora 40)
    Resolves: RHEL-23048
  - Updated bundled rubygems: backports, childprocess, nio4r, puma, rack, rack-protection, sinatra
  - Bundled new rubygems: base64, rack-session, rackup, webrick


author: Kamil Dudka <kdudka@redhat.com> - 9.2-3
changelog:
  - copy: fix --reflink=auto to fallback in more cases (#2180056)
  - cksum: fix reporting of failed checks (#2180056)


author: Jan Macku <jamacku@redhat.com> - 8.3.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-38039 - HTTP headers eat all memory


author: Jan Macku <jamacku@redhat.com> - 8.4.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-38545 - SOCKS5 heap buffer overflow
      CVE-2023-38546 - cookie injection with none file


author: Jan Macku <jamacku@redhat.com> - 8.5.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-46218 - cookie mixed case PSL bypass
      CVE-2023-46219 - HSTS long file name clears contents


author: Jan Macku <jamacku@redhat.com> - 8.6.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-0853 - OCSP verification bypass with TLS session reuse
  - drop 001-dist-add-tests-errorcodes.pl-to-the-tarball.patch (replaced by upstream fix)
  - remove accidentally included mk-ca-bundle.1 man page (upstream bug #12843)


author: Jan Macku <jamacku@redhat.com> - 8.6.0-6
changelog:
  - revert "receive max buffer" + add test case
  - temporarily disable test 0313
  - remove suggests of libcurl-minimal in curl-full


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Remove gdb-6.5-missed-trap-on-step-test.patch.  Testing what happens
    when stepping over/through a statement which triggers a watchpoint
    is being added, upstream, to gdb.base/watchpoint.exp.


author: Kevin Buettner <kevinb@redhat.com> - 14.1-1
changelog:
  - Rebase to FSF GDB 14.1.
  - Update local patches:
      gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
      gdb-6.6-buildid-locate-rpm.patch
      gdb-6.6-buildid-locate.patch
      gdb-container-rh-pkg.patch
      gdb-core-open-vdso-warning.patch
      gdb-fedora-libncursesw.patch
      gdb-linux_perf-bundle.patch
  - Update backported patches which didn't make it into 14.1:
      gdb-rhbz-2232086-cpp-ify-mapped-symtab.patch
      gdb-rhbz-2232086-generate-gdb-index-consistently.patch
  - Drop upstreamed local patches:
      gdb-6.5-sharedlibrary-path.patch
  - Drop gdb-13.2 backports (which are now in gdb-14.1):
      gdb-binutils29988-read_indexed_address.patch
      gdb-bz2196395-debuginfod-legacy-openssl-crash.patch
      gdb-bz2237392-dwarf-obstack-allocation.patch
      gdb-bz2237515-debuginfod-double-free.patch
      gdb-rhbz2192105-ftbs-dangling-pointer
      gdb-rhbz2233961-CVE-2022-4806.patch
      gdb-rhbz2233965-memory-leak.patch
  - Adjust gdb.spec so that --with-mpfr is no longer passed to
    configure; doing so, combined with some configury changes triggered
    a latent build problem.


author: Alexandra Hájková <ahajkova@redhat.com> - 14.1-2
changelog:
  - Backport upstream commits 7ae9ecfd801 and 8170efad364 to avoid
    using _PyOS_ReadlineTState  (RHBZ 2250652).


author: Kevin Buettner <kevinb@redhat.com> - 14.1-4
changelog:
  - Backport upstream commit bc23ea51f8a83e9524dfb553baa8baacb29e68a9,
    potentially fixing RHBZ 2257562.


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Remove gdb-6.5-BEA-testsuite.patch, as it was upstreamed and
    will make its way back with the next rebase.


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Arjun Shankar <arjun@redhat.com> - 2.39-7
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 5d070d12b3a52bc44dd1b71743abc4b6243862ae:
  - x86: Expand the comment on when REP STOSB is used on memset
  - x86: Do not prefer ERMS for memset on Zen3+
  - x86: Fix Zen3/Zen4 ERMS selection (BZ 30994)
  - Add tst-gnu2-tls2mod1 to test-internal-extras
  - elf: Enable TLS descriptor tests on aarch64
  - arm: Update _dl_tlsdesc_dynamic to preserve caller-saved registers (BZ 31372)
  - Ignore undefined symbols for -mtls-dialect=gnu2
  - x86-64: Allocate state buffer space for RDI, RSI and RBX
  - x86-64: Update _dl_tlsdesc_dynamic to preserve AMX registers
  - x86: Update _dl_tlsdesc_dynamic to preserve caller-saved registers
  - x86-64: Save APX registers in ld.so trampoline
  - LoongArch: Correct {__ieee754, _}_scalb -> {__ieee754, _}_scalbf
  - powerpc: Placeholder and infrastructure/build support to add Power11 related changes.
  - powerpc: Add HWCAP3/HWCAP4 data to TCB for Power Architecture.


author: Florian Weimer <fweimer@redhat.com> - 2.39-8
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 31da30f23cddd36db29d5b6a1c7619361b271fb4:
  - iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)
  - x86_64: Exclude SSE, AVX and FMA4 variants in libm multiarch
  - Apply the Makefile sorting fix
  - powerpc: Fix ld.so address determination for PCREL mode (bug 31640)
  - x86-64: Simplify minimum ISA check ifdef conditional with if
  - x86-64: Don't use SSE resolvers for ISA level 3 or above
  - AArch64: Check kernel version for SVE ifuncs
  - aarch64: fix check for SVE support in assembler
  - aarch64/fpu: Sync libmvec routines from 2.39 and before with AOR
  - i386: Use generic memrchr in libc (bug 31316)


author: Florian Weimer <fweimer@redhat.com> - 2.39-9
changelog:
  - nscd is currently not build, so the security fixes below are not relevant.
  - Sync with upstream branch release/2.39/master,
    commit fd658f026f25cf59e8db243bc3b3e09cd5a20ba0:
  - elf: Also compile dl-misc.os with $(rtld-early-cflags)
  - CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680)
  - CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bug 31678)
  - CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678)
  - CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bug 31677)
  - x86: Define MINIMUM_X86_ISA_LEVEL in config.h [BZ #31676]
  - i386: ulp update for SSE2 --disable-multi-arch configurations
  - nptl: Fix tst-cancel30 on kernels without ppoll_time64 support


author: Florian Weimer <fweimer@redhat.com> - 2.39-11
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 97bb89668d7171164975f3dc895e38343a2f3a95:
  - Force DT_RPATH for --enable-hardcoded-path-in-tests
  - elf: Only process multiple tunable once (BZ 31686)
  - Add a test to check for duplicate definitions in the static library
  - i686: Fix multiple definitions of __memmove_chk and __memset_chk
  - i586: Fix multiple definitions of __memcpy_chk and __mempcpy_chk
  - time: Allow later version licensing.
  - nscd: Use time_t for return type of addgetnetgrentX
  - login: structs utmp, utmpx, lastlog _TIME_BITS independence (bug 30701)
  - login: Check default sizes of structs utmp, utmpx, lastlog


author: Arjun Shankar <arjun@redhat.com> - 2.39-15
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 6ade91c21140d8c803c289932dbfc74537f65a1f:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - misc: Add support for Linux uio.h RWF_NOAPPEND flag
  - i386: Disable Intel Xeon Phi tests for GCC 15 and above (BZ 31782)
  - Reinstate generic features-time64.h
  - Always define __USE_TIME_BITS64 when 64 bit time_t is used
  - socket: Use may_alias on sockaddr structs (bug 19622)
  - parse_fdinfo: Don't advance pointer twice [BZ #31798]
  - LoongArch: Fix undefined `__memset_aligned` reference in ld.so linking.
  - socket: Add new test for connect
  - libsupport: Add xgetpeername
  - x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.25-1
changelog:
  - New upstream release
  - Fix PMTUd issues
  - Update docs and upstream URLs
  - Fix spec file for test suite build conditional
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.26-1
changelog:
  - New upstream release
  - Improve TX performance and use less CPU
  - minor other improvements
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.27-1
changelog:
  - New upstream release
  - Fix potential startup race condition (corosync use case)
  - Fix crypto config check
  - Minor API cleanup
  - Test suite fixes


author: Christine Caulfield <ccaulfie@redhat.com> 2.0.6-3
changelog:
  Don't run tests on Fedora. We have a local CI and it just loads
    up the Fedora build system (and occasionally fails for loading reasons)


author: Karel Zak <kzak@redhat.com> - 2.39.2-1
changelog:
  - fix libmount atime regression
  - upgrade to v2.39.2
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes


author: Kamil Dudka <kdudka@redhat.com> - 3.20.1-1
changelog:
  - new upstream version 3.20.1, which fixes the following security issue:
      CVE-2022-1348 - potential DoS from unprivileged users via the state file


author: Josef Ridky <jridky@redhat.com> - 1:5.9.3-8
changelog:
  - Fix warning for RPM DB
  - split perl module into separate package that doesn't pull in gcc and
    other build dependencies (thanks Chris Adams)
  - don't install MakefileSubs.pm - it's just needed at module build time
    (thanks Chris Adams)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Steve Dickson <steved@redhat.com> 2.6.3-1.rc3
changelog:
  - Updated to the latest RC release: nfs-utils-2-6-4-rc3
  - Fixed a regression in the junction code (bz 2213669)


author: Christian Glombek <cglombek@redhat.com> 2.6.3-2.rc3
changelog:
  - Rely on presets and use standard macros for systemd unit handling (bz 2218006)
  - Cleanup is moved to %posttrans


author: John Wolfe <jwolfe@vmware.com> - 12.3.0-1
changelog:
  - Package new upstream version of open-vm-tools-12.3.0-22234872.
    - Fix for CVE-2023-20900 - a SAML token signature bypass vulnerability.
    - Fix for CVE-2023-20867 - an Authentication Bypass vulnerability.
    - Linux quiesced snapshots have been updated to avoid intermittent hangs
      of the vmtoolsd process.
      - File systems prefrozen by custom quiescing scripts must be listed on the
        "excludedFileSystems" setting in the "vmbackup" section of the tools.conf
        file.
      - A tools.conf configuration setting is available to temporaily direct
        Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
        of ignoring file systems already frozen.
    - A number of Coverity reported issues have been addressed.
    - A number of GitHub issues and pull requests have been handled.


author: John Wolfe <jwolfe@vmware.com> - 12.3.0-3
changelog:
  - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass.
  - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper
    file descriptor hijack vulnerability


author: John Wolfe <jwolfe@vmware.com> - 12.3.5-1
changelog:
  - Package new upstream version of open-vm-tools-12.3.5-22544099.
    . fix for CVE-2023-34058 - another SAML token signature bypass vulnerability.
    . fix for CVE-2023-34059 - a file descriptor hijack vulnerability in the
                               vmware-user-suid-wrapper.
    . address https://github.com/vmware/open-vm-tools/issues/310
  - Remove CVE-2023-34058.patch and CVE-2023-34059.patch as no longer needed.


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30345]
  - Resolves: [RHEL-30345]
    ([ESXi][RHEL10]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-36292]
  - Resolves: RHEL-36292
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools [rhel-10])


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.1.rc1
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc1,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc1


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.3.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.4.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc3


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.4.rc4
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc4,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc4


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-4
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.7,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.0-498
changelog:
  - 5.38.0 bump (see <https://metacpan.org/pod/release/RJBS/perl-5.38.0/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <mhroncok@redhat.com> - 3.12.2-3
changelog:
  - Fix tests for XMLPullParser with Expat 2.6.0
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.13.0-2
changelog:
  - configure: fix "C preprocessor "gcc -E" fails sanity check" error
    with autoconf 2.72+

    Resolves: rhbz#2256836


author: Zbigniew Jedrzejewski-Szmek <zbyszek@in.waw.pl> - 4.13.0-2.3
changelog:
  - Replace /sbin by /usr/sbin in some paths so that the package remains
    installable without full filepath metadata (rhbz#2229951)


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - Having de-allocation in the reverse order compared to
    allocation seems to make gcc-12 static analysis of
    dynamic-memory-management happy.


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255-1
changelog:
  - Version 255
  - Just a few bugfixes since 255-rc4: seccomp filters, logging,
    documentation, systemd-repart
  - Includes a hardware database update.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255-3
changelog:
  - Move config files to /usr/lib/systemd (e.g. /etc/systemd/system.conf →
    /usr/lib/systemd/systemd.conf). Both config file locations were already
    supported, and the files installed in /etc/ were "empty" (i.e. they had
    only comments and section headers). The move does not change the
    configuration, but just makes /etc more empty by default. See
    https://github.com/systemd/systemd/commit/6495361c7d for more discussion
    and details.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255.2-1
changelog:
  - Version 255.2
  - Fixes missing DNSSEC validity check in SOA DNS packets (CVE-2023-7008)
  - systemd-resolved and systemd-networkd are restarted after an upgrade.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255.3-1
changelog:
  - Version 255.3
  - A bunch of various fixes for memory and behaviour, in many different
    components (bootctl, systemd, udev, systemd-networkd, systemd-homed,
    systemd-logind, systemd-resolve, systemd-repart, systemd-analyze,
    systemd-dissect, systemd-boot, pam modules, systemd-storagetm, systemd-
    journal-remote, kernel-install)
  - Improved detection of virtualization (Google Compute Engine, Apple Virt)
  - Updates for shell completions and docs
  - An update for hardware database


