# changelog

author: Frederic Berat <fberat@redhat.com> - 1.16.5-9
changelog:
  - Fix tests environment failures due to LDFLAGS being set globally
  - Remove ExclusiveArch as there is no java dependency anymore


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots


author: Jan Friesse <jfriesse@redhat.com> - 1.2-1
changelog:
  - Resolves: RHEL-22016
  - Resolves: RHEL-40410

  - New upstream release (RHEL-40410)
  - Add support for GnuTLS and stop using libgcrypt (RHEL-22016)


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.7-1
changelog:
  - Rebased to the latest upstream sources (see CHANGELOG.md)
  - Updated pcs-web-ui to 0.1.18
  - TLS cipher setting in pcsd now follows system-wide crypto policies by default
  - Added cockpit-ha-cluster subpackage that adds pcs-web-ui as a Cockpit application


author: Michal Pospíšil <mpospisi@redhat.com> - 0.11.7-4
changelog:
  - Bundled Python dependencies: dacite, pyagentx, pycurl, tornado
    Resolves: RHEL-26339
  - Bundled rubygems: backports, childprocess, ethon, ffi, mustermann, nio4r, puma, rack, rack-protection, rack-test, ruby2_keywords, sinatra, tilt
  - Converted pcs and pcs-snmp to be architecture dependent, cockpit-ha-cluster remains noarch


author: Michal Pospíšil <mpospisi@redhat.com> - 0.11.7-5
changelog:
  - Rebased to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-34783, RHEL-34792, RHEL-35428, RHEL-35670, RHEL-36612, RHEL-38478, RHEL-38479, RHEL-38481, RHEL-38487, RHEL-38489, RHEL-38491
  - Updated pcs-web-ui to 0.1.19
    Resolves: RHEL-38493, RHEL-38494, RHEL-38495, RHEL-38496
  - “Added” the Cockpit application cockpit-ha-cluster as a web interface for HA cluster management (this was already present because of package sync from Fedora 40)
    Resolves: RHEL-23048
  - Updated bundled rubygems: backports, childprocess, nio4r, puma, rack, rack-protection, sinatra
  - Bundled new rubygems: base64, rack-session, rackup, webrick


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.0a1-1
changelog:
  - Rebased to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-29739, RHEL-34783, RHEL-38480, RHEL-38484, RHEL-38486
  - Fixed grammatical error in pcs-web-ui
    Resolves: RHEL-38496


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.0~a1-3
changelog:
  - Since 0.12.0~a1-1, pcs-web-ui is no longer a standalone application running on port 2224. It is now accessible through RHEL web console after installing the HA Cluster Management add-on (cockpit and cockpit-ha-cluster packages, pcsd must be running)
  - Updated pcs-web-ui to 0.1.20
    Resolves: RHEL-34783


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.5-1
changelog:
  - rebase to latest upstream version
  - sync i18n patch with SUSE (Kudos to Berny Völker!)
  - add some test dependencies to execute additional part of the upstream test-suite
  - enable LTO on ppc64le (RHEL-39977)


author: Jan Macku <jamacku@redhat.com> - 8.5.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-46218 - cookie mixed case PSL bypass
      CVE-2023-46219 - HSTS long file name clears contents


author: Jan Macku <jamacku@redhat.com> - 8.6.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-0853 - OCSP verification bypass with TLS session reuse
  - drop 001-dist-add-tests-errorcodes.pl-to-the-tarball.patch (replaced by upstream fix)
  - remove accidentally included mk-ca-bundle.1 man page (upstream bug #12843)


author: Jan Macku <jamacku@redhat.com> - 8.6.0-6
changelog:
  - revert "receive max buffer" + add test case
  - temporarily disable test 0313
  - remove suggests of libcurl-minimal in curl-full


author: Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
changelog:
  - disable OpenSSL Engine API support (RHEL-30436)
  - setopt: Fix disabling all protocols (CVE-2024-2004)
  - http2: push headers better cleanup (CVE-2024-2398)


author: Paul Donohue <git@PaulSD.com> - 0.9.7-2
changelog:
  - Modify 0006-RH-add-mpathconf.patch
  - Modify 0008-RH-reset-default-find_mutipaths-value-to-off.patch
    * Fix find_multipaths values in docs and mpathconf


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.7-5
changelog:
  - Add 0014-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
    * Fix auto_resize code to avoid a segfault
  - Add 0015-multipathd-fix-auto-resize-configuration.patch
    * Fix auto_resize default value


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-1
changelog:
  - Update source to upstream version 0.9.9
    * Previous patches 0014-0015 are included in the soruce tarball
    * Patch 0001 is from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0001-0013 are now 0002-0014
  - Install /lib/udev/rules.d/99-z-dm-mpath-late.rules
  - Resolves: RHEL-50698


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.13.1-7
changelog:
  - lib/all agents: use r"" to avoid SyntaxWarnings 
    Resolves: RHEL-35663
  - fix pycurl bundled path
    Resolves: RHEL-35986


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Keith Seitz <keiths@redhat.com> - 14.2-1.el10
changelog:
  - Rebase to gdb-14.2 and update all bug references:
    RHEL-39326 "better support for $pc not saved"
    RHEL-39325 "Infcalls from B/P conditions in multi-threaded inferiors"
    RHEL-39324 "gdb: s390: Add arch14 record/replay support"
    RHEL-24764 "Add support for Power11 options"
    RHEL-34213 "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (Keith Seitz, RHEL-33256)


author: Florian Weimer <fweimer@redhat.com> - 2.39-8
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 31da30f23cddd36db29d5b6a1c7619361b271fb4:
  - iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)
  - x86_64: Exclude SSE, AVX and FMA4 variants in libm multiarch
  - Apply the Makefile sorting fix
  - powerpc: Fix ld.so address determination for PCREL mode (bug 31640)
  - x86-64: Simplify minimum ISA check ifdef conditional with if
  - x86-64: Don't use SSE resolvers for ISA level 3 or above
  - AArch64: Check kernel version for SVE ifuncs
  - aarch64: fix check for SVE support in assembler
  - aarch64/fpu: Sync libmvec routines from 2.39 and before with AOR
  - i386: Use generic memrchr in libc (bug 31316)


author: Florian Weimer <fweimer@redhat.com> - 2.39-9
changelog:
  - nscd is currently not build, so the security fixes below are not relevant.
  - Sync with upstream branch release/2.39/master,
    commit fd658f026f25cf59e8db243bc3b3e09cd5a20ba0:
  - elf: Also compile dl-misc.os with $(rtld-early-cflags)
  - CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680)
  - CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bug 31678)
  - CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678)
  - CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bug 31677)
  - x86: Define MINIMUM_X86_ISA_LEVEL in config.h [BZ #31676]
  - i386: ulp update for SSE2 --disable-multi-arch configurations
  - nptl: Fix tst-cancel30 on kernels without ppoll_time64 support


author: Florian Weimer <fweimer@redhat.com> - 2.39-11
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 97bb89668d7171164975f3dc895e38343a2f3a95:
  - Force DT_RPATH for --enable-hardcoded-path-in-tests
  - elf: Only process multiple tunable once (BZ 31686)
  - Add a test to check for duplicate definitions in the static library
  - i686: Fix multiple definitions of __memmove_chk and __memset_chk
  - i586: Fix multiple definitions of __memcpy_chk and __mempcpy_chk
  - time: Allow later version licensing.
  - nscd: Use time_t for return type of addgetnetgrentX
  - login: structs utmp, utmpx, lastlog _TIME_BITS independence (bug 30701)
  - login: Check default sizes of structs utmp, utmpx, lastlog


author: Arjun Shankar <arjun@redhat.com> - 2.39-15
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 6ade91c21140d8c803c289932dbfc74537f65a1f:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - misc: Add support for Linux uio.h RWF_NOAPPEND flag
  - i386: Disable Intel Xeon Phi tests for GCC 15 and above (BZ 31782)
  - Reinstate generic features-time64.h
  - Always define __USE_TIME_BITS64 when 64 bit time_t is used
  - socket: Use may_alias on sockaddr structs (bug 19622)
  - parse_fdinfo: Don't advance pointer twice [BZ #31798]
  - LoongArch: Fix undefined `__memset_aligned` reference in ld.so linking.
  - socket: Add new test for connect
  - libsupport: Add xgetpeername
  - x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)


author: Arjun Shankar <arjun@redhat.com> - 2.39-16
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 7f9f25f255ee2c00178779fbce502f4b94b848b9:
  - Linux: Include <dl-symbol-redir-ifunc.h> in dl-sysdep.c
  - x86: Properly set x86 minimum ISA level [BZ #31883]
  - x86: Properly set MINIMUM_X86_ISA_LEVEL for i386 [BZ #31867]
  - localedata: ssy_ER: Fix syntax error
  - malloc: New test to check malloc alternate path using memory obstruction
  - malloc: Improve aligned_alloc and calloc test coverage.
  - malloc/Makefile: Split and sort tests
  - x86/cet: fix shadow stack test scripts


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.25-1
changelog:
  - New upstream release
  - Fix PMTUd issues
  - Update docs and upstream URLs
  - Fix spec file for test suite build conditional
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.26-1
changelog:
  - New upstream release
  - Improve TX performance and use less CPU
  - minor other improvements
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.27-1
changelog:
  - New upstream release
  - Fix potential startup race condition (corosync use case)
  - Fix crypto config check
  - Minor API cleanup
  - Test suite fixes


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Steve Dickson <steved@redhat.com> 2.6.3-1.rc3
changelog:
  - Updated to the latest RC release: nfs-utils-2-6-4-rc3
  - Fixed a regression in the junction code (bz 2213669)


author: Christian Glombek <cglombek@redhat.com> 2.6.3-2.rc3
changelog:
  - Rely on presets and use standard macros for systemd unit handling (bz 2218006)
  - Cleanup is moved to %posttrans


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: John Wolfe <jwolfe@vmware.com> - 12.3.0-1
changelog:
  - Package new upstream version of open-vm-tools-12.3.0-22234872.
    - Fix for CVE-2023-20900 - a SAML token signature bypass vulnerability.
    - Fix for CVE-2023-20867 - an Authentication Bypass vulnerability.
    - Linux quiesced snapshots have been updated to avoid intermittent hangs
      of the vmtoolsd process.
      - File systems prefrozen by custom quiescing scripts must be listed on the
        "excludedFileSystems" setting in the "vmbackup" section of the tools.conf
        file.
      - A tools.conf configuration setting is available to temporaily direct
        Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
        of ignoring file systems already frozen.
    - A number of Coverity reported issues have been addressed.
    - A number of GitHub issues and pull requests have been handled.


author: John Wolfe <jwolfe@vmware.com> - 12.3.0-3
changelog:
  - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass.
  - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper
    file descriptor hijack vulnerability


author: John Wolfe <jwolfe@vmware.com> - 12.3.5-1
changelog:
  - Package new upstream version of open-vm-tools-12.3.5-22544099.
    . fix for CVE-2023-34058 - another SAML token signature bypass vulnerability.
    . fix for CVE-2023-34059 - a file descriptor hijack vulnerability in the
                               vmware-user-suid-wrapper.
    . address https://github.com/vmware/open-vm-tools/issues/310
  - Remove CVE-2023-34058.patch and CVE-2023-34059.patch as no longer needed.


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30345]
  - Resolves: [RHEL-30345]
    ([ESXi][RHEL10]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-36292]
  - Resolves: RHEL-36292
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-3
changelog:
  - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732]
  - Resolves: RHEL-40732
    (Drop unneeded gdk-pixbuf-xlib dependency)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 9.3p1-13
changelog:
  - Fix issue with read-only ssh buffer during gssapi key exchange (rhbz#1938224)
  - https://github.com/openssh-gsskex/openssh-gsskex/pull/19


author: Daniel Milnes <daniel@daniel-milnes.uk> - 9.6p1-1
changelog:
  - Update to OpenSSH 9.6
    Original patches from https://src.fedoraproject.org/rpms/openssh/pull-request/63
    Tuned by Dmitry Belyavskiy for GSS and PKCS#11 URI processing


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.3
changelog:
  - Correctly audit hostname and IP address (RHEL-22316)
  - Make default key sizes configurable in sshd-keygen (RHEL-26454)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.5
changelog:
  - Build OpenSSH without ENGINE API
    Resolves: RHEL-45507
  - Remove pam_ssh_agent_auth subpackage
    Resolves: RHEL-45002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-2.0
changelog:
  - Temporary disabling self-test
    Related: RHEL-42635
  - Change ssh-keygen defaults in FIPS mode
    Resolves: RHEL-37324
  - Use FIPS-compatible API for key derivation RHEL-10
    Resolves: RHEL-43592


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - Disallow SHA1 at SECLEVEL2 in OpenSSL
    Resolves: RHEL-39962
  - SHA-1 signature shouldn't work in normal mode
    Resolves: RHEL-36677


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.3.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.4.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc3


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-0.4.rc4
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.1.7-rc4,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7-rc4


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.7-4
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.7,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.7


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.13.0-2
changelog:
  - configure: fix "C preprocessor "gcc -E" fails sanity check" error
    with autoconf 2.72+

    Resolves: rhbz#2256836


author: Zbigniew Jedrzejewski-Szmek <zbyszek@in.waw.pl> - 4.13.0-2.3
changelog:
  - Replace /sbin by /usr/sbin in some paths so that the package remains
    installable without full filepath metadata (rhbz#2229951)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.15.1-1
changelog:
  - Rebase to resource-agents 4.15.1 upstream release
  - IPaddr2: change default for lvs_ipv6_addrlabel to true to avoid
    last added IP becoming src IP
  - powervs-subnet: new resource agent

    Resolves: RHEL-50378, RHEL-46557, RHEL-50380


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: systemd maintenance team <systemd-maint@redhat.com> - 256-2
changelog:
  - logind: set RemoveIPC to false by default (RHEL-40924)
  - tmpfiles: don't create resolv.conf -> stub-resolv.conf symlink (RHEL-40924)
  - rc-local: order after network-online.target (RHEL-40924)
  - random-util: increase random seed size to 1024 (RHEL-40924)
  - journal: don't enable systemd-journald-audit.socket by default (RHEL-40924)
  - journald.conf: don't touch current audit settings (RHEL-40924)
  - rules: add elevator= kernel command line parameter (RHEL-40924)
  - pid1: bump DefaultTasksMax to 80% of the kernel pid.max value (RHEL-40924)
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (RHEL-40924)
  - core: decrease log level of messages about use of KillMode=none (RHEL-40924)
  - meson: rename libbasic to libbasic_static (RHEL-46020)
  - meson: build libsystemd-core via an intermediate static library (RHEL-46020)
  - meson: add option to build systemd-executor "statically" (RHEL-46020)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-3
changelog:
  - taint: remove unmerged-bin (RHEL-46277)
  - presets: remove resolved (RHEL-46576)
  - remove resolved scriptlets
  - don't install tests


author: systemd maintenance team <systemd-maint@redhat.com> - 256-6
changelog:
  - doc: add downstream CONTRIBUTING document (RHEL-40924)
  - ci: allow `policy` as rhel-only keyword (RHEL-40924)
  -  ci: run mkosi test only for Fedora and CentOS Stream (RHEL-40924)
  - taint: remove unused variable `usr_sbin` (RHEL-40924)
  - packit: drop the libarchive workaround (RHEL-40924)
  - packit: drop the dependency on python3-zstd (RHEL-40924)
  - coredump: by default process and store core files up to 1GiB (RHEL-46778)
  - don't ship systemd-ssh-generator harder (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-8
changelog:
  - Avoid /tmp being mounted as tmpfs without the user's will (RHEL-40924)
  - unit: don't add Requires for tmp.mount (RHEL-40924)
  - units: add [Install] section to tmp.mount (RHEL-40924)
  - units: don't enable tmp.mount statically in local-fs.target (RHEL-40924)


