# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-9
changelog:
  - Bump version to 1.3.8.4-9
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-10
changelog:
  - Bump verison to 1.3.8.4-10
  - Resolves: Bug 1614501 - Disable nunc-stans by default
  - Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-11
changelog:
  - Bump version to 1.3.8.4-11
  - Resolves: Bug 1614820 - Server crash through modify command with large DN


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-12
changelog:
  - Bump version to 1.3.8.4-12
  - Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-13
changelog:
  - Bump version to 1.3.8.4-13
  - Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-16
changelog:
  - Bump version to 1.3.8.4-16
  - Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-18
changelog:
  - Bump version to 1.3.8.4-18
  - Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex


author: Thomas Haller <thaller@redhat.com> - 1:1.12.0-0.1
changelog:
  - Update to upstream release 1.11.90 (release candidate) (rh #1592311)
  - libnm: properly handle cancelling of async operations (rh #1555281)
  - libnm: support handling checkpoints (rh #1496739)
  - core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
  - core: rework and improve IPv4 address collission detection (rh #1507864)
  - wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
  - macsec: enable sending SCI by default and make it configurable (rh #1588041)
  - ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
  - wwan: improve failure reason for unsupported IP methods (rh #1459529)
  - tun: use netlink kernel API for tun devices if available (rh #1547213)
  - ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
  - dhcp: improve handling DHCP timeouts (rh #1573780)
  - dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
  - dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
  - dns: avoid updating resolv.conf when exiting (rh #1541031)
  - ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
  - ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
  - iface-helper: fix invalid reentrant call to platform (rh #1546656)
  - doc: various improvments to documentation (rh #1543832)


author: Thomas Haller <thaller@redhat.com> - 1:1.12.0-1
changelog:
  - Update to upstream 1.12.0 release (rh #1592311)
  - device: improve MTU handling for VLAN (rh #1586191)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-2
changelog:
  - device: disable rp_filter handling (rh #1593194)
  - ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.12.0-3
changelog:
  - cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
  - po: import Japanese translation (rh #1569438)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-6
changelog:
  - dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
  - initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
  - cli: fix parsing vpn secrets from password file (rh #1628946)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-7
changelog:
  - manager: accept non-null device for VPN activations (rh #1641174)
  - drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-18
changelog:
  - Start the cloud-init init local service after the dbus socket is created
    so that the hostnamectl command works.
    Resolves: rhbz#1450521


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-23
changelog:
  - Fix a bug tha caused cloud-init to fail as a result of trying
    to rename bonds.
    Resolves: rhbz#1512247


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-24
changelog:
  - Set DHCP_HOSTNAME on Azure to allow for the hostname to be
    published correctly when bouncing the network.
    Resolves: rhbz#1434109


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-1.el7_6.1
changelog:
  - ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1633282]
  - ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1633282]
  - ci-azure-Add-reported-ready-marker-file.patch [bz#1633282]
  - ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1633282]
  - Resolves: bz#1633282
    ([Azure] cloud-init fails to mount /dev/sdb1 after stop(deallocate)&&start VM)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16
changelog:
  - disable mail from anacron with empty MAILTO
  - crontab: do not block access with PAM when running as root
  - improve the crontab man page
  - do not hardcode system_u selinux user but use the user from
    the current context


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17
changelog:
  - make anacron not to contradict itself in syslog
    (job output does not have to be necessarily mailed)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - fix regression - spurious PAM log message from crontab (#1479064)
  - allow empty variables in crontabs (#1439217)


author: Marcel Plch <mplch@redhat.com> - 1.4.11-20
changelog:
  - Fix race condition when crontab is modified the same second
    before and after reading the crontab
  - Resolves: rhbz#1638691


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.179-3
changelog:
  - Add convenient conversions between stripe and linear.
  - Fix snapshot hanging on shutdown.
  - Fix internal error in lvs while pvmove in progress.
  - Fix more coverity issues.
  - Improve message for pvresize.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-1
changelog:
  - Never send any discard ioctl with test mode.
  - Fix thin-pool alloc which needs same PV for data and metadata.
  - Enhance vgcfgrestore to check for active LVs in restored VG.
  - Cache can use metadata format 2 with cleaner policy.
  - Fix lvmetad hanging on shutdown.
  - Fix check if resized PV can also fit metadata area.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-2
changelog:
  - Add vdo plugin for monitoring VDO devices.
  - Reject conversions on raid1 LVs with split tracked SubLVs.
  - Reject conversions on raid1 split tracked SubLVs.
  - Fix dmstats list failing when no regions exist.
  - Reject conversions of LVs under snapshot.
  - Limit suggested options on incorrect option for lvconvert subcommand.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-3
changelog:
  - Fix lvconvert --splitmirror for mirror type (2.02.178).
  - Do not pair cache policy and cache metadata format.
  - Fix mirrors honoring read_only_volume_list.
  - Fix vgcreate with sanlock when PVs are created automatically.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-7
changelog:
  - Fix ordering of lvm2 activation and rbdmap services.
  - Fix to avoid locking collisions when monitoring thin-pools.


author: Christopher Snyder <csnyder@redhat.com> 1.21.5-1
changelog:
  - Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
  - 1568609: Updated man page for --after list option (aparadka@redhat.com)
  - Get Initial Setup Addon to run during installation in Vagrant
    (jhnidek@redhat.com)
  - ENT-447 Create .desktop file that opens web page with our cockpit plugin
    (jhnidek@redhat.com)
  - ENT-481 service-level command & options now update syspurpose metadata
    (nmoumoul@redhat.com)
  - 1560727: Search for proxy auth message in whole error string
    (aria.paradkar@gmail.com)
  - 1555384: get_libexecdir now returns a string instead of bytes
    (aria.paradkar@gmail.com)
  - Added generic set/unset and add/remove commands to syspurpose
    (crog@redhat.com)
  - ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
  - 1574706: Create python2-subscription-manager-rhsm properly
    (jhnidek@redhat.com)
  - Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
  - 1574529: Fix rhsmcertd integer overflow on i386 & i686 (csnyder@redhat.com)
  - Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)


author: Christopher Snyder <csnyder@redhat.com> 1.22.1-1
changelog:
  - 1571998: Ignore HTB repos (nmoumoul@redhat.com)
  - 1589296: subman list option --after now named --afterdate
    (aparadka@redhat.com)
  - 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
    (csnyder@redhat.com)
  - Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
  - 1553266: When d-bus methods are unavailable, show appropriate message. *
    Added a "safe call" mechanism that makes the initial dbus calls
    (entitlementService, configService, productsService) only if the service is
    available, tries to restart the rhsm service if possible, and otherwise
    failing gracefully. * Added new UI curtain that provides a meaningful message
    and advice to the end user. * Re-added utility method statusUpdateFailed that
    was accidentally deleted. (nmoumoul@redhat.com)
  - 1580996: Fix comparision of objects in Python 3 (ENT-578)
    (jhnidek@redhat.com)
  - Make xauth Idempotent again (csnyder@redhat.com)
  - Fixes missing locale issues while running nosetests (csnyder@redhat.com)
  - Remove freezegun (khowell@redhat.com)
  - 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
    (jhnidek@redhat.com)
  - ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
  - Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
  - 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
  - ENT-447 Add icons to RPM package for subman cockpit plugin
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.23.1-1
changelog:
  - Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
  - Change usage_type to usage (csnyder@redhat.com)
  - ENT-715 Sync syspurpose with server (csnyder@redhat.com)
  - 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
  - 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
  - Improve test setup for syspurpose tests. (awood@redhat.com)
  - Two simple fixes for syspurpose (jhnidek@redhat.com)
  - Raise ioerr when necessary during sp read (csnyder@redhat.com)
  - ENT-720 Adds the addons subcommand (csnyder@redhat.com)
  - 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
  - Replace lsb-release in spec and Makefile (khowell@redhat.com)
  - Mock out syspurpose code from being executed in subman tests
    (csnyder@redhat.com)
  - ENT-584 syspurpose UTF-8 support & better formatting - All syspurpose
    operations now support UTF-8 - syspurpose.json now has user-friendly
    indentation (nmoumoul@redhat.com)
  - ENT-446 Report systempurpose on registration (csnyder@redhat.com)
  - 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
  - ENT-721: Usage command (wpoteat@redhat.com)
  - ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
    override an existing value that was added by the 'set' command, but it will
    be maintained and added in a list along with the newly added value. - 'add'
    will now not add an element to a list if the list already contains it (no
    duplicates). - 'remove' will now unset the current value, if that turns out
    to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
  - Move syspurpose out of packages directory. (awood@redhat.com)
  - Correct small problems in syspurpose. (awood@redhat.com)
  - ansible vagrant QOL fixes (khowell@redhat.com)
  - ENT-723: Add System Purpose Status to System Status output
    (wpoteat@redhat.com)
  - Improve debug logging for release listing (khowell@redhat.com)
  - Remove other references to python-kitchen. (awood@redhat.com)
  - Make build_ext a proper dependency. (awood@redhat.com)
  - Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
  - Move clean command to common build_ext module. (awood@redhat.com)
  - Only gather optparse strings in subscription-manager. (awood@redhat.com)
  - Move syspurpose source files to be under package directory.
    (awood@redhat.com)
  - Look for source files based on package directory locations.
    (awood@redhat.com)
  - Add gettext calls to syspurpose. (awood@redhat.com)
  - Load build_ext i18n commands in setup.py (awood@redhat.com)
  - Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
  - Do not install subman-gui from setup.py by default (khowell@redhat.com)
  - ENT-591 Handle when syspurpose.json is missing & create it.
    (nmoumoul@redhat.com)
  - Fix indeterminate unit test failure. (awood@redhat.com)
  - Removal of python-kitchen (wpoteat@redhat.com)
  - ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
    commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
    commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
  - ENT-589 Intentctl -> syspurpose (csnyder@redhat.com)
  - ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
  - ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
  - ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
  - 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
    (jhnidek@redhat.com)
  - Make vagrant setup more flexible (khowell@redhat.com)
  - ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
  - 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
  - Replace curly quote with straight quote (khowell@redhat.com)
  - Add implementation of filesystem watcher (aparadka@redhat.com)
  - 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
    (adarshvritant@gmail.com)
  - ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
  - 1576423: Polished changes provided in #1816 and added unit test.
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.23.3-1
changelog:
  - 1606435: Rename the async module for compatibility with python 3.7; ENT-737
    (csnyder@redhat.com)
  - Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
  - Display both new and old value in syspurpose diff message
    (csnyder@redhat.com)
  - Fix sending single value of addons. (jhnidek@redhat.com)
  - Fix synchronization of usage with candlepin (jhnidek@redhat.com)
  - 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
  - Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
  - ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
  - 1609048: Replacement of imp module with importlib; ENT-758
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.21.10-1
changelog:
  - Updated translations (csnyder@redhat.com)
  - 1623262: Make automatic enablement of yum plugins working again; ENT-820
    (jhnidek@redhat.com)


author: Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13
changelog:
  - fall back to Basic auth if Negotiate fails
    Resolves: #1490998
  - handle request-pull when multiple tags point to the same commit
    Resolves: #1192146


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
changelog:
  - Backport fix for CVE-2018-11235
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15
changelog:
  - move instaweb to separate git-instaweb subpackage.
  	Resolves: #1213059
  - move gnome-keyring to a separate git-gnome-keyring subpackage.
  	Resolves: #1284081


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16
changelog:
  - Remove EL-5 settings and old Fedora conditionals.
    Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
    2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
  - Fix builds using '--without docs'
  - Change git-instaweb default from lighttpd(not available in rhel7) to
    apache2.
  - Add requires for git-{instaweb,gnome-keyring} to pull them, when
    installing git-all.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17
changelog:
  - Correctly return an error from fsck on encountering a .gitmodules symlink.
    This was broken in the debian 2.1.x backport and found by covscan.
    Fix the test to catch this.
  - Correct a typo in changelog.


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19
changelog:
  - Fix httpd modules path to be independent from system architecture.
  Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
  Resolves: #1213059


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20
changelog:
  - Fix CVE-2018-17456: arbitrary code execution via .gitmodules
    Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-90
changelog:
  - fence_gce: new fence agent
    Resolves: rhbz#1568753
  - fence_rhevm: dont require --ssl parameter when using --ssl-insecure
    Resolves: rhbz#1544093
  - fence_mpath: fix preemptive abort
    Resolves: rhbz#1556857
  - fence-agents-all: dont show manpage-tags in metadata
    Resolves: rhbz#1553908
  - fence_scsi: dont write duplicates to .dev-file
    Resolves: rhbz#1575973
  - fence_impilan: add iLO5-support
    Resolves: rhbz#1579391


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-1
changelog:
  - rebase to v4.2.1
    Resolves: rhbz#1236395
  - fence_mpath: add watchdog support
    Resolves: rhbz#1504202


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-8
changelog:
  - fence_aliyun: add logging
    Resolves: rhbz#1568742
  - fence_gce: add stackdriver-logging support, improve logging and
    set default mode to cycle
    Resolves: rhbz#1568753


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-25
changelog:
  - Added security fix for CVE-2017-7207 (bug #1434353)
  - Added explicit requirement for lcms2 version we are build with (bug #1436273)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29
changelog:
  - Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
  - Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-31
changelog:
  - Added security fixes for:
    - CVE-2018-16509 (bug #1621158)
    - CVE-2018-15910 (bug #1621160)
    - CVE-2018-16542 (bug #1621382)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.1
changelog:
  - Remove as many non-standard operators as possible to make the codebase
    closer to upstream for later CVEs
  - Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
    checker (699659)
  - Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
    issues (699657)
  - Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
    type checking (699660)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.1
changelog:
  - Remove as many non-standard operators as possible to make the codebase
    closer to upstream for later CVEs
  - Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
    checker (699659)
  - Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
    in temp file handling to disclose contents of files (699658) 
  - Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
    issues (699657)
  - Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
    type checking (699660)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.4
changelog:
  - Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
    access in the aesdecode operator (699665)
  - Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
    privilege" checking when running out of stack during exception handling
  - Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.5
changelog:
  - Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
    pagedevice replacement (699664)
  - Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
    exception table
  - Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.6
changelog:
  - Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
    smooth shading object (Error: /rangecheck in --run--)


author: Ray Strode <rstrode@redhat.com> - 3.28.1-5
changelog:
  - Fix gnome-disk-utility timeout at startup
    Resolves: #1593215
  - add back session properties icons
    Related: #1568620


author: Thomas Woerner <twoerner@redhat.com> - 6.19-5
changelog:
  - New service sub package to provide the ipset service (RHBZ#1136257)
    Service and start-stop script from F-24
  - Fixed ipset package summary (RHBZ#1195171)
    Spec file derived from F-24


author: Thomas Woerner <twoerner@redhat.com> - 6.19-6
changelog:
  - Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
  - Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
  - No save on reload, but legacy save action (RHBZ#1136257)


author: Thomas Woerner <twoerner@redhat.com> - 6.29-1
changelog:
  - Rebase to 6.29 (RHBZ#1351299)
  - Fixes:
    - Backport ipset capability to run in namespaces (RHBZ#1226051)
    - Fix service save with empty ipset list and existing ipset save file
      (RHBZ#1377621)
    - Fix internal error at printing to output buffer (RHBZ#1395865)


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-1
changelog:
  - Rebase to 6.38 (RHBZ#1557600):
    - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
  - Refactor /etc/sysconfig/ipset.start-stop
  - Fixes:
    - IPSet Service Monolithic Operation (RHBZ#1440741)
    - "systemctl start ipset" doesn't handle existing ipset's having counters
      (RHBZ#1502212)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.181-2.6.14.11
changelog:
  - jsa files changed to 444 to pass rpm verification
  - Add reg-ex for filtering private libraries' provides/requires.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.11
changelog:
  - Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.191-2.6.15.1
changelog:
  - Bump to 2.6.15 and u191b00.
  - Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.16.1
changelog:
  - Bump to 2.6.16 and u201b00.
  - Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Resolves: rhbz#1633822


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b10.
  - Drop 8146115/PR3508/RH1463098 applied upstream.
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-5
changelog:
  - Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
    so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
    JDK-8210461.
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-6
changelog:
  - Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
    so as to disable log math intrinsic on aarch64. Work-around for
    JDK-8210858
  - Resolves: rhbz#1570856


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-8
changelog:
  - removed version less provides
  - javadocdir moved to arched dir as it is no longer noarch
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-9
changelog:
  - Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
    RHBZ-1624122.
  - Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
    optimize compilation of libjsig.
  - Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - Reinstate filtering of opt flags coming from redhat-rpm-config.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.0.28-1
changelog:
  - Identify as GA version and no longer as early access (EA).
  - JDK 11 has been released for GA on 2018-09-25.


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-952.el7]
changelog:
  - [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
  - [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
  - [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
  - [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
  - [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
  - [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
  - [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
  - [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
  - [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
  - [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-953.el7]
changelog:
  - [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
  - [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
  - [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
  - [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
  - [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
  - [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
  - [block] fix a crash caused by wrong API (Ming Lei) [1548261]
  - [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
  - [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
  - [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
  - [block] pass in queue to inflight accounting (Ming Lei) [1548261]
  - [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-954.el7]
changelog:
  - [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
  - [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
  - [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
  - [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
  - [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
  - [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
  - [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
  - [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
  - [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
  - [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
  - [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
  - [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-955.el7]
changelog:
  - [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
  - [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
  - [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-956.el7]
changelog:
  - [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
  - [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-957.el7]
changelog:
  - [mm] mlock: avoid increase mm->locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.1.1.el7]
changelog:
  - [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
  - [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
  - [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
  - [kernel] cpuset: use trialcs->mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
  - [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
  - [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
  - [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
  - [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
  - [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
  - [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
  - [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
  - [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.1.2.el7]
changelog:
  - [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
  - [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.3-6
changelog:
  - Rebase to libguestfs 1.36 in RHEL 7.4.
    resolves: rhbz#1359086
  - v2v: always use names for libvirt pools
    resolves: rhbz#1141631
  - v2v: correctly find GRUB in RHEL UEFI guests
  - v2v: uninstall VMware tools packages from guests
    resolves: rhbz#1155150
  - v2v: install RHEV-APT only when using -o rhev/-o vdsm
    resolves: rhbz#1161019
  - New API: btrfs-filesystem-show
    resolves: rhbz#1164765
  - p2v: always enable debugging when running virt-v2v
    resolves: rhbz#1167623
  - libguestfs prefers virtio-pci on aarch64
    resolves: rhbz#1237250
  - v2v: make sure to copy all the driver files on Windows
    resolves: rhbz#1255610
  - Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
    Requires to >= 1.3.10-5.8.el7
    resolves: rhbz#1311890
  - v2v: ignore all the environment variables for proxy when exporting from
    vCenter
    resolves: rhbz#1354507
  - virt-sysprep can deal with full-LUKS encrypted guests
    resolves: rhbz#1362649
  - All the tools have bash completion scripts.
    resolves: rhbz#1367738
  - v2v: do not remove Processor and Intelppm nodes in Windows guests
    resolves: rhbz#1372668
  - Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
    regular expression in file_contexts file
    resolves: rhbz#1374232
  - v2v: set all the properties on creation when exporting to Glance
    resolves: rhbz#1374405
  - v2v: set hw_video_model when exporting to Glance
    resolves: rhbz#1374651
  - v2v: fix OVA conversion as root using the libvirt backend
    resolves: rhbz#1375157
  - Various improvements and fixes to the documentation
    resolves: rhbz#1377081
    resolves: rhbz#1390876
    resolves: rhbz#1398070
    resolves: rhbz#1425306
  - v2v: support <listen type='socket'> and <listen type='none'>
    resolves: rhbz#1378022
  - v2v: allow libvirt >= 2.1.0 for vCenter conversions
    resolves: rhbz#1379240
  - p2v: enable mnemonics in the GUI
    resolves: rhbz#1379289
  - Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
    resolves: rhbz#1382275
  - Correctly parse mount options in btrfs entries in /etc/fstab.
    resolves: rhbz#1383517
  - Read secrets from libvirt domains, when inspecting them
    resolves: rhbz#1392798
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1400205
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1401474
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1402301
  - resize: allow URIs for the output disk
    resolves: rhbz#1404182
  - Disable EDD when launching the appliance
    resolves: rhbz#1404287
  - v2v: increase the memory allocated to the appliance
    resolves: rhbz#1418283
  - p2v: switch from GTK+ 2 to GTK+ 3
  - p2v: add dbus-devel as BuildRequires to disable suspension during the
    conversion
  - libguestfs-java: bump the java-headless Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1364518
  - Do not try to use/write to /var/cache/yum & /var/log/yum.log
  - Bump ocaml-findlib-devel BuildRequires to >= 1.3.3-7.el7, because of
    RHBZ#1403897
  - v2v: remove --dcpath & --dcPath from --help output too
    resolves: rhbz#1429430
  - v2v: force VNC as display for -i disk, as SDL is not supported
    resolves: rhbz#1372671
  - v2v, p2v: rename rhvm network to ovirtmgmt
    resolves: rhbz#1429491
  - v2v: when exporting to local disk, check that UEFI firmware is installed
    before conversion
    resolves: rhbz#1429506
  - dib: actually generate SHA256 checksums when using --checksum
    resolves: rhbz#1430184
  - v2v: do not mention SUSE Xen hosts as supported
    resolves: rhbz#1430203
  - v2v: depend on OVMF/AAVMF, for converting EFI guests
    resolves: rhbz#1429643
  - v2v: use absolute path when using an OVA as backing file
    resolves: rhbz#1430680
  - v2v: support Debian/Ubuntu guests
    resolves: rhbz#1387213
  - sysprep: remove DHCP_HOSTNAME entries
    resolves: rhbz#1427529
  - v2v: avoid repeated "run virt-v2v -v -x" message on error
    resolves: rhbz#1167623
  - bash-completion: add script for virt-v2v-copy-to-local
    resolves: rhbz#1367738
  - v2v: fix virtio block driver installation for Windows 10 and Windows 2016
    resolves: rhbz#1434737
  - Replace the libosinfo dependency with osinfo-db, since we are only using
    the osinfo database.
  - v2v: fix virtio driver installation for Windows 8 UEFI
    resolves: rhbz#1431579
  - v2v: new 'vmx' import method
    resolves: rhbz#1441197
  - v2v: properly identify Windows 2016 guests when exporting them to RHV-M
    resolves: rhbz#1447202
  - Run pvresize in non-interactive mode
    resolves: rhbz#1460692
  - resize: make sure the input disk is read-only
    resolves: rhbz#1463714
  - Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
    resolves: rhbz#1463646


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.10-6
changelog:
  - Rebase to libguestfs 1.36.10 in RHEL 7.5.
    resolves: rhbz#1472272
  - Build against OCaml 4.05
    resolves: rhbz#1447981
  - Enable the copyonread flag when running the appliance using libvirt.
    resolves: rhbz#1466563
  - Make sure kernel-rt is never used as Requires.
    resolves: rhbz#1471651
  - v2v: disable unconfiguration of manually installed VMware tools.
    resolves: rhbz#1477905
  - v2v: prefer pigz or pxz for uncompressing OVA files, if available
    resolves: rhbz#1448739
  - resize: handle empty UUIDs for swap partitions
    resolves: rhbz#1482737
  - v2v: remove mention of --dcpath in an error message
    resolves: rhbz#1486197
  - Disables the QEMU image file locking when opening disks as read-only
    resolves: rhbz#1417306
    resolves: rhbz#1503497
  - Briefly document the format used for URIs
    resolves: rhbz#1450325
  - v2v: deal with grub2 configurations without a default set
    resolves: rhbz#1472288
  - v2v: warn when a guest has passthrough devices
    resolves: rhbz#1472719
  - v2v: fix three regular expressions
    resolves: rhbz#1494555
  - v2v: enable conversion of full-disk LUKS-encrypted Linux guests
    resolves: rhbz#1451665
  - v2v: new 'vddk' import method
    resolves: rhbz#1477912
    resolves: rhbz#1513884
  - Enable libguestfs to work on z Systems
    resolves: rhbz#1479526
  - p2v: fx check for sudo requiring a password
    resolves: rhbz#1500673
  - v2v: handle disks with snapshots in vCenter
    resolves: rhbz#1172425
  - rescue: backport improved version
    resolves: rhbz#1438710
  - v2v: improve bootloader detection
    resolves: rhbz#1508299
  - v2v: parse MAC address of network interfaces in OVF files
    resolves: rhbz#1506572
  - Unconditionally depend on libvirt-daemon-kvm >= 3.9.0-1, which will always
    pull the right qemu-kvm too, and thus remove the unversioned dependencies
    on it
    resolves: rhbz#1500870
  - v2v: fix RPM file owned test
    resolves: rhbz#1503958
  - Do not open read-only disks using <shareable/> in the libvirt backend
    resolves: rhbz#1518517
  - v2v: handle better when grubby does not report any default kernel
    resolves: rhbz#1519204
  - v2v: enhance vmx import method to access via SSH
    resolves: rhbz#1523767
  - builder: fix caching of templates when using --cache-all-templates
    resolves: rhbz#1523650


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12
changelog:
  - Rebase to libguestfs 1.38.2 in RHEL 7.6.
    resolves: rhbz#1551055
  - v2v: warn about unknown VMware controller types
    resolves: rhbz#1510801
  - df: show correct sizes in human-readable mode for filesystems with
    block size = 512
    resolves: rhbz#1525262
  - v2v: fix example URL in man page
    resolves: rhbz#1540535
  - Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
    resolves: rhbz#1541525
  - Fix qemu-img-ma dependency in non-x86_64 architectures
    resolves: rhbz#1568676
  - v2v: update "resume=/dev/sdaX" entries in GRUB command lines
    resolves: rhbz#1532224
  - v2v: fix virtio-rng and memballoon OVF fragment for RHV
    resolves: rhbz#1550168
  - v2v: detect whether the root filesystem was not mounted in read-write mode
    resolves: rhbz#1567763
  - v2v: import OVAs with snapshots
    resolves: rhbz#1570407
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1571237
  - Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
    place where it used now (by virt-builder-repository).
  - v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
    oVirt REST API
    resolves: rhbz#1557273
  - Start lvmetad earlier when booting the appliance
    resolves: rhbz#1581810
  - v2v: fix kernel detection in Ubuntu guests since 18.04
    resolves: rhbz#1591248
  - v2v: convert the CPU topology correctly
    resolves: rhbz#1541908
  - Add a new inspect_get_osinfo API, and add its result to the output of
    virt-inspector
    resolves: rhbz#1544842
  - Pass absolute paths to NBD sockets when using the libvirt backend
    resolves: rhbz#1588451
  - v2v: do not write only <vendor> without <model> in libvirt XMLs
    resolves: rhbz#1591789
  - v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
    used for -it vddk, and -o rhv-upload
    resolves: rhbz#1589776
    resolves: rhbz#1608718
  - v2v/p2v: disable on aarch64, since it is not supported (nor even working)
    there
    resolves: rhbz#1601488
  - v2v: handle srN devices in libvirt XML (for virt-p2v)
    resolves: rhbz#1612785
  - Do not use the -cpu parameter under any circumstances for ppc64le.
    resolves: rhbz#1605071


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12.el7_6.1
changelog:
  - v2v: update documentation regarding SHA-2 certificates in Windows 7 and
    Windows Server 2008 R2
    resolves: rhbz#1632788
  - v2v: fix rhev-apt firstboot command for Windows
    resolves: rhbz#1625216


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-3
changelog:
  - qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
  - qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
  - spec: Explicitly require matching libvirt-libs (rhbz#1600122)
  - virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
  - qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
  - qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
  - virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
  - qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
  - qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
  - qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
  - qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
  - virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
  - docs: schema: Add missing <alias> to vsock device (rhbz#1600345)
  - virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-4
changelog:
  - qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
  - qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
  - qemu: Fix setting global_period cputune element (rhbz#1600427)
  - tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
  - qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
  - qemu: command: Move graphics iteration to its own function (rhbz#1475770)
  - qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
  - conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
  - conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
  - qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
  - tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
  - tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
  - qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
  - qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
  - qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
  - qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
  - conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
  - conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
  - conf: Introduce new <hostdev> attribute 'display' (rhbz#1475770)
  - qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
  - docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
  - conf: Introduce new video type 'none' (rhbz#1475770)
  - virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
  - tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
  - src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-5
changelog:
  - esx storage: Fix typo lsilogic -> lsiLogic (rhbz#1571759)
  - networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
  - nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
  - qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
  - qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
  - domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
  - examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-6
changelog:
  - qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
  - conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-7
changelog:
  - qemu_migration: Avoid writing to freed memory (rhbz#1593137)
  - qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
  - tests: rename hugepages to hugepages-default (rhbz#1591235)
  - tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
  - tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
  - tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
  - tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
  - tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
  - tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
  - tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
  - tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
  - tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
  - tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
  - tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
  - tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
  - tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
  - tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
  - tests: introduce hugepages-nodeset (rhbz#1591235)
  - conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
  - conf: Move hugepages validation out of XML parser (rhbz#1591235)
  - conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
  - tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
  - qemu: Fix probing of AMD SEV support (rhbz#1612009)
  - qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-8
changelog:
  - storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
  - access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
  - qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-9
changelog:
  - virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
  - virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
  - virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.1
changelog:
  - security: dac: also label listen UNIX sockets (rhbz#1635228)
  - qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
  - virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.2
changelog:
  - virfile: fix cast-align error (rhbz#1635705)
  - virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
  - virfiletst: Test virFileIsSharedFS (rhbz#1635705)
  - virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
  - virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.3
changelog:
  - virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
  - qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
  - qemu: Report more appropriate running reasons (rhbz#1634759)
  - qemu: Pass running reason to RESUME event handler (rhbz#1634759)
  - qemu: Map running reason to resume event detail (rhbz#1634759)
  - qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
  - qemu: Don't ignore resume events (rhbz#1634759)


author: Kalev Lember <klember@redhat.com> - 3.28.3-1
changelog:
  - Update to 3.28.3
  - Apply HW cursor on-demand patches
  - Apply monitor transform regression patch
  - Resolves: #1569736


author: Lukas Berk <lberk@redhat.com> - 3.12.2-5
changelog:
  - Correction to spec file and selinux policy (BZ 1488116)
  - Show all perfevent metrics in pcpatop (BZ 1525864)
  - Multilib corrections (BZ 1537623)


author: Nathan Scott <nathans@redhat.com> - 4.0.2-1
changelog:
  - Ensure sans font dependency resolved for webapps (BZ 1568109)
  - Ensure sans font dependency resolved for pmchart (BZ 1546640)
  - Update to latest PCP sources (BZ 1565370).


author: Nathan Scott <nathans@redhat.com> - 4.0.2-3
changelog:
  - Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
  - Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
  - Fix pmlogger_daily log rotation open port issue (BZ 1579881)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.1.1-3
changelog:
  - Fix a security flaw (CVE-2018-7750) in Paramiko's server
    mode (emphasis on **server** mode; this does **not** impact *client* use!)
    Backported from 2.1.5.
    Resolves #1557142


author: Pavel Cahyna <pcahyna@redhat.com> - 2.1.1-4
changelog:
  - Add a dependency on python2-pyasn1. It used to be a dependency
    of python2-cryptography, but it is not the case with newer versions.
    (RHBZ #1559133)


author: Jake Hunsaker <jhunsake@redhat.com> - 2.1.1-9
changelog:
  - Fix a security flaw (CVE-2018-1000805) in Paramiko's server
    mode (does not effect client mode).
    Backported from 2.1.6
    Resolves rhbz#1637366


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-3
changelog:
  - gcp-vpc-move-vip: new resource agent for Google Cloud
  - vdo-vol: new resource agent
  - LVM-activate: fix issue with dashes
  - dont use attribute_target for metadata

    Resolves: rhbz#1568588
    Resolves: rhbz#1538689
    Resolves: rhbz#1513957
    Resolves: rhbz#1602783


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-8
changelog:
  - lvmlockd: add cmirrord support
  - LVM-activate: warn about incorrect vg_access_mode

    Resolves: rhbz#1606316
    Resolves: rhbz#1619428


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-10
changelog:
  - aws-vpc-move-ip: avoid false positive monitor result on initial probe
  - timeout/interval add "s"-suffix

    Resolves: rhbz#1624741
    Resolves: rhbz#1523318


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-12.5
changelog:
  - rabbitmq-cluster: get cluster status from mnesia during monitor
  - rabbitmq-cluster: fail monitor when node is in minority partition

    Resolves: rhbz#1641944
    Resolves: rhbz#1641946


author: Pavel Valena <pvalena@redhat.com> - 2.0.0.648-26
changelog:
  - Rebase to Ruby 2.0.0-p648
    Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
    * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
        with-DESTDIR.patch; subsumed
    * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
    * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
        fails.patch; subsumed
  - Remove tests depending on europe/moscow to avoid failures due to tzdata change
    https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
  - Add checks for systemtap, abrt hook and rubygems version
  - Fix significant hash table performance slowdown on ppc64le
    Resolves: rhbz#1163032
  - Support in no_proxy for domain names with whitespaces and leading dots
    Resolves: rhbz#1300433


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-30
changelog:
  - Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
    failures with newest openssl.
    Resolves: rhbz#1416123
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Extend 'gem_' macros for pre-release version support.
    Resolves: rhbz#1397390
  - Make symlinks for json gem.
    Resolves: rhbz#1308992


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-31
changelog:
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903
  - Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
    Resolves: CVE-2017-0899
  - Fix a DOS vulernerability in the query command (CVE-2017-0900).
    Resolves: CVE-2017-0900
  - Fix a vulnerability in the gem installer that allowed a malicious gem
      to overwrite arbitrary files (CVE-2017-0901).
    Resolves: CVE-2017-0901
  - Fix a DNS request hijacking vulnerability (CVE-2017-0902).
    * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
    Resolves: CVE-2017-0902
  - Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
    * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
    Resolves: CVE-2017-0898
  - Escape sequence injection vulnerability in the Basic
      authentication of WEBrick (CVE-2017-10784).
    * ruby-2.2.8-sanitize-any-type-of-logs.patch
    Resolves: CVE-2017-10784
  - Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
    * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
    Resolves: CVE-2017-14064
  - Command injection vulnerability in Net::FTP (CVE-2017-17405).
    * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
    Resolves: CVE-2017-17405
  - Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
    * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
    Resolves: CVE-2017-14033
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Resolves: CVE-2017-17790


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-32
changelog:
  - Add Psych.safe_load
    * ruby-2.1.0-there-should-be-only-one-exception.patch
    * ruby-2.1.0-Adding-Psych.safe_load.patch
    Related: CVE-2017-0903
  - Disable Tokyo TZ tests broken by recen tzdata update.
    * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
    Related: CVE-2017-0903


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-225
changelog:
  - Allow sbd_t domain to getattr of all char files in /dev and read sysfs_t files and dirs
  Resolves: rhbz#1627114
  - Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t
  Resolves: rhbz#1567753


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-226
changelog:
  - Allow tomcat servers to manage usr_t files
  Resolves: rhbz#1625678
  - Dontaudit tomcat serves to append to /dev/random device
  Resolves: rhbz#1625678
  - Allow sys_nice capability to mysqld_t domain
  - Allow dirsrvadmin_script_t domain to read httpd tmp files
  Resolves: rhbz#1622602
  - Allow syslogd_t domain to manage cert_t files
  Resolves: rhbz#1615995


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-227
changelog:
  - Add interface apache_read_tmp_dirs()
  - Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
  Resolves: rhbz#1622602


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-228
changelog:
  - Allow tomcat_domain to read /dev/random
  Resolves: rhbz#1631666
  - Allow neutron_t domain to use pam
  Resolves: rhbz#1630318


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.3
changelog:
  - Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
  Resolves: rhbz#1638257


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.4
changelog:
  - Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
  Resolves: rhbz#1638427


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.5
changelog:
  - Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
  Resolves: rhbz#1638257


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.6
changelog:
  - Allow nova_t domain to use pam
  Resolves: rhbz:#1645270
  - sysstat: grant sysstat_t the search_dir_perms set
  Resolves: rhbz#1645271


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-3
changelog:
  - [sosreport] Add mechanism to encrypt final archive
    Resolves: bz1594327
  - [archive] fix stat typo
    Resolves: bz1597532
  - [rhui] Fix detection of CDS for RHUI3
    Resolves: bz1596494


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-4
changelog:
  - [apparmor,ceph] fix typo in add_forbidden_path
    Resolves: bz1609135
  - [policies] sanitize report label
    Resolves: bz1608384
  - [policies,process] make lsof execution optional, dont call on RHOSP
    Resolves: bz1613806


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-5
changelog:
  - [rhv-log-collector-analyzer] Add new plugin for RHV
    Resolves: bz1600158
  - [kubernetes|etcd] Support OpenShift 3.10 deployments
    Resolves: bz1616030


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-6
changelog:
  - [archive] fix leading path creation
    Resolves: bz1624043
  - [atomic] Define valid preset for RHEL Atomic
    Resolves: bz1626159
  - [utilities] wait till AsyncReader p.poll() returns None
    Resolves: bz1623070


author: Jake Hunsaker <jhunsake@redhat.com> - 1.5-3
changelog:
  - Resolve race condition in cluster profile loading
  - Quote all options globally
  - RHBZ#1633515
  - RHBZ#1647955


author: Patsy Franklin <pfrankli@redhat.com> - 2017c-1
changelog:
  - Rebase to tzdata-2017c.
    - Northern Cyprus will revert to using EQ rules on October 29, 2017.
    - Sudan will switch from +03 to +02 on November 1, 2017.
    - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
      experiment with DST.
    - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
    - Namibia - starting September 3, 2017 switches from +)1 with DST to
      +02 all year.  This change takes effect April 1, 2018.
    - Turks & Caicos changes from -04 all year to -05 with US DST starting
      on March 11, 2018.  Effective change date is November 4, 2018. 
    - tzdata now includes two text versions of the time zone data - tzdata.zi
      and leapseconds. 
    - Includes two patches to deal with build issues.


author: Patsy Franklin <pfrankli@redhat.com> - 2018b-1
changelog:
  - Rebase to tzdata-2018b
    - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
    - Brazil's DST will start on the first Sunday in November
    - Irish standard time is in the summer now, not the winter.
    - Support for the new zic -t option.
    - Add back pacificnew file omitted in tzdata-2018a


author: Patsy Franklin <pfrankli@redhat.com> - 2018d-1
changelog:
  - Rebase to tzdata-2018d
    - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
    - Antarctica/Casey station changed to UTC+8 on March 11.


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-2
changelog:
  - Rebase to tzdata-2018e
    - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
    - In this update, the upstream project now defaults to using
      the "vanguard" data implementation which includes negative DST offsets.
      However, we are continuing to provide the "rearguard" format
      for data which does not use negative DST offsets to provide
      better compatibility with existing tools.  We intend to transition
      to the "vanguard" data implementation in the future.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018e-4
changelog:
  - Brazil moved the start of DST from the first Sunday in November
    to the third Sunday in November.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018f-1
changelog:
  - Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
  - Add patch to remove use of 25:00.
  - Drop previous change to DST in Brazil.  The government rescinded the
    change.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018g-1
changelog:
  - Rebase to tzdata-2018g
    - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
      planned.  This change is effective Octobober 28, 2018.


