# changelog

author: Zdenek Pytela <zpytela@redhat.com> - 34.1.14-1
changelog:
  - Support using ICA crypto accelerator on s390x arch
  Resolves: rhbz#1976180
  - Allow systemd delete /run/systemd/default-hostname
  Resolves: rhbz#1978507
  - Label /usr/bin/Xwayland with xserver_exec_t
  Resolves: rhbz#1993151
  - Label /usr/libexec/gdm-runtime-config with xdm_exec_t
  Resolves: rhbz#1993151
  - Allow tcpdump read system state information in /proc
  Resolves: rhbz#1972577
  - Allow firewalld drop capabilities
  Resolves: rhbz#1989641


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.15-1
changelog:
  - Update ica_filetrans_named_content() with create_file_perms
  Resolves: rhbz#1976180
  - Allow various domains work with ICA crypto accelerator
  Resolves: rhbz#1976180
  - Add ica module
  Resolves: rhbz#1976180
  - Revert "Support using ICA crypto accelerator on s390x arch"
  Resolves: rhbz#1976180
  - Fix the gnome_atspi_domtrans() interface summary
  Resolves: rhbz#1972655
  - Add support for at-spi
  Resolves: rhbz#1972655
  - Add permissions for system dbus processes
  Resolves: rhbz#1972655
  - Allow /tmp file transition for dbus-daemon also for sock_file
  Resolves: rhbz#1972655


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.16-1
changelog:
  - Allow fprintd install a sleep delay inhibitor
  Resolves: rhbz#1999537
  - Update mount_manage_pid_files() to use manage_files_pattern
  Resolves: rhbz#1999997
  - Allow gnome at-spi processes create and use stream sockets
  Resolves: rhbz#2004885
  - Allow haproxy list the sysfs directories content
  Resolves: rhbz#1986823
  - Allow virtlogd_t read process state of user domains
  Resolves: rhbz#1994592
  - Support hitless reloads feature in haproxy
  Resolves: rhbz#1997182
  - Allow firewalld load kernel modules
  Resolves: rhbz#1999152
  - Allow communication between at-spi and gdm processes
  Resolves: rhbz#2003037
  - Remove "ipa = module" from modules-targeted-contrib.conf
  Resolves: rhbz#2006039


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.17-1
changelog:
  - Label /usr/sbin/virtproxyd as virtd_exec_t
  Resolves: rhbz#2002143
  - Allow at-spi-bus-launcher read and map xdm pid files
  Resolves: rhbz#2011772
  - Remove references to init_watch_path_type attribute
  Resolves: rhbz#2007960
  - Remove all redundant watch permissions for systemd
  Resolves: rhbz#2007960
  - Allow systemd watch non_security_file_type dirs, files, lnk_files
  Resolves: rhbz#2007960
  - Allow systemd-resolved watch /run/systemd
  Resolves: rhbz#1992461
  - Allow sssd watch /run/systemd
  Resolves: rhbz#1992461


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.18-1
changelog:
  - Allow fetchmail search cgroup directories
  Resolves: rhbz#2015118
  - Add the auth_read_passwd_file() interface
  Resolves: rhbz#2014611
  - Allow redis-sentinel execute a notification script
  Resolves: rhbz#2014611
  - Support new PING_CHECK health checker in keepalived
  Resolves: rhbz#2014423


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.19-1
changelog:
  - Allow redis get attributes of filesystems with extended attributes
  Resolves: rhbz#2014611
  - Allow dirsrv read slapd tmpfs files
  Resolves: rhbz#2015928
  - Revert "Label /dev/shm/dirsrv/ with dirsrv_tmpfs_t label"
  Resolves: rhbz#2015928
  - Allow login_userdomain open/read/map system journal
  Resolves: rhbz#2017838
  - Allow login_userdomain read and map /var/lib/systemd files
  Resolves: rhbz#2017838
  - Allow nftables read NetworkManager unnamed pipes
  Resolves: rhbz#2023456
  - Allow xdm watch generic directories in /var/lib
  Resolves: rhbz#1960010
  - Allow xdm_t watch generic pid directories
  Resolves: rhbz#1960010


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.20-1
changelog:
  - Allow dnsmasq watch /etc/dnsmasq.d directories
  Resolves: rhbz#2029866
  - Label /usr/lib/pcs/pcs_snmp_agent with cluster_exec_t
  Resolves: rhbz#2029316
  - Allow lldpd use an snmp subagent over a tcp socket
  Resolves: rhbz#2028561
  - Allow smbcontrol use additional socket types
  Resolves: rhbz#2027751
  - Add write permisson to userfaultfd_anon_inode_perms
  Resolves: rhbz#2027660
  - Allow xdm_t watch generic directories in /lib
  Resolves: rhbz#1960010
  - Allow xdm_t watch fonts directories
  Resolves: rhbz#1960010
  - Label /dev/ngXnY and /dev/nvme-subsysX with fixed_disk_device_t
  Resolves: rhbz#2027994
  - Add hwtracing_device_t type for hardware-level tracing and debugging
  Resolves: rhbz#2029392
  - Change dev_getattr_infiniband_dev() to use getattr_chr_files_pattern()
  Resolves: rhbz#2028791
  - Allow arpwatch get attributes of infiniband_device_t devices
  Resolves: rhbz#2028791
  - Allow tcpdump and nmap get attributes of infiniband_device_t
  Resolves: rhbz#2028791


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Martin Osvald <mosvald@redhat.com> - 2.13.6-1
changelog:
  - csh.login: set PATH again (if empty) to prevent interpreter error (#1744106)
  - aliases: add pcp user (#1744091)
  - lang.csh: fix several variable substitution bugs and typos (#1746749)
  - don't set LANG as a per-shell variable
  - fix lang.csh script so it doesn't break tcsh -e scripts II (#1620004)
  - use full path for non-builtins in csh.cshrc, csh.login, lang.csh, lang.sh and profile (#1747493)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.8.1-9
changelog:
  - libsubid: creation and nsswitch support. Resolves: #1859252
  - Creation of subid and subid-devel subpackages
  - man: mention NSS in new[ug]idmap manpages
  - libsubid: move development header to shadow folder
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - useradd: fix SUB_UID_COUNT=0
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - man: clarify subid delegation
  - libsubid: make shadow_logfd not extern
  - login.defs: include HMAC_CRYPTO_ALGO key


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9. Resolves: #1989556
  - usermod: allow all group types with -G option. Resolves: #1975329
  - useradd: avoid generating an empty subid range
  - Clean spec file


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-3
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013015
  - useradd: generate home and mail directories with selinux user attribute. Resolves: #1993081
  - useradd: revert fix memleak of grp. Resolves: #2020238
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #2024834
  - pwck: fix segfault when calling fprintf()
  - newgrp: fix segmentation fault
  - Clean spec file: organize dependencies and move License location


author: Javier Martinez Canillas <javierm@redhat.com> - 15-7
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715879
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717061


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
  - Fix a shim crash when attempting to netboot


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Pavel Moravec <pmoravec@redhat.com> - 4.1-4
changelog:
  - [archive] skip copying SELinux context for /proc and /sys everytime
    Resolves: bz1965002
  - Load maps from all archives before obfuscation
    Resolves: bz1967110
  - Multiple fixes in man pages
    Resolves: bz1967111
  - [ds] Mask password and encryption keys in ldif files
    Resolves: bz1967112
  - [report] add --cmd-timeout option
    Resolves: bz1967113
  - [cups] Add gathering cups-browsed logs
    Resolves: bz1967114
  - [sssd] Collect memory cache / individual logfiles
    Resolves: bz1967115
  - Collect ibmvNIC dynamic_debugs
    Resolves: bz1967116
  - [pulpcore] add plugin for pulp-3
    Resolves: bz1967117
  - [saphana] remove redundant unused argument of get_inst_info
    Resolves: bz1967118
  - [networking] Add nstat command support
    Resolves: bz1967119
  - [snapper] add a new plugin
    Resolves: bz1967120


author: Pavel Moravec <pmoravec@redhat.com> - 4.1-6
changelog:
  - [networking] collect also tc filter show ingress
    Resolves: bz1985976
  - [cleaner] Only skip packaging-based files for the IP parser
    Resolves: bz1985982
  - [sssd] sssd plugin when sssd-common
    Resolves: bz1967718
  - Various OCP/cluster/cleanup enhancements
    Resolves: bz1985983
  - [options] allow variant option names in config file
    Resolves: bz1985985
  - [plugins] Set default predicate instead of None
    Resolves: bz1938874
  - [MigrationResults] collect info about conversions and
    Resolves: bz1959779


author: Pavel Moravec <pmoravec@redhat.com> = 4.1-8
changelog:
  - [report,collect] unify --map-file arguments
    Resolves: bz1985985
  - [rhui] add new plugin for RHUI 4
    Resolves: bz1992859
  - [username parser] Load usernames from `last` for LDAP users
    Resolves: bz1992861


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-1
changelog:
  - Rebase on upstream 4.2
    Resolves: bz1998134
  - [report] Implement --estimate-only
    Resolves: bz2011537
  - [omnipath_client] Opacapture to run only with allow changes
    Resolves: bz2011534
  - [unpackaged] deal with recursive loop of symlinks properly
    Resolves: bz2011533
  - [networking] prevent iptables-save commands to load nf_tables
    Resolves: bz2011538
  - [kernel] Capture Pressure Stall Information
    Resolves: bz2011535
  - [processor] Apply sizelimit to /sys/devices/system/cpu/cpuX
    Resolves: bz1869561


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-2
changelog:
  - [firewall_tables] call iptables -t <table> based on nft
    Resolves: bz2011536
  - [report] Count with sos_logs and sos_reports in
    Resolves: bz2011537
  - [foreman] Collect puma status and stats
    Resolves: bz2011507
  - [report] Overwrite pred=None before refering predicate
    Resolves: bz2012858
  - [openvswitch] add commands for offline analysis
    Resolves: bz2019697


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-4
changelog:
  - [report] Calculate sizes of dirs, symlinks and manifest in
    Resolves: bz2011537
  - [report] shutdown threads for timeouted plugins
    Resolves: bz2012859
  - [report] fix filter_namespace per pattern
    Resolves: bz2020778
  - Ensure specific plugin timeouts are only set
    Resolves: bz2023481


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-5
changelog:
  - [clean,hostname_parser] Source /etc/hosts for obfuscation
    Resolves: bz2024893
  - [clean, hostname] Fix unintentionally case sensitive
    Resolves: bz2024892
  - [redhat] update SFTP API version to v2
    Resolves: bz2025611


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-8
changelog:
  - [rhui] New log folder
    Resolves: bz2031777
  - nvidia]:Patch to update nvidia plugin for GPU info
    Resolves: bz2034001
  - [hostname] Fix edge case for new hosts in a known subdomain
    Resolves: bz2024893


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1938876 - review of important potential issues detected by static analyzers in sssd-2.4.1-1.el9
  - Resolves: rhbz#1942277 - Wrong default debug level of sssd tools


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1975691 - covscan NULL pointer dereference cache_req_data_create()


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
changelog:
  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-3
changelog:
  - Address some issues reported by covscan (#1996691).
  - Replace 0141-tests-disable-sockopt-timestamp-on-new-glibc-with-__.patch
    with upstream v5.13-10-g0211fdc "tests: change sockopt-timestamp test
    to use syscall(__NR_recvmsg)"
    and 0154-tests-call-setsockopt-directly-in-sockopt-timestamp.patch.
  - Undo forceful injection of -m64 into CFLAGS/CPPFLAGS to avoid breaking
    mpers and its tests (#1996676).


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 5.58-4
changelog:
  - Stunnel cannot use an encrypted private key being built against OpenSSL 3.0
  - Resolves: rhbz#1976854


author: William Poteat <wpoteat@redhat.com> 1.29.10-1
changelog:
  - Switch dates returned by D-Bus ListInstalledProducts to ISO 8601
    (ptoscano@redhat.com)
  - 1793501: switch dates returned by D-Bus GetPool to ISO 8601
    (ptoscano@redhat.com)
  - Add format_iso8601_date.format_iso8601_date() (ptoscano@redhat.com)
  - Make sure, re-register works for deb repos (suttner@atix.de)
  - 1863039: Fix issue with dnf/yum variables (jhnidek@redhat.com)
  - 1879856: suppress the warning message when setting syspurpose values
    (tmerry@redhat.com)
  - ENT-2779: call format() on translated string (ptoscano@redhat.com)
  - 1930037: cockpit: ensure /etc/pki/product exist (ptoscano@redhat.com)
  - 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Reword ambiguous message (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - cockpit: fix extraction of plural messages (ptoscano@redhat.com)
  - 1672805: 'Addons' is failing spell check and should be changed to 'Add-ons'
    to match documentation (tmerry@redhat.com)
  - 1731109: improve man page & help for registering with --force option
    (tmerry@redhat.com)
  - 1749395: Proper handling when a user does not have an org
    (wpoteat@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1916540: Negative proxy tests occasionally encounter the wrong exception
    handling (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-3711: Fix a couple of typos (tmerry@redhat.com)
  - ENT-2468: Use format strings with named arguments for translator context
    (tmerry@redhat.com)
  - ENT-3276: refactor test_managercli.py by modules (ptoscano@redhat.com)
  - 1897767: what does 'No Valid values provided for usage' mean to the user
    (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Replace optparse with argparse (wpoteat@redhat.com)
  - Fix variable for RestlibException exception (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Correction for condition that was breaking 3 nosetests (wpoteat@redhat.com)
  - maybe this time? (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Remove extra '%' in string (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - cockpit: Adjust for changed services image (martin@piware.de)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (wpoteat@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1897767: what does 'No valid values provided for usage' mean to the user
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1856832: add --org=ORG to the ROLE OPTIONS, USAGE OPTIONS and ADDONS OPTIONS
    (tmerry@localhost.localdomain)
  - 1880920: check for invalid addons (ptoscano@redhat.com)
  - Add AbstractSyspurposeCommand._are_provided_values_valid helper
    (ptoscano@redhat.com)
  - 1924166: improve man text of syspurpose --show (ptoscano@redhat.com)
  - 1646718 debrand a message so that it doesn't say Red Hat Subscription Manager
    but instead an entitlement server (tmerry@localhost.localdomain)


author: William Poteat <wpoteat@redhat.com> 1.29.11-1
changelog:
  - Add subscription-manager dependency to apt-katello-transport (kolb@atix.de)
  - 1898552: refactor/fix collection of IP v4/v6 address info
    (ptoscano@redhat.com)
  - cockpit: Enable TLS for mock insights server (martin@piware.de)
  - adding timoeout to jenkins pipeline (#2585) (jmolet@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1819555: cockpit: translate untranslatable messages (ptoscano@redhat.com)
  - Replace hardcoded errno value with constant (ptoscano@redhat.com)
  - 1940658: bash: complete also the syspurpose subcommand (ptoscano@redhat.com)
  - 1878736: use our i18n functions instead of dnf ones (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.12-1
changelog:
  - 1953069: bash: fix listing of config options (#2609) (ptoscano@redhat.com)
  - Cleanup old *.egg-info dirs in %post (csnyder@redhat.com)
  - 1953047: bash: drop completion for subscribe & unsubscribe
    (ptoscano@redhat.com)
  - 1952228: fix formatting of log error messages (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.13-1
changelog:
  - Updated translations for Korean, Chinese (simiplified, zh_CN), Italian
  - Refactoring of cloud collector/detector and facts (#2515)
    (jhnidek@redhat.com)
  - 1920020: show error message when setting invalid default_log_level as well as
    on every run until changed to a valid value (tmerry@redhat.com)
  - 1959048: improve wording for missing or empty syspurpose values
    (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1960765: fix typo "explicity" in man page (ptoscano@redhat.com)
  - cockpit: Lower cockpit-ws dependency to Recommends (martin@piware.de)
  - test: Robustify and trim down cockpit-ws installation (martin@piware.de)
  - jenkins: switch stylish job to Python 3 (ptoscano@redhat.com)
  - flake8: add more locally found issues (ptoscano@redhat.com)
  - Remove extra whitespace before '(' (ptoscano@redhat.com)
  - 1952879: extract messages from argparse instead of optparse
    (ptoscano@redhat.com)
  - po: set Project-Id-Version to rhsm (ptoscano@redhat.com)
  - po: fuzzy messages with invalid/missing placeholders (ptoscano@redhat.com)
  - po: ko: manually fix placeholder (ptoscano@redhat.com)
  - Update script reference to base branch to main (wpoteat@redhat.com)
  - 1896715: Set proper read permissions on certs (wpoteat@redhat.com)
  - cockpit: Use PF4 based empty state (mmarusak@redhat.com)
  - cockpit: Drop uglification (mmarusak@redhat.com)
  - cockpit: Use 'noreferrer' for external links (mmarusak@redhat.com)
  - cockpit: Add `standard-jsx` eslint plugin (mmarusak@redhat.com)
  - cockpit: Remove loaders for .es6 files (mmarusak@redhat.com)
  - cockpit: Add package-lock.json to .gitignore (mmarusak@redhat.com)
  - build: drop version requirements for pep8 and flake8 (ptoscano@redhat.com)
  - build: remove pyqver test requirement (ptoscano@redhat.com)
  - Add flake8 configuration (ptoscano@redhat.com)
  - Add missing second empty line after class/function (ptoscano@redhat.com)
  - Fix some over-indented code blocks (ptoscano@redhat.com)
  - jenkins: disambiguate virtualenv names (ptoscano@redhat.com)
  - 1956654: Fix issue with proxy and cockpit plugin (jhnidek@redhat.com)
  - Releaser for Centos (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.14-1
changelog:
  - Drop more files/references of old standalone syspurpose tool
    (ptoscano@redhat.com)
  - 1967780: improve placeholders in help text (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1898563: move syspurpose subcommands within the 'syspurpose' command
    (ptoscano@redhat.com)
  - Rename internal variable for syspurpose --show (ptoscano@redhat.com)
  - Drop command name from args when parsing them (ptoscano@redhat.com)
  - 1941904: disable initial-setup in RHEL >= 9 (ptoscano@redhat.com)
  - 1959048: improve wording for invalid syspurpose values (ptoscano@redhat.com)
  - Enable subman to run normally in containers for development/test
    (csnyder@redhat.com)
  - Fixed reporting of AWS cloud facts (null value) (jhnidek@redhat.com)
  - cockpit: Test also system purpose (mmarusak@redhat.com)
  - cockpit: Use current PF4 components and design (mmarusak@redhat.com)
  - test: Update cockpit test/common library (mmarusak@redhat.com)
  - cockpit: Update babel (mmarusak@redhat.com)
  - cockpit: Sync lib/patternfly with Cockpit (mmarusak@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.15-1
changelog:
  - 1941904: actually disable initial-setup in RHEL >= 9, and Fedora too (#2675)
    (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.16-1
changelog:
  - 1941904: remove packages (#2692)
    (31166354+tlhmerry9@users.noreply.github.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Move cloud detector/collector to cloud-what package (#2680)
    (jhnidek@redhat.com)
  - 1975552: add '[SUBMODULE]' in syspurpose usage string (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1973807: fix wording on error when listing syspurpose values (#2684)
    (ptoscano@redhat.com)
  - 1975552: remove extra '[OPTIONS]' from syspurpose usage string (#2682)
    (ptoscano@redhat.com)
  - Make Azure cloud collector more reliable (#2645) (jhnidek@redhat.com)
  - 1967210: Do not print warning, when valid value is provided
    (jhnidek@redhat.com)
  - 1968420: improve description of rhsm.conf format (ptoscano@redhat.com)
  - Delete server repo file (suttner@atix.de)


author: Christopher Snyder <csnyder@redhat.com> 1.29.17-1
changelog:
  - Remove no arch from python3-cloud-what package (csnyder@redhat.com)
  - 1938878: Fix issues discovered by static code analyzers (#2644)
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.18-1
changelog:
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - Slightly improve our container detection (#2611) (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1976225: read lscpu from its JSON output if available (#2699)
    (ptoscano@redhat.com)
  - 1975589: Correct typo in dnf plugin message (wpoteat@redhat.com)
  - 1924126: Fix profile upload on AWS systems (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.19-1
changelog:
  - ENT-4083: Fix flake8 error E402 (mhorky@redhat.com)
  - ENT-4085: Fix flake8 error E713 (mhorky@redhat.com)
  - 2003777: Show available organizations before asking for input
    (mhorky@redhat.com)
  - ENT-4302: Remove "u" prefix from strings (mhorky@redhat.com)
  - ENT-4326: Drop "-*- coding" comment (mhorky@redhat.com)
  - ENT-4277: Drop __future__ imports (mhorky@redhat.com)
  - 1979323: Cockpit - do not show red red icon in SCA mode (jhnidek@redhat.com)
  - Remove outdated comments from the coverage Jenkins job (mhorky@redhat.com)
  - ENT-4252: Migrate from nose to pytest (mhorky@redhat.com)
  - Debian / Ubuntu multi-architectures support
    (sbernhard@users.noreply.github.com)
  - Translated using Weblate (Spanish) (ehespinosa57@gmail.com)
  - 1859157: Display better error message on incorrect --org (mhorky@redhat.com)
  - New D-Bus method GetOrg() (jhnidek@redhat.com)
  - 1924338: list prints not status and dates in SCA mode (jhnidek@redhat.com)
  - 1983144: More useful feedback on unknown argument (mhorky@redhat.com)
  - ENT-4089: Fix flake8 error E741 (mhorky@redhat.com)
  - ENT-4090: Fix flake8 error F821 (mhorky@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - ENT-4091: Fix flake8 error F841 (mhorky@redhat.com)
  - ENT-4228: Format rhsmlib exception (mhorky@redhat.com)
  - ENT-4228: Always format restlib exceptions (mhorky@redhat.com)
  - Update exception handling (mhorky@redhat.com)
  - Drop unused M2Crypto bits (ptoscano@redhat.com)
  - 1995465: Do not use deprecated collections.MutableMapping
    (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1983074: Remove invalid log level (mhorky@redhat.com)
  - ENT-4213: Remove deprecated pep8 package (mhorky@redhat.com)
  - build: switch to os.makedirs(..., exist_ok=True) (ptoscano@redhat.com)
  - build: call create_dest_dir() only when running callback
    (ptoscano@redhat.com)
  - flake8: enable E131, E714 (ptoscano@redhat.com)
  - 1859569: Abort on invalid username/token option in syspurpose commands
    (mhorky@redhat.com)
  - Drop logging.conf (ptoscano@redhat.com)
  - Drop long-dead sat5to6 script (ptoscano@redhat.com)
  - Drop RHN migration (ptoscano@redhat.com)
  - 1922151: Add /var/cache/cloud-what to python3-cloud-what RPM.
    (jhnidek@redhat.com)
  - ENT-164: Remove ga_loader importer (mhorky@redhat.com)
  - ENT-164: Drop rhsm-gtk (mhorky@redhat.com)
  - ENT-164: Drop subscription-manager-gui & rhsm-icon (mhorky@redhat.com)
  - Add minimal documentation for the plugins directories (ptoscano@redhat.com)
  - ENT-4168: Unify description of --org in syspurpose subcommands
    (mhorky@redhat.com)
  - 1922151: Use in-memory cache on AWS too (jhnidek@redhat.com)
  - Move zypper plugins to an own directory (ptoscano@redhat.com)
  - Move dnf plugins to an own directory (ptoscano@redhat.com)
  - Move libdnf plugins to an own directory (ptoscano@redhat.com)
  - Drop support for YUM plugins (ptoscano@redhat.com)
  - Drop YUM plugins (ptoscano@redhat.com)
  - Add 'syspurpose' to list of commands in manpage (mhorky@redhat.com)
  - ENT-4152: Drop initial-setup addon (mhorky@redhat.com)
  - ENT-4136: Drop firstboot support (mhorky@redhat.com)
  - ENT-3764: Change comments to follow Conscious language initiative
    (mhorky@redhat.com)
  - ENT-3764: Update variable names in hwprobe.py (mhorky@redhat.com)
  - ENT-3764: Update project URLs to new versions (mhorky@redhat.com)
  - ENT-3764: Remove BLACKLISTED_LOCALES (mhorky@redhat.com)
  - 1980418: Add 'active' field to module stream profile (ianballou67@gmail.com)
  - repos: document order of --enable & --disable (ptoscano@redhat.com)
  - 1984133: repos: respect order of --enable & --disable (ptoscano@redhat.com)
  - Include D-Bus sender in User-Agent http header; Singleton
    (jhnidek@redhat.com)
  - hwprobe.py: Fix counting cores per cpu for Fujitsu A64FX CPU
    (m.mizuma@jp.fujitsu.com)
  - flake8: enable E121, E122, E123, E126, E127, E128 (ptoscano@redhat.com)
  - flake8: disable E122 for test/test_utils.py (ptoscano@redhat.com)
  - Wrap first argument/element in function calls & containers
    (ptoscano@redhat.com)
  - Fix indentation of some continuation lines (ptoscano@redhat.com)
  - 1974641: Fix tab completion with multiple optional commands
    (mhorky@redhat.com)
  - 1876828: Try to suppress errors in stderr when not run as root
    (mhorky@redhat.com)
  - 1977452: typo in string format change Add quotes to a {filename} and remove
    an extra space. (tmerry@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1976240: Improve HTTP code/message reporting in error strings
    (mhorky@redhat.com)
  - Added new stage for running libdnf unit tests. (jhnidek@redhat.com)
  - make sure gpg key download doesn't fail because of private certs
    (sbernhard@users.noreply.github.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.20-1
changelog:
  - ENT-4279: Switch away from rhsmlib.compat.subprocess_compat
    (mhorky@redhat.com)
  - 2021578: Remove proxy server test as it is unnecessary (wpoteat@redhat.com)
  - cockpit: validate SSL connection to mock-insights (ptoscano@redhat.com)
  - cockpit: fix hostname of the fake Insights server (ptoscano@redhat.com)
  - cockpit: validate the SSL connection to candlepin (ptoscano@redhat.com)
  - cockpit: resolve hostname of service machine (ptoscano@redhat.com)
  - cockpit: use CANDLEPIN_URL consistently (ptoscano@redhat.com)
  - 1719690: Update to message formatting (wpoteat@redhat.com)
  - cockpit: account for missing insights-client on non-RHEL systems
    (ptoscano@redhat.com)
  - cockpit: skip Insights tests on non-RHEL OSes (ptoscano@redhat.com)
  - ENT-4370: Drop old dbus_interface.py (mhorky@redhat.com)
  - ENT-4278: Drop unittest2 imports (mhorky@redhat.com)
  - 1985845: Fix sub-man service-level --show (jhnidek@redhat.com)
  - spec: drop non-systemd support (ptoscano@redhat.com)
  - spec: drop support for Python < 3 (ptoscano@redhat.com)
  - spec: drop support for Fedora < 33 (ptoscano@redhat.com)
  - spec: drop support for RHEL < 8 (ptoscano@redhat.com)
  - spec: drop support for SUSE < 15 (ptoscano@redhat.com)
  - 2015173: chmod /etc/pki/entitlement/*.pem only when existing
    (ptoscano@redhat.com)
  - cockpit: port subscriptions info icons to PF4 icons (kkoukiou@redhat.com)
  - cockpit: translate some untranslated aria-labels (kkoukiou@redhat.com)
  - cockpit: Port Po2JSONPlugin to webpack 5 (kkoukiou@redhat.com)
  - cockpit: stop including PF3 - it's not used anymore (kkoukiou@redhat.com)
  - cockpit: port Insights dialog remaining non PF4 parts (kkoukiou@redhat.com)
  - cockpit: port subscriptions register dialog to Patternfly 4
    (kkoukiou@redhat.com)
  - cockpit: make default TEST_OS rhel-8-4 (kkoukiou@redhat.com)
  - cockpit: port spinners to PF4 spinners (kkoukiou@redhat.com)
  - cockpit: replace custom Revealer component with 'ExpandableSection' from PF4
    (kkoukiou@redhat.com)
  - cockpit: replace pficon and fa classes with svgs form react-icons
    (kkoukiou@redhat.com)
  - cockpit: remove jquery unused dependency (kkoukiou@redhat.com)
  - cockpit: patternfly is a normal dependency - not just dev
    (kkoukiou@redhat.com)
  - cockpit: update patternfly modules and explicitely specify react-icons
    dependency (kkoukiou@redhat.com)
  - cockpit: clean up package.json from unused dependencies and move to webpack 5
    (kkoukiou@redhat.com)
  - webpack: Use relative resolve path for npm 7 compatibility
    (kkoukiou@redhat.com)
  - cockpit: Stop using a custom Select, use the one from PF instead
    (kkoukiou@redhat.com)
  - cockpit: checkout Cockpit's PF/React/build library instead of keeping a
    direct copy of it locally (kkoukiou@redhat.com)
  - cockpit: update npmshrinkwrap file (kkoukiou@redhat.com)
  - Use pytest --forked for D-Bus unit tests (jhnidek@redhat.com)
  - Support of python3 of zypper rhsm script (suttner@atix.de)
  - 2003777: Fix organizations hint in syspurpose commands (mhorky@redhat.com)
  - Small style changes of d-bus server and d-bus unit tests (jhnidek@redhat.com)
  - * Removed GLib.threads_init() (jhnidek@redhat.com)
  - Added cleanup for one patcher; fixed some comments. (jhnidek@redhat.com)
  - cockpit: skip RHEL 9 tests using insights-client (ptoscano@redhat.com)
  - cockpit: fix system installation of subscription-manager
    (ptoscano@redhat.com)
  - cockpit: wait 5 seconds for candlepin at first (ptoscano@redhat.com)
  - cockpit: use the self-signed key in mock-insights (ptoscano@redhat.com)
  - test: Building requires gcc (mmarusak@redhat.com)
  - test: Tell tests about rhel-9 package manager (mmarusak@redhat.com)
  - facts: drop dead/unused code from CleanupCollector (ptoscano@redhat.com)
  - 1989955: use /proc/device-tree/ibm,partition-uuid on POWER LPARs
    (ptoscano@redhat.com)
  - facts: prepare _get_devicetree_uuid() for multiple files
    (ptoscano@redhat.com)
  - facts: refactor device-tree parts of VirtUuidCollector (ptoscano@redhat.com)
  - cockpit: Move from obsolete node-sass to Dart sass (martin@piware.de)
  - Cloud-what: Make saving token file more robust (jhnidek@redhat.com)
  - Fix redundant API calls to Candlepin (hyu@redhat.com)
  - Remove i-notify watchers on the end of the loop (jhnidek@redhat.com)
  - build: pin flake8 to < 4 (ptoscano@redhat.com)
  - Only rpmlint our specfiles (csnyder@redhat.com)
  - Version our obsoletes of syspurpose and the container plugin
    (csnyder@redhat.com)
  - Remove unnecessary comment and sles/suse tests (csnyder@redhat.com)
  - ENT-4273: Drop usage of six.moves (mhorky@redhat.com)
  - ENT-4379: Remove function make_utf8 (mhorky@redhat.com)
  - ENT-4087: Fix flake8 error E722 (mhorky@redhat.com)
  - make spec file SUSE / Open Build Service compliant (p.seiler@linuxmail.org)
  - 2003777: Only hint organizations if it's needed (mhorky@redhat.com)
  - Drop old GUI docs leftovers (ptoscano@redhat.com)
  - tests: drop no more needed rhsm_display (ptoscano@redhat.com)
  - build: remove old specific check for GUI file (ptoscano@redhat.com)
  - Drop async_utils & its tests (ptoscano@redhat.com)
  - Remove rhsm-icon leftovers (ptoscano@redhat.com)
  - build: remove unused detect_overindent function (ptoscano@redhat.com)
  - build: drop lxml leftovers (ptoscano@redhat.com)
  - build: drop Glade leftovers (ptoscano@redhat.com)
  - Add rhsm proxy support to apt-transport-katello (suttner@atix.de)
  - ENT-4289: Drop Sphinx (mhorky@redhat.com)
  - ENT-4340: Resolve deprecation warnings (mhorky@redhat.com)
  - Fixed one unused import of six (jhnidek@redhat.com)
  - ENT-4272: Remove Python 2 conditionals (mhorky@redhat.com)
  - ENT-4274: Remove six.assert* methods (mhorky@redhat.com)
  - ENT-4275: Switch away from six.BytesIO and six.StringIO (mhorky@redhat.com)
  - ENT-4082: Fix flake8 error E265 (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.21-1
changelog:
  - 2020248: handle server-side consumer deletion in syspurpose commands
    (ptoscano@redhat.com)
  - connection: recognize proxy errors (ptoscano@redhat.com)


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p1-1
changelog:
  - rebase to 1.9.5p1
  Resolves: rhbz#1902758
  - fixed double free in sss_to_sudoers
  Resolves: rhbz#1885874
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1915055
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1915054


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.5p2-1
changelog:
  - rebase to 1.9.5p2
  Resolves: rhbz#1920611
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1920618


author: Zoltan Fridrich <zfridric@redhat.com> - 1.9.5p2-2
changelog:
  - change ldap.conf to sudo-ldap.conf
  Resolves: rhbz#1908882
  - remove /usr/local/* from secure_path
  Resolves: rhbz#1908923
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1916655
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917039
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1917735


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-5
changelog:
  RHEL 9 BETA
  - sync with rhel8 spec
  Resolves: rhbz#1908882
  Resolves: rhbz#1942383
  Resolves: rhbz#1946707
  Resolves: rhbz#1946709
  Resolves: rhbz#1981278


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-7
changelog:
  - utmp resource leak in sudo
  Resolves: rhbz#1986579
  - sudo does not list /etc/dnf/protected.d/sudo.conf in the rpm config files listing
  Resolves: rhbz#1997030
  - sudo uses Recommends for sudo-python-plugin(x86-64) = 1.9.5p2-2.el9 and vim-minimal
  Resolves: rhbz#1947908
  - review of important potential issues detected by static analyzers in sudo-1.9.5p2-2.el9
  Resolves: rhbz#1938879


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Javier Martinez Canillas <javierm@redhat.com> - 6.04-0.13
changelog:
  - Fix a bunch of annocheck problems (pjones)
  - Drop x86_64 ExclusiveArch for tftpboot subpackage
  - Make tftpboot subpackage completely noarch (yselkowi)


author: systemd maintenance team <systemd-maint@redhat.com> - 248-3
changelog:
  - rfkill: don't compare values of different signedness (#1931710)
  - rfkill: fix the format string to prevent compilation error (#1931710)


author: systemd maintenance team <systemd-maint@redhat.com> - 248-5
changelog:
  - Revert "rfkill: fix the format string to prevent compilation error" (#1931710)
  - Revert "rfkill: don't compare values of different signedness" (#1931710)
  - rfkill: add some casts to silence -Werror=sign-compare (#1931710)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-2
changelog:
  - basic/unit-name: do not use strdupa() on a path (#1984299)
  - basic/unit-name: adjust comments (#1984299)
  - tmpfiles: don't create resolv.conf -> stub-resolv.conf symlink (#1989472)
  - Copy 40-redhat.rules from RHEL-8 (#1978639)
  - Avoid /tmp being mounted as tmpfs without the user's will (#1959826)
  - unit: don't add Requires for tmp.mount (#1619292)
  - units: add [Install] section to tmp.mount (#1959826)
  - rc-local: order after network-online.target (#1954429)
  - ci: drop CIs irrelevant for downstream (#1960703)
  - ci: reconfigure Packit for RHEL 9 (#1960703)
  - ci: run unit tests on z-stream branches as well (#1960703)
  - Check return value of pam_get_item/pam_get_data functions (#1973210)
  - random-util: increase random seed size to 1024 (#1982603)
  - journal: don't enable systemd-journald-audit.socket by default (#1973856)
  - journald.conf: don't touch current audit settings (#1973856)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-8
changelog:
  - Really don't enable systemd-journald-audit.socket (#1973856)
  - rules: add elevator= kernel command line parameter (#2003002)
  - boot: don't build bootctl when -Dgnu-efi=false is set (#2003130)
  - unit: install the systemd-bless-boot.service only if we have gnu-efi (#2003130)
  - units: don't enable tmp.mount statically in local-fs.target (#2000927)
  - pid1: bump DefaultTasksMax to 80% of the kernel pid.max value (#2003031)
  - sd-device: introduce device_has_devlink() (#2005024)
  - udev-node: split out permission handling from udev_node_add() (#2005024)
  - udev-node: stack directory must exist when adding device node symlink (#2005024)
  - udev-node: save information about device node and priority in symlink (#2005024)
  - udev-node: always update timestamp of stack directory (#2005024)
  - udev-node: assume no new claim to a symlink if /run/udev/links is not updated (#2005024)
  - udev-node: always atomically create symlink to device node (#2005024)
  - udev-node: check stack directory change even if devlink is removed (#2005024)
  - udev-node: shorten code a bit and update log message (#2005024)
  - udev-node: add random delay on conflict in updating device node symlink (#2005024)
  - udev-node: drop redundant trial of devlink creation (#2005024)
  - udev-node: simplify the example of race (#2005024)
  - udev-node: do not ignore unexpected errors on removing symlink in stack directory (#2005024)
  - basic/time-util: introduce FORMAT_TIMESPAN (#2005024)
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - set core ulimit to 0 like on RHEL-7 (#1998509)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-9
changelog:
  - test: don't install test-network-generator-conversion.sh w/o networkd (#2017035)
  - meson.build: change operator combining bools from + to and (#2017035)
  - openssl-util: use EVP API to get RSA bits (#2016042)
  - procfs-util: fix confusion wrt. quantity limit and maximum value (#2017035)
  - test-process-util: also add EROFS to the list of "good" errors (#2017035)
  - ci: use C9S chroots in Packit (#2017035)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#2017035)
  - core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2019468)
  - Drop Patch9001 - https://github.com/systemd/systemd/pull/17050 - Replaced by Patch0046


author: Jeff Law <law@redhat.com> - 1:1.9.11-5
changelog:
  - Re-enable -Wstringop-overflow and instead make the problematical
    pointer volatile to avoid the false positive diagnostic


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-1
changelog:
  - The patches are for SSL3 compatibility. These can probably be
    removed when upstream tboot fully implements SSL3.
  - Upgrade to latest upstream.
  - Remove trousers dependency.
    Resolves: rhbz#1922002
    Resolves: rhbz#1870520
    Resolves: rhbz#1927374


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-2
changelog:
  - Bump the NVR as a result of including the gating.yaml file in
    the git repo.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-3
changelog:
  - Add the -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection and -Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  macros to assure the
    build meets RHEL security requirements.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-4
changelog:
  - From Miroslave Vadkerti:
    Onboarding tests to RHEL9 in BaseOS CI requires action, adding
    test configuration in our "dispatcher" configuration for RHEL9:
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/blob/production/brew-dispatcher-rhel9.yaml
    Test config was added for tboot in the following MR.
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/-/merge_requests/2686
    Resolves: rhbz#1922002


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: John Kacur <jkacur@redhat.com> - 0.15-1
changelog:
  - Rebase to tuna-0.15
  - This includes changes to remove the python-schedutils dependency
  Resolves: rhbz#1890541


author: John Kacur <jkacur@redhat.com> - 0.15-2
changelog:
  - Remove python3-schedutils from the Requires in the spec file
  - Update the URL in the spec file
  Resolves: rhbz#1890541


author: John Kacur <jkacur@redhat.com> - 0.16-5
changelog:
  - Make it clear in online help and man pages that --include and --isolate
    affect IRQs as well as threads
  Resolves: rhbz#2022142


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.15.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1874052
    - added plugin service for linux services control
      resolves: rhbz#1869991
    - scheduler: added default_irq_smp_affinity option
      resolves: rhbz#1896348
    - bootloader: skip boom managed BLS snippets
      resolves: rhbz#1901532
    - scheduler: added perf_process_fork option to enable processing of fork
      resolves: rhbz#1894610
    - scheduler: added perf_mmap_pages option to set perf buffer size
      resolves: rhbz#1890219
    - bootloader: fixed cmdline duplication with BLS and grub2-mkconfig
      resolves: rhbz#1777874


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1944643
    - realtime: disabled kvm.nx_huge_page kernel module option in
      realtime-virtual-host profile
      resolves: rhbz#1976825
    - realtime: explicitly set 'irqaffinity=~<isolated_cpu_mask>' in kernel
      command line
      resolves: rhbz#1974820
    - scheduler: added abstraction for the sched_* and numa_* variables which
      were previously accessible through the sysctl
      resolves: rhbz#1952687
    - recommend: fixed wrong profile on ppc64le bare metal servers
      resolves: rhbz#1959889


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-3
changelog:
  - scheduler: allow exclude of processes from the specific cgroup(s)
    Resolves: rhbz#1980715
  - Switched to the configparser from the configobj
    Resolves: rhbz#1936386


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.17.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2003838
    - cpu-partitioning: fixed no_balance_cores on newer kernels
      resolves: rhbz#1874596


author: Patsy Griffin <patsy@redhat.com> - 2020b-1
changelog:
  - Rebase to tzdata-2020b
    - Yukon timezones represented by America/Whitehorse and
      America/Dawson will change time zone rules from -08/-07 to
      permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
    - The most recent winter(+08)/summer(+11) transition for Casey Station,
      Antarctica was 2020-10-04 00:01.
    - Remove obsolete files pacificnew, systemv, and yearistype.sh
      from the distribution.


author: Patsy Griffin <patsy@redhat.com> - 2020d-1
changelog:
  - Rebase to tzdata-2020d including changes from tzdata-2020c
    - Palestine will end summer time on 2020-10-24 rather than the
      predicted 2020-10-31.
    - Fiji starts DST later than usual, on 2020-12-20.
    - Rearguard now provides an empty file pacificnew to support
      downstream software that expects it.


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c - supersedes tzdata-2021b
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.
    - Includes changes in tzdata-2021b:
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Sérgio Basto <sergio@serjux.com> - 2.6.0-3
changelog:
  - Use make macros (https://src.fedoraproject.org/rpms/usb_modeswitch/pull-request/1)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Sérgio Basto <sergio@serjux.com> - 2.6.1-1
changelog:
  - Update usb_modeswitch to 2.6.1
  - Drop patch1, http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?f=2&t=2733
  - Drop BR jimtcl-devel, if we don't install dynlink-dispatcher


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: Karel Zak <kzak@redhat.com> - 2.36.1-2
changelog:
  - remove unused patches
  - remove versions and seq.numbers from patch names
  - fix mount "symfollow" issue (upstream patch)


author: Karel Zak <kzak@redhat.com> - 2.36.2-1
changelog:
  - upgrade to stable upstream 2.36.2
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36.2-ReleaseNotes


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-1
changelog:
  - Rebased to upstream candidate.
  - Resolves: rhbz#1955374
  - Removed all python based tools, and all management should now be done with
    LVM.
  - Resolves: rhbz#1949159
  - vdostats is now a C program
  - Resolves: rhbz#1972302


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-6
changelog:
  - 2011412 - test suite fails on apache/httpd filetype tests
  - 2011424 - Remove vim-7.4-syncolor.patch
  - 2011429 - Remove downstream patch vim-7.4-nowarning.patch
  - 2011749 - Update test suite to work without default mouse behavior
  - 2002320 - CVE-2021-3770 vim: using retab with large value may lead to heap buffer overflow [rhel-9.0]
  - 2004893 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-9.0]
  - 2004976 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-8
changelog:
  - 2016202 - CVE-2021-3872 vim: heap-based buffer overflow in win_redr_status() drawscreen.c [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028342 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028431 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-9.0]


author: John W. Linville <linville@redhat.com> - 2019.06.03-5
changelog:
  - Remove patch preventing install of regulatory.bin.5 man page
  - Include regulatory.bin.5 man page in distributed files


author: Petr Kubat <pkubat@redhat.com> - 5.2.4-7
changelog:
  - Use relative path for COPYING files so that rpm moves them to correct place
    Related: rhbz#1741074


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


